Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/38910520017A11EE983D3C12C4F9AE02.roa
File: 38910520017A11EE983D3C12C4F9AE02.roa (raw, json)
Hash identifier: 4Cfmnulb7VhsGfCGaVwFL9iCxYFukEs/iS7WksbTIpY=
Subject key identifier: D4:80:C5:49:5A:68:17:FD:E1:11:D2:F6:1A:DD:AD:7F:FD:08:DD:8A
Certificate issuer: /CN=A9110321/serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E
Certificate serial: 03
Authority key identifier: C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/38910520017A11EE983D3C12C4F9AE02.roa
Signing time: Fri 02 Jun 2023 19:18:14 +0000
ROA not before: Fri 02 Jun 2023 19:18:14 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 137450
IP address blocks: 103.212.160.0/24 maxlen: 24
103.212.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110321/serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E
Validity
Not Before: Jun 2 19:18:14 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=647a4076-fe1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:48:d2:5e:c9:1f:f6:50:90:82:97:d0:a7:
7f:13:39:39:35:67:77:6b:dc:61:05:2a:57:05:f4:
e8:fd:6d:df:6a:79:38:6a:f2:36:a8:20:f2:58:00:
69:4f:37:30:30:fe:0e:c5:37:7a:7c:f6:dc:0f:75:
a9:5b:22:68:03:3a:d8:6b:33:c5:0c:64:92:c6:7f:
2c:2c:cb:0c:6d:02:9f:80:68:96:fb:55:d0:26:1e:
be:e5:c9:2f:da:43:2c:f7:a6:fe:b7:f7:47:23:94:
01:3c:71:22:4f:42:48:9e:21:7d:e8:a6:8a:92:a1:
21:01:bb:4d:d1:ed:42:4a:bc:e2:4d:56:d7:27:b8:
14:9e:f1:88:88:78:2d:03:b7:3c:f6:41:f1:24:48:
83:af:82:12:c0:d9:42:2e:0c:c9:0b:4a:6d:7c:e8:
44:d6:53:01:16:dc:2e:1e:10:14:49:58:bc:a0:9d:
d3:9d:7c:b0:24:93:1c:84:32:25:bf:68:79:07:07:
65:cd:97:46:c8:c4:25:6c:f5:21:ec:18:8c:0d:f2:
5c:36:69:45:1c:a2:2c:37:cc:60:a2:44:92:bf:7f:
cb:c1:1f:e4:c7:37:59:b4:89:07:a7:c2:d9:da:3f:
b3:eb:8d:ff:18:bc:74:d5:bf:51:72:8a:ad:71:ce:
bd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:80:C5:49:5A:68:17:FD:E1:11:D2:F6:1A:DD:AD:7F:FD:08:DD:8A
X509v3 Authority Key Identifier:
keyid:C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/38910520017A11EE983D3C12C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.212.160.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:2b:f9:80:42:fa:37:9c:2b:17:71:c0:1f:f5:60:da:cd:bc:
ea:44:ef:ed:cf:c3:c6:7a:e9:03:7c:4a:e0:41:01:a4:a8:04:
b4:3a:b6:0f:d2:df:95:15:8b:0a:3d:7e:91:3b:91:b1:d7:fd:
88:ff:3f:e5:bf:6a:09:60:90:25:00:ea:95:30:78:97:05:6a:
4c:35:47:10:97:f9:84:2b:cf:62:f9:87:c0:19:2f:32:d8:ad:
80:20:f6:b9:97:a5:b3:84:07:ed:89:e2:89:dd:57:b9:aa:54:
02:16:4d:50:64:b3:5f:e6:38:8a:c4:2e:70:09:5d:61:06:15:
6c:ad:9b:1e:c7:a9:2c:b7:85:37:8a:51:4b:40:cd:07:52:14:
07:0b:fc:3f:1c:cd:1d:40:10:56:a4:7d:0b:ba:68:be:a5:a9:
8c:57:b8:db:20:94:37:5b:51:df:ca:18:76:34:10:96:a2:d8:
c4:ff:ac:09:09:31:b7:97:dd:62:89:f7:bb:ff:d6:69:1f:34:
91:85:9d:e0:4d:6f:5e:de:d3:cc:5c:ff:0d:3f:12:f7:9b:43:
f5:9c:c6:cc:9d:89:dc:38:f2:22:55:8f:6c:d1:1e:05:1b:be:
e7:26:ff:0d:1f:17:35:31:2e:25:30:5f:e4:55:22:ba:e3:c6:
39:7a:f7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 23 08:40:30 2023 by rpki-client on console-fra.rpki-client.org