Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/CE252FB4788911ED930F2C3FC4F9AE02.roa
File: CE252FB4788911ED930F2C3FC4F9AE02.roa (raw, json)
Hash identifier: 8m2kQ11UYXAd+gLBCP5kzG2YndhuJSC6wPxkWYF1xcA=
Subject key identifier: 4A:44:B9:AF:CA:BA:63:E1:50:40:57:7B:A5:E0:B6:7D:7C:94:2F:87
Certificate issuer: /CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A
Certificate serial: 02
Authority key identifier: 1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/CE252FB4788911ED930F2C3FC4F9AE02.roa
Signing time: Sat 10 Dec 2022 12:54:38 +0000
ROA not before: Sat 10 Dec 2022 12:54:38 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 150669
IP address blocks: 103.51.52.0/23 maxlen: 23
103.51.52.0/24 maxlen: 24
103.51.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A
Validity
Not Before: Dec 10 12:54:38 2022 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=6394818e-17f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b4:0c:6f:ec:5a:fe:4a:cf:76:ec:3a:1f:93:
fa:ba:51:04:2b:66:9d:b0:ae:ba:1f:1e:71:28:fb:
e4:f2:fe:b4:da:86:ec:01:39:24:ca:3f:12:4e:25:
74:e6:d4:df:5a:9b:4c:14:11:9f:6d:5c:38:d9:4f:
84:b3:34:d3:38:bd:09:07:5e:7a:6c:9c:35:0e:0d:
e0:8d:9e:0d:60:61:d1:8c:cc:ac:96:8f:18:c1:b8:
21:27:99:c9:90:0e:8f:9a:c9:8d:36:48:83:a4:f8:
bd:48:3c:db:98:e7:12:2b:06:f6:14:ff:82:0f:21:
81:9a:55:58:a4:23:64:e4:0b:90:fd:8b:48:28:e4:
37:c2:98:c4:26:72:31:e0:c3:77:f3:53:db:7b:9a:
9e:8a:1c:c2:60:58:6f:e6:bd:f9:87:eb:e7:e4:3b:
fd:51:db:ce:86:5f:90:52:ef:de:16:c8:92:cb:00:
58:19:be:92:86:2c:20:28:3f:9d:68:6b:be:10:1e:
99:17:1d:56:8d:ee:40:7b:75:7a:9e:2f:8b:12:be:
bf:d7:da:96:94:f0:33:0c:1b:14:0e:55:58:4b:68:
ef:a6:7b:e1:f7:09:24:5c:d9:4a:47:9a:5c:a2:2e:
da:0c:3c:43:9c:1c:31:f8:55:4a:26:81:07:63:75:
2d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:44:B9:AF:CA:BA:63:E1:50:40:57:7B:A5:E0:B6:7D:7C:94:2F:87
X509v3 Authority Key Identifier:
keyid:1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/CE252FB4788911ED930F2C3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.51.52.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:ac:bc:5d:c5:13:40:84:96:ce:81:36:5a:49:de:73:9e:a8:
44:fe:d0:8c:bd:71:07:a7:e9:fd:81:32:75:87:4a:7b:1b:ab:
1d:d2:78:0c:92:81:1d:d9:03:b9:e5:d2:1a:e4:be:a7:af:57:
1f:ba:70:b8:c8:a4:d7:a6:d2:90:38:82:dc:08:fe:ff:5a:03:
23:45:87:c3:dc:31:3a:e5:9a:1d:70:6f:b9:02:82:ab:df:e0:
eb:b0:9a:a9:ce:c2:47:9b:83:39:31:60:bb:e5:5a:15:83:7d:
d0:ba:1d:61:dd:87:c8:01:c9:32:ec:9d:8e:39:25:3a:72:e8:
3f:7b:bd:f4:73:7f:68:06:bc:c1:09:3b:e2:62:39:87:8c:08:
9a:16:1a:e7:6a:12:a9:bb:63:67:c0:9d:d7:bd:3b:22:e8:c4:
ed:4e:ed:3d:29:f2:06:dd:96:a7:70:f2:83:89:4c:57:72:db:
27:d8:32:56:0b:8c:16:26:43:fb:63:c0:ca:a6:6a:5a:06:14:
f0:f0:1b:45:a6:0e:ce:2c:99:47:0d:d1:8f:69:14:92:05:2a:
89:ed:54:24:5c:6b:14:aa:22:27:ce:da:b3:22:e7:26:cd:44:
b6:c5:a9:f9:71:c7:dd:1f:e7:1b:97:0e:a8:38:a9:69:5e:5b:
95:a5:86:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-fra.rpki-client.org