Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/B0B1732A2EE911EBA4CFBA4EC4F9AE02.roa
File: B0B1732A2EE911EBA4CFBA4EC4F9AE02.roa (raw, json)
Hash identifier: I1hFbUOTNQ1lgfLxlxi+b+bEORspBLBufVS3GqFbWQw=
Subject key identifier: B2:1C:63:2C:75:54:81:8B:AF:1B:12:87:4A:58:52:D9:35:FA:1C:02
Certificate issuer: /CN=A9127EEB/serialNumber=B3DF6BDBA3EFEB6516D0E77E13682FCAF1139EE5
Certificate serial: 0A86
Authority key identifier: B3:DF:6B:DB:A3:EF:EB:65:16:D0:E7:7E:13:68:2F:CA:F1:13:9E:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s99r26Pv62UW0Od-E2gvyvETnuU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/B0B1732A2EE911EBA4CFBA4EC4F9AE02.roa
Signing time: Fri 24 Feb 2023 20:27:04 +0000
ROA not before: Fri 24 Feb 2023 20:27:04 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 20473
IP address blocks: 103.49.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2694 (0xa86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EEB/serialNumber=B3DF6BDBA3EFEB6516D0E77E13682FCAF1139EE5
Validity
Not Before: Feb 24 20:27:04 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=63f91d98-aea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ca:c3:c9:f2:ba:31:8a:04:85:a6:92:78:7d:
45:71:97:34:3e:20:27:fb:dd:b4:bd:29:e6:db:db:
ed:cc:f7:ae:f2:d1:38:3b:d7:9b:f3:26:b4:81:1f:
2b:6f:67:27:fb:62:ce:2d:54:ef:f3:3a:c7:db:03:
da:9b:d2:49:16:1f:8e:b8:19:fe:bc:be:f8:36:29:
c6:81:2e:be:eb:ef:ee:34:c9:27:69:3a:24:8d:52:
5b:55:73:94:3b:25:2c:cc:76:8e:32:5d:c5:38:5b:
5c:7d:c1:2a:25:93:ed:d3:08:a7:76:f2:bd:c7:35:
d5:43:30:fc:01:0c:5e:e9:48:d9:15:21:a0:a6:71:
46:80:bc:0c:32:90:80:1f:9b:79:ca:d1:fe:39:55:
42:52:86:8e:e4:7f:41:4d:15:16:c2:ff:eb:6e:60:
8c:4c:3f:87:4a:2a:9b:d1:f6:16:4d:2c:7e:56:19:
dd:bd:95:98:33:88:dd:11:ea:d5:c7:4c:48:9e:77:
58:8c:fb:b0:e6:52:1e:62:25:51:f8:10:57:a0:a2:
15:73:69:cd:bc:f0:ee:c7:e1:1a:53:d3:67:09:14:
cd:23:59:f3:6c:59:07:ef:69:cb:97:8d:21:db:f3:
3c:a1:61:3e:67:21:d2:6d:ff:f4:81:8e:71:bb:f4:
e3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1C:63:2C:75:54:81:8B:AF:1B:12:87:4A:58:52:D9:35:FA:1C:02
X509v3 Authority Key Identifier:
keyid:B3:DF:6B:DB:A3:EF:EB:65:16:D0:E7:7E:13:68:2F:CA:F1:13:9E:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/s99r26Pv62UW0Od-E2gvyvETnuU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s99r26Pv62UW0Od-E2gvyvETnuU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/B0B1732A2EE911EBA4CFBA4EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.42.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:2a:4f:dc:3d:28:d9:75:20:4b:22:5c:a7:ab:8f:57:57:1f:
a5:6f:3f:dd:c4:1a:dd:33:d9:7a:a7:8b:90:4b:63:39:a8:10:
2d:fd:75:d6:2f:ed:46:1b:b7:19:19:27:b9:b1:3d:b1:49:5d:
31:9c:8b:06:b4:c9:2e:ed:40:c5:65:19:39:52:d4:53:4f:2d:
16:a4:9c:31:68:85:08:29:14:31:91:1a:0d:92:31:46:7c:3d:
05:8a:67:ac:e5:48:80:1f:c7:bb:21:09:d1:ef:f7:39:23:d7:
66:0b:a6:51:da:6f:fd:8a:07:6d:4e:63:b7:ae:8d:a0:73:fc:
b5:6b:37:e8:df:da:c9:ef:e6:82:cd:88:e9:2c:c4:ea:44:33:
b9:28:ee:09:c3:87:dd:fb:cf:91:9e:19:98:12:83:b3:cf:7c:
b2:84:dd:9b:cb:eb:ba:38:f3:b6:22:a4:f4:34:e3:bf:0c:d5:
6e:6c:95:08:ed:26:5c:ef:91:7e:14:89:4e:b1:5d:cf:c9:90:
27:d2:ba:d5:f6:1a:72:5c:66:3a:da:29:32:41:a0:f7:57:7f:
f0:1d:5d:0f:9d:ea:4f:2c:f1:b7:ac:39:c0:df:cc:9c:a5:ee:
f7:88:7e:36:b2:05:2f:e8:70:22:ef:26:72:b0:9b:00:44:b1:
86:96:38:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 17:29:06 2023 by rpki-client on console-fra.rpki-client.org