Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/8A01F65AFE7311EB8FF2D172C4F9AE02.roa
File: 8A01F65AFE7311EB8FF2D172C4F9AE02.roa (raw, json)
Hash identifier: zJGi4mHshGe4hWpXC56I/jvuNyqwvGDl+pTlUpjdCFg=
Subject key identifier: E2:1A:0E:96:84:82:AF:E1:4D:EE:AF:55:FB:88:EF:5B:9E:80:8A:71
Certificate issuer: /CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03
Certificate serial: 039A
Authority key identifier: 92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/8A01F65AFE7311EB8FF2D172C4F9AE02.roa
Signing time: Tue 04 Apr 2023 09:42:47 +0000
ROA not before: Tue 04 Apr 2023 09:42:47 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 140344
IP address blocks: 103.230.56.0/24 maxlen: 24
103.230.58.0/24 maxlen: 24
103.230.58.100/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 922 (0x39a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03
Validity
Not Before: Apr 4 09:42:47 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=642bf116-c9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:83:ed:66:a8:25:b1:71:c5:4f:3d:64:8f:
14:15:72:df:84:92:c5:c6:9b:bf:7c:94:fc:c5:02:
7d:33:a2:51:1c:86:46:8c:70:3e:c2:12:46:53:78:
46:a9:3b:93:83:92:7b:b8:91:f1:e9:72:d5:de:6f:
98:fd:ea:d5:ee:a9:fb:ce:a1:3b:2e:e8:62:81:69:
5b:e2:73:7f:13:5c:93:f2:20:79:1a:41:a7:0d:5f:
0f:32:fa:d7:e0:f6:24:29:c2:3e:43:10:a0:19:fd:
b1:3f:b6:6b:bf:57:69:2c:22:c8:a1:dc:3a:8b:54:
b8:11:ba:77:ba:05:bc:63:2b:1e:b3:18:08:26:d0:
46:6d:81:74:2e:d9:f8:79:f5:d5:f7:fe:dd:b8:2e:
94:fb:d9:65:29:af:40:4d:f6:78:c9:0e:a5:45:13:
b4:3c:d8:a6:86:b2:6d:bd:c5:b2:a7:ab:bd:0d:ec:
3d:a2:6a:52:b0:a3:10:00:6d:a1:1b:80:21:0e:e7:
ab:84:22:2e:28:78:77:04:27:e9:dd:0b:72:21:49:
aa:6e:a2:54:d8:b8:1a:5b:ea:57:9d:34:d7:9b:6b:
7e:14:59:b3:2d:d4:9d:99:13:87:1a:74:92:93:07:
76:c7:2c:67:95:53:8b:c8:55:fb:e0:50:7e:9a:94:
0e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1A:0E:96:84:82:AF:E1:4D:EE:AF:55:FB:88:EF:5B:9E:80:8A:71
X509v3 Authority Key Identifier:
keyid:92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/8A01F65AFE7311EB8FF2D172C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.56.0/24
103.230.58.0/24
Signature Algorithm: sha256WithRSAEncryption
86:56:dd:e3:b9:18:f8:b9:7f:64:fa:59:d9:2f:04:8e:02:87:
c4:a9:72:71:6a:c0:54:06:91:c1:23:40:7d:8f:3a:71:0a:f9:
85:58:c3:4d:24:70:46:b6:89:02:79:93:c5:db:34:1c:9f:c7:
00:a9:f0:76:62:dd:a1:b9:e1:5c:49:47:a9:ca:54:6c:87:1d:
14:b9:ef:8a:54:74:17:62:ac:df:0b:c7:35:88:09:3d:b8:26:
00:09:3b:fd:b1:59:55:88:43:1c:63:96:88:d2:ca:b0:5e:81:
b6:1b:a8:c6:7e:7a:be:48:4f:ae:1b:10:85:cb:10:f4:a6:d4:
fb:91:3f:73:c6:5c:4d:b5:f8:db:e1:3e:50:f2:42:b9:57:f3:
02:5e:f0:88:d7:9d:85:48:03:15:1d:54:f9:66:af:42:fa:6e:
0f:2d:5c:96:a7:74:c4:69:30:1e:32:14:ee:3f:b5:71:fd:e2:
84:01:01:14:97:0b:9d:41:ce:85:0c:1f:cb:07:74:b7:a6:b0:
0a:db:91:93:0f:c4:4b:e5:c9:78:b7:e3:f2:3d:b8:79:63:0f:
2c:00:11:f6:04:1d:99:7b:99:9d:5f:16:3e:58:89:32:73:b2:
fc:d1:27:28:ab:3a:e5:6d:68:e4:0a:43:de:f7:9b:76:93:05:
65:e3:fa:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-fra.rpki-client.org