Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/D3F811D644E911EE975F961FC4F9AE02.roa
File: D3F811D644E911EE975F961FC4F9AE02.roa (raw, json)
Hash identifier: 0b6TkSa89+o0vRQ9Oejmcr/5IVJX4gRykj6imJnFNko=
Subject key identifier: F5:B2:0F:41:26:CF:68:63:12:C4:E1:6D:12:96:9E:31:5E:AB:A3:0A
Certificate issuer: /CN=A9117373/serialNumber=61841D1EDABF9FF0F6018C611017AF719627A24D
Certificate serial: 039E
Authority key identifier: 61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/D3F811D644E911EE975F961FC4F9AE02.roa
Signing time: Sun 27 Aug 2023 14:55:57 +0000
ROA not before: Sun 27 Aug 2023 14:55:57 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 15731
IP address blocks: 103.101.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 926 (0x39e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117373/serialNumber=61841D1EDABF9FF0F6018C611017AF719627A24D
Validity
Not Before: Aug 27 14:55:57 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=64eb63fd-db24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:3f:7d:85:d3:09:a3:88:4d:df:7e:7a:1d:
4e:d3:46:52:0b:4a:43:55:3a:f9:38:e4:b8:1c:c5:
d9:13:c6:3a:b9:ad:dc:ef:07:a1:a9:28:1b:a3:1c:
d9:e4:58:5c:60:40:93:33:df:4b:fe:7d:83:65:81:
08:8f:22:59:5d:b4:43:c8:85:c9:96:08:3d:7d:93:
87:42:42:d8:1e:62:5a:19:69:38:3b:8d:30:98:46:
1b:04:10:84:a2:d2:ac:4e:88:58:47:f7:50:da:2d:
89:23:e6:6a:47:fd:11:fa:5a:ed:0f:17:18:98:b0:
fc:23:87:7e:46:87:3a:1a:12:18:ba:43:13:09:ca:
40:6b:df:27:7c:dd:d0:a3:fd:7c:ac:05:99:4c:6f:
7c:38:ef:bb:6f:04:a4:e8:af:b9:26:e8:b2:58:f0:
43:a1:f0:98:68:de:8d:81:4a:59:91:e3:2a:bc:9b:
31:6d:9c:38:ad:8c:9d:93:23:6e:38:86:22:94:be:
18:85:54:38:d8:7c:78:e9:70:2a:26:82:3f:81:6d:
06:59:c9:1a:96:33:ec:6f:30:f1:c0:42:6c:b5:dd:
79:dc:ca:9c:21:56:a1:a8:38:69:86:53:2c:01:65:
af:e2:f6:96:40:db:87:64:d7:15:2f:79:09:fb:56:
e2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B2:0F:41:26:CF:68:63:12:C4:E1:6D:12:96:9E:31:5E:AB:A3:0A
X509v3 Authority Key Identifier:
keyid:61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/D3F811D644E911EE975F961FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.84.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:b8:f5:6d:56:c0:d1:9f:16:8f:08:df:2d:73:10:db:d0:29:
23:fc:6e:80:5f:af:c2:10:5a:ac:51:11:83:43:bb:cd:87:37:
d9:9f:d8:0a:6d:e4:07:ca:1a:bc:6e:27:96:26:46:80:f5:82:
6a:fa:a3:ad:f0:cb:2e:de:82:48:63:9a:3a:cf:74:50:24:74:
81:57:50:65:66:6a:ba:68:23:83:03:94:f8:9b:51:7e:ec:1c:
c0:27:86:37:c8:39:14:f8:5a:25:1a:5e:e5:b1:c5:96:50:cd:
f3:47:45:4c:61:2a:9a:d3:26:df:e9:18:ad:15:16:60:84:6d:
3f:a1:93:f2:e9:5d:5f:ca:5b:09:2d:ae:3d:ed:3e:28:a9:5b:
cf:cb:74:c8:90:6e:1d:15:54:a1:71:65:46:f5:61:27:e9:e2:
7f:36:04:4b:f9:7b:25:e0:01:2a:09:1d:ef:14:c8:c3:f8:90:
5c:68:bb:3d:a4:67:f8:51:5f:52:f3:27:92:7b:04:97:0f:c7:
9d:d2:b7:1d:0e:d1:bf:3b:19:77:7f:71:88:20:67:70:71:13:
21:86:e1:0e:4d:44:68:d3:78:9a:f3:50:cb:f9:e3:52:4d:d6:
e2:d2:59:9f:73:d6:84:45:77:26:10:c8:a1:79:88:fd:54:34:
f1:9a:0b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 10:19:53 2023 by rpki-client on console-fra.rpki-client.org