Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/85AA9492013511EE81A9F21FC4F9AE02.roa
File: 85AA9492013511EE81A9F21FC4F9AE02.roa (raw, json)
Hash identifier: 1Kx5OMPqerSp7PsKFc8vtUq6NfMkV88nAoMckdcmRAk=
Subject key identifier: 15:C5:8F:C2:F5:C1:73:6D:12:30:8E:24:4E:39:65:3C:F4:43:B6:1B
Certificate issuer: /CN=A9124731/serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077
Certificate serial: 02D2
Authority key identifier: 80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/85AA9492013511EE81A9F21FC4F9AE02.roa
Signing time: Fri 02 Jun 2023 11:06:28 +0000
ROA not before: Fri 02 Jun 2023 11:06:28 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 136969
IP address blocks: 103.162.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722 (0x2d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124731/serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077
Validity
Not Before: Jun 2 11:06:28 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=6479cd34-7605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ad:43:84:59:1a:79:db:8f:66:23:7c:bc:df:
3b:e4:ab:10:ad:6c:8d:70:6f:d7:4b:0e:18:ba:17:
76:3a:7a:a2:d9:47:a7:bb:98:48:8e:ab:6d:be:5f:
ef:47:d8:72:de:1c:de:c2:51:8d:39:15:6d:47:a0:
3c:fe:b9:e5:a8:77:ee:6e:46:3e:3a:c4:a6:31:97:
30:e2:34:ec:3b:20:fa:22:96:df:f4:81:a2:f2:9a:
0b:0b:30:c9:5d:c3:e5:f9:c1:00:d6:b0:9b:d0:96:
e4:7d:97:93:81:9b:71:a1:22:3b:e4:51:cf:d4:13:
13:28:0d:b8:40:7f:9c:e7:7a:a6:45:06:26:ae:d1:
5b:22:4f:f9:b9:b6:60:58:97:f6:4a:56:4e:0e:dc:
2d:be:5e:df:25:21:f1:1e:90:b1:b7:89:4f:83:3d:
e2:66:a3:2d:7e:6d:54:47:34:8c:6e:93:12:c4:9f:
01:23:16:5d:88:78:5c:2d:19:1e:4d:13:27:a1:06:
64:18:7c:c8:99:fb:39:ab:e0:21:c9:f2:c9:1e:a2:
04:32:b9:0f:80:b9:b8:02:74:c2:e2:08:de:86:76:
33:fe:b9:7c:69:af:82:17:1a:b7:85:e2:1a:79:d2:
0b:f8:91:ee:88:a0:3e:e4:f1:b6:2e:11:6e:9d:e2:
6f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C5:8F:C2:F5:C1:73:6D:12:30:8E:24:4E:39:65:3C:F4:43:B6:1B
X509v3 Authority Key Identifier:
keyid:80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/85AA9492013511EE81A9F21FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.137.0/24
Signature Algorithm: sha256WithRSAEncryption
98:3e:5c:4e:dd:4c:83:bc:a9:81:5c:82:3f:77:f5:bf:a3:87:
cf:7c:30:8c:7b:b9:ba:b5:5b:ad:2d:3b:4f:1e:55:25:8c:71:
49:c2:e8:96:81:e5:6d:08:7a:48:4f:b7:87:39:67:bb:57:b2:
ad:17:b0:cd:24:93:1c:4f:8a:09:12:cb:0a:07:06:db:91:52:
b7:f9:2a:c0:a3:f5:01:74:db:2b:40:5c:7e:9d:e9:a5:87:ce:
ac:cd:8e:cc:4c:e3:44:e3:14:cb:67:ae:bd:67:40:73:75:91:
a5:54:c4:de:d3:d2:e6:fd:46:37:58:34:c5:a1:08:97:88:bd:
5d:02:d6:09:24:4b:c4:fa:bf:2e:fc:70:52:2a:1f:bf:9e:59:
7c:5b:d6:7a:8f:3a:3a:0e:eb:80:d6:db:b4:89:6b:43:89:0b:
4e:9b:fa:25:f3:00:19:de:e7:68:90:82:56:64:3b:8b:73:69:
33:6a:6d:37:b7:28:9b:93:f1:b5:58:2d:73:be:af:42:9d:16:
40:37:23:3c:5a:a8:f6:e3:6a:40:f7:42:98:a4:dd:af:fe:3d:
02:11:d4:28:d5:c5:be:c7:59:7c:0e:1e:47:6b:e8:0a:21:f3:
53:19:b2:72:02:c0:f8:df:d6:fd:47:34:8b:e3:45:e6:58:ce:
15:31:3c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 29 18:57:26 2023 by rpki-client on console-fra.rpki-client.org