Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/47AF0A22A45311EDA658083FC4F9AE02.roa
File: 47AF0A22A45311EDA658083FC4F9AE02.roa (raw, json)
Hash identifier: vbiu6NFGLITBa4SITAyqGB07tuAZkFnqDopemvvI0og=
Subject key identifier: A0:52:CD:BE:CD:94:21:41:E4:58:6A:31:1D:EB:EB:66:6B:C2:4B:19
Certificate issuer: /CN=A911E369/serialNumber=FE1391C0B226C8CEBFA4A2AD6696AE4B82BF7E27
Certificate serial: 18
Authority key identifier: FE:13:91:C0:B2:26:C8:CE:BF:A4:A2:AD:66:96:AE:4B:82:BF:7E:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/47AF0A22A45311EDA658083FC4F9AE02.roa
Signing time: Sat 04 Feb 2023 06:15:11 +0000
ROA not before: Sat 04 Feb 2023 06:15:11 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 140849
IP address blocks: 103.60.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E369/serialNumber=FE1391C0B226C8CEBFA4A2AD6696AE4B82BF7E27
Validity
Not Before: Feb 4 06:15:11 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63ddf7ef-c85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6a:bf:85:e9:b6:12:a6:7d:90:7b:18:f8:14:
6e:84:25:52:8f:19:a1:fc:9a:78:a5:7e:f3:ce:8a:
7d:17:9c:eb:e1:da:40:b6:6e:f7:4f:6d:9d:93:fd:
ed:35:14:ab:79:36:41:23:14:b9:98:da:be:99:30:
5c:31:0f:b5:d8:a5:ce:8f:64:63:24:47:25:3b:ec:
35:f8:eb:9d:c3:de:d9:c3:84:da:36:68:28:36:31:
ca:47:47:5a:ca:d0:0e:ad:70:bc:3f:56:ed:5c:f4:
ea:85:70:4f:f2:8b:94:f0:84:35:90:c4:57:cc:7a:
46:27:66:92:23:d2:9c:9a:5a:c4:af:5e:bf:ba:ab:
23:2a:e2:3f:1a:89:13:52:23:c1:55:cf:5c:8f:48:
01:c0:5a:52:00:6d:52:4b:d2:cc:06:85:48:ac:39:
95:3b:ef:bf:3e:d8:53:c8:d8:c2:59:60:58:34:87:
cc:45:ae:bf:43:8b:9a:42:08:2c:94:95:2e:55:8a:
ea:c7:ef:73:dc:ff:e5:c7:68:98:dd:26:71:47:49:
a2:8a:af:11:38:06:64:1c:e4:36:fd:1d:c8:f9:b3:
bf:6e:70:80:af:88:cb:ba:02:4f:9a:b7:65:98:a5:
53:51:7b:9b:45:90:51:4f:3b:3f:01:ef:17:c9:fe:
5f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:52:CD:BE:CD:94:21:41:E4:58:6A:31:1D:EB:EB:66:6B:C2:4B:19
X509v3 Authority Key Identifier:
keyid:FE:13:91:C0:B2:26:C8:CE:BF:A4:A2:AD:66:96:AE:4B:82:BF:7E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/_hORwLImyM6_pKKtZpauS4K_fic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hORwLImyM6_pKKtZpauS4K_fic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E369/0E2FB3C888D811ED9B85E548C4F9AE02/47AF0A22A45311EDA658083FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.60.7.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:34:b4:2f:8c:75:42:96:6a:a6:07:68:8e:92:f0:68:be:53:
24:5c:0e:94:3a:6e:79:63:56:26:5d:fe:55:f7:eb:9b:c2:06:
41:33:f8:d1:ea:e9:12:c0:da:02:1d:63:7a:76:54:d7:79:f9:
0e:70:98:82:40:8c:41:20:28:07:df:9f:a6:e6:be:d2:0f:46:
30:9a:23:72:f4:39:9e:a3:14:55:dd:00:32:be:9a:e4:e4:90:
a7:d8:ba:5d:1e:90:23:5f:73:c1:d7:56:b3:f5:ff:77:c9:f7:
a1:b4:d5:e4:9d:6f:e9:d3:37:d4:dd:17:22:dc:5a:ba:64:2d:
5a:4f:68:4e:58:f1:2e:00:39:6f:0e:e9:0f:6f:ec:4f:08:ea:
a8:ad:7e:1b:0c:92:91:7b:3b:be:1f:b4:31:3f:fe:bf:b2:83:
31:96:25:bd:d1:1b:37:8d:07:f8:c5:80:d5:ed:03:18:32:c3:
f6:e4:81:ef:97:13:f5:04:50:7c:6b:d5:05:d3:a7:92:4b:65:
ec:03:ba:94:48:d6:f9:93:1a:e5:76:a1:4a:9d:87:c6:ef:ae:
56:46:4f:cb:ab:ed:9b:5e:12:31:fe:7a:0f:e0:16:88:4d:17:
2e:28:51:15:8b:fa:eb:2d:e1:52:60:28:85:c7:0b:a6:d3:34:
60:ea:96:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 08:32:25 2023 by rpki-client on console-fra.rpki-client.org