Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/16F058AE63C211EDA872B77DC4F9AE02.roa
File: 16F058AE63C211EDA872B77DC4F9AE02.roa (raw, json)
Hash identifier: L1VsArh0VMcTaFBz0wIZgfQq0TOFRq27/ParloF2I1M=
Subject key identifier: F9:D9:AD:B3:C2:AC:BF:18:99:96:7E:D7:7A:9A:3C:8D:90:3C:03:6B
Certificate issuer: /CN=A9112571/serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2
Certificate serial: 09
Authority key identifier: 7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/16F058AE63C211EDA872B77DC4F9AE02.roa
Signing time: Tue 15 Nov 2022 10:34:06 +0000
ROA not before: Tue 15 Nov 2022 10:34:06 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 150342
IP address blocks: 103.17.4.0/24 maxlen: 24
103.17.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112571/serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2
Validity
Not Before: Nov 15 10:34:06 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=63736b1d-f08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:67:4a:f1:4d:83:1c:67:4b:84:9c:3f:be:03:
12:b2:8d:cf:e9:42:ba:fe:cd:bb:7b:d0:f3:63:93:
4a:5d:99:41:67:86:83:d0:3b:63:a3:65:97:ac:5a:
62:60:39:20:e6:df:1f:20:f0:01:ed:60:a5:b3:4a:
2d:42:c7:0f:50:6b:aa:a4:8e:51:16:3d:2e:5f:ee:
d2:e3:00:ec:59:84:e5:44:5d:7b:47:a3:55:78:c8:
83:87:88:aa:e7:cf:32:35:42:bc:ac:da:41:f4:1a:
79:28:5c:cf:82:74:14:8e:59:5d:74:be:67:0d:f4:
85:30:10:57:a1:44:fd:20:9b:ac:4a:8c:61:f9:1f:
4e:37:c9:78:c6:6c:b8:57:c2:71:02:82:0d:13:38:
7d:50:b5:73:9f:7f:fb:39:17:92:ae:59:63:97:16:
c0:ca:c7:fb:da:fd:b8:d9:a6:23:29:9a:37:90:fb:
e8:c6:e8:61:70:4e:f6:0b:06:3e:ce:bf:5f:8f:5e:
ec:01:6a:ac:0e:fd:b5:9b:b6:d1:61:48:fb:9d:50:
a7:25:24:bf:4e:35:80:20:90:02:db:f3:98:32:e6:
69:b6:a3:97:ce:f9:08:9e:73:9d:fd:1f:ec:f7:69:
26:7a:e4:75:60:db:70:89:5d:3f:56:28:ca:5d:77:
73:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D9:AD:B3:C2:AC:BF:18:99:96:7E:D7:7A:9A:3C:8D:90:3C:03:6B
X509v3 Authority Key Identifier:
keyid:7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/16F058AE63C211EDA872B77DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.17.4.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:b4:fa:a5:90:c8:cd:ca:44:ca:f2:98:ea:d2:2f:3c:cd:25:
1e:ea:19:5f:4d:9b:6c:c5:b2:3b:54:ab:54:87:fe:44:c5:20:
d3:02:8e:7b:0b:6c:a1:05:a1:7b:56:9a:d0:eb:9e:64:d1:99:
65:93:0f:17:5d:cf:32:76:3c:fe:bc:19:09:0f:1b:8a:cb:ee:
de:67:b4:9b:3b:c5:dc:df:54:bd:6f:f1:78:69:0c:29:0d:70:
0d:34:49:2e:2e:e5:1a:35:ae:ca:98:88:84:92:70:13:f5:90:
da:f8:7e:2b:04:36:df:9e:1c:ac:98:c0:fa:7e:7a:96:07:ed:
38:43:95:9e:0b:73:c5:d5:1f:27:81:ff:e9:5d:4f:04:47:1c:
2c:e4:07:f0:47:61:db:b7:db:a9:79:11:97:9d:4b:e1:c2:b1:
ce:83:6c:41:43:da:52:ea:18:bc:7e:69:94:96:d3:6b:30:a3:
bb:a7:6b:dd:d6:d6:92:5e:97:ec:27:78:f4:df:ef:2f:a7:42:
17:0b:8e:7a:3d:6c:e7:c1:61:e5:7d:87:51:79:0b:4d:25:9b:
a0:d6:41:16:01:bd:74:56:10:a8:de:3a:f6:44:ad:eb:04:94:
89:b3:06:da:e7:74:55:99:49:ed:e3:45:41:35:b9:f9:86:8f:
3b:50:5b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-fra.rpki-client.org