Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/9516137A71C411EEB560F484C4F9AE02.roa
File: 9516137A71C411EEB560F484C4F9AE02.roa (raw, json)
Hash identifier: 962WW5FVK0SSd1zNs0S6CVIaGncIjDSxdXzeh1JuwBo=
Subject key identifier: 25:F6:B3:6D:67:CF:3B:66:F0:E6:C6:5D:3B:94:2B:05:5E:BD:AD:7A
Certificate issuer: /CN=A9127EEB/serialNumber=B3DF6BDBA3EFEB6516D0E77E13682FCAF1139EE5
Certificate serial: 0B0D
Authority key identifier: B3:DF:6B:DB:A3:EF:EB:65:16:D0:E7:7E:13:68:2F:CA:F1:13:9E:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s99r26Pv62UW0Od-E2gvyvETnuU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/9516137A71C411EEB560F484C4F9AE02.roa
Signing time: Mon 23 Oct 2023 16:52:43 +0000
ROA not before: Mon 23 Oct 2023 16:52:43 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 61317
IP address blocks: 103.49.40.0/24 maxlen: 24
103.49.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2829 (0xb0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EEB/serialNumber=B3DF6BDBA3EFEB6516D0E77E13682FCAF1139EE5
Validity
Not Before: Oct 23 16:52:43 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=6536a4da-77c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:68:8e:fe:29:c4:1c:d2:b9:34:8c:74:1d:
85:11:57:57:c2:49:ad:0d:f9:c3:d9:51:c6:ce:08:
dc:49:f5:26:23:ff:ab:e8:3d:26:b3:01:a1:0e:2b:
13:98:bf:c0:36:ff:a7:ea:8f:3b:25:1d:8a:dd:be:
f3:1f:bd:2d:55:26:c3:8a:6c:82:16:55:57:aa:3e:
0a:d9:e7:14:7e:fc:93:a5:cc:ea:06:42:e9:22:ce:
41:12:26:cb:37:f5:ae:4f:fa:4c:33:01:47:57:bf:
2f:32:15:c6:22:99:61:4d:60:8f:06:61:f4:1f:51:
53:5a:0d:a9:bf:8f:fa:09:18:ce:b6:6b:f4:7c:d6:
d9:b8:f4:49:73:59:b2:00:b6:1d:49:bc:39:94:25:
49:67:1e:68:f4:7b:ec:52:13:e2:65:20:d1:e0:75:
79:75:83:56:f3:3e:69:eb:74:79:80:a0:59:62:b2:
4a:5b:ec:53:34:5a:35:56:6b:1a:37:54:08:ab:71:
29:53:f6:01:e6:ec:6b:67:6d:a0:40:f9:d4:9f:2f:
ec:59:ac:76:81:da:c7:80:92:7c:04:d7:77:75:0d:
92:3e:28:77:7f:26:db:6b:3c:d2:85:08:58:c0:ce:
ca:3b:5c:fa:0a:6c:76:c3:cb:08:68:0d:35:1a:4a:
e3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F6:B3:6D:67:CF:3B:66:F0:E6:C6:5D:3B:94:2B:05:5E:BD:AD:7A
X509v3 Authority Key Identifier:
keyid:B3:DF:6B:DB:A3:EF:EB:65:16:D0:E7:7E:13:68:2F:CA:F1:13:9E:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/s99r26Pv62UW0Od-E2gvyvETnuU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s99r26Pv62UW0Od-E2gvyvETnuU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/9516137A71C411EEB560F484C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.40.0/23
Signature Algorithm: sha256WithRSAEncryption
be:d9:68:44:85:fd:5e:da:b4:5d:e9:b9:d4:4c:3a:48:48:31:
9e:46:68:1f:86:ed:be:bd:17:22:9b:e5:06:cd:98:c6:49:57:
99:a5:51:4e:19:aa:bb:63:70:1b:ae:6a:7e:db:9d:55:a7:52:
0b:d6:19:5a:ad:fd:d4:ed:42:29:ca:e3:dd:4d:f7:c8:01:83:
a7:28:40:bd:3b:91:44:9c:5d:de:da:5c:60:5d:3d:e7:fd:58:
92:fb:6c:c7:e2:f2:1b:d5:b9:58:e0:29:1f:4f:43:8c:24:30:
42:73:69:ef:00:00:cd:a0:f1:41:64:4e:fe:9c:31:a8:25:64:
a2:e9:e3:b2:bd:83:40:a6:ed:b7:4a:ad:0d:0e:09:30:5f:e3:
54:ae:f4:75:45:39:ff:5a:89:02:5e:ac:e9:2a:1d:99:21:fe:
69:9b:13:be:31:aa:96:75:73:d0:cd:fe:f9:a0:05:db:8a:4c:
90:14:1c:64:dc:e3:08:9a:83:d2:80:bd:c1:56:a7:12:11:c6:
1a:c9:2e:60:9b:27:9a:2f:b0:5f:b9:f9:03:0f:58:cf:f2:47:
ae:b9:c4:cc:65:60:db:2d:c2:05:ed:69:60:f3:a7:eb:cb:44:
92:cd:f9:5f:9a:35:86:47:2f:9d:c1:b8:44:d1:6c:8f:bb:ad:
6c:c7:a9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 18 12:21:57 2023 by rpki-client on console-ams.rpki-client.org