Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/499D459C92A611EDB79C4923C4F9AE02.roa
File: 499D459C92A611EDB79C4923C4F9AE02.roa (raw, json)
Hash identifier: vX4wNNg668pjqj7bczknczgFrzUWXZGsmEChyVMy93Q=
Subject key identifier: 88:DF:69:F0:AA:A1:DD:10:57:71:23:F6:5C:54:BA:9F:CD:E6:A2:A7
Certificate issuer: /CN=A9113BE5/serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8
Certificate serial: 0176
Authority key identifier: 36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/499D459C92A611EDB79C4923C4F9AE02.roa
Signing time: Sat 19 Aug 2023 03:03:50 +0000
ROA not before: Sat 19 Aug 2023 03:03:50 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 150180
IP address blocks: 103.189.236.0/24 maxlen: 24
103.189.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374 (0x176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113BE5/serialNumber=3646EB1F370B7E63D1F36DEB36C2476C96E6BAE8
Validity
Not Before: Aug 19 03:03:50 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64e03115-256a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:90:f4:73:23:5d:e4:fc:5b:43:da:d3:60:
da:6b:03:5f:67:de:58:36:54:57:40:57:12:50:63:
4f:bb:d9:c2:b4:7e:3f:27:9a:fd:6c:ef:b5:7e:94:
aa:1f:db:37:db:c1:b4:32:cd:80:cb:ef:12:75:62:
11:79:03:4b:ad:4c:c8:77:14:38:31:56:2e:91:1b:
fb:22:8e:10:1d:3e:af:3b:70:bb:e3:fb:9b:df:ab:
c7:c3:ae:20:da:2e:54:f8:ae:d8:ec:d7:22:5a:72:
fa:ab:60:9f:c0:3c:21:0e:6b:bb:fc:c6:4a:45:28:
3d:cf:cf:4a:33:7f:0f:76:c2:a2:bc:47:27:f2:e4:
ae:41:f3:f3:9f:17:32:57:88:cf:d6:d8:7c:23:5a:
48:17:6e:95:82:9a:01:e8:fa:fb:a5:d7:70:06:9b:
c9:00:14:f8:4f:d5:17:a3:19:e9:43:5d:e9:14:cf:
8e:0f:18:2d:30:e9:a0:46:83:88:88:dd:de:8c:c3:
a9:24:73:c2:8b:05:00:b0:9b:f7:c6:57:66:5f:18:
2e:9e:ec:8b:72:79:60:af:a8:16:ac:e3:69:c9:7f:
b6:6a:de:65:da:de:67:20:ab:29:1c:08:af:ec:c9:
a9:c8:2c:d2:97:09:19:1e:34:60:0d:77:58:d3:c9:
1f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DF:69:F0:AA:A1:DD:10:57:71:23:F6:5C:54:BA:9F:CD:E6:A2:A7
X509v3 Authority Key Identifier:
keyid:36:46:EB:1F:37:0B:7E:63:D1:F3:6D:EB:36:C2:47:6C:96:E6:BA:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/NkbrHzcLfmPR823rNsJHbJbmuug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkbrHzcLfmPR823rNsJHbJbmuug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BE5/611C512CF0F311EC84B29C80C4F9AE02/499D459C92A611EDB79C4923C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.236.0/23
Signature Algorithm: sha256WithRSAEncryption
62:2d:99:67:ca:54:b9:df:14:c0:40:34:75:21:7d:0c:95:47:
f5:2b:9b:a2:ae:cc:66:a2:98:ea:d5:11:47:4a:7b:f0:82:2f:
9a:f2:50:32:01:e7:49:dc:f6:86:c2:21:94:33:59:ef:a0:c6:
04:25:d4:31:79:dc:7e:48:3d:f8:f7:e9:17:49:40:6a:19:29:
61:4c:19:ed:3f:3c:20:a5:ef:71:5b:b3:5a:11:cd:f5:1d:53:
19:9d:15:ce:c2:c3:07:a4:9d:d1:7c:99:ae:7b:63:03:00:cd:
df:dd:f8:37:88:76:b5:f4:c2:73:e3:66:c2:b0:a8:6f:a7:c1:
16:29:2b:61:8d:87:7b:f9:2f:a4:98:bf:aa:39:ec:89:ee:3e:
ef:dc:bb:53:da:32:a3:16:91:a1:7f:a0:4d:ba:2d:92:a7:3b:
ac:ef:7f:5e:ef:dc:bd:89:54:2f:b4:15:cf:ce:db:b6:cc:d7:
50:2b:3e:62:be:51:96:96:df:56:c7:75:d7:9e:be:95:a9:bf:
c8:e7:8b:4e:d7:7b:ed:f7:91:b4:c5:d3:5e:cf:99:ce:f4:04:
57:f5:2c:75:84:61:15:60:97:21:cd:de:2d:9e:9d:d5:32:9f:
7a:54:cb:d8:5a:ea:9c:83:d1:95:2b:07:1f:a4:bd:9a:c2:2e:
72:32:38:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 06:51:00 2023 by rpki-client on console-fra.rpki-client.org