Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/B9B70A0C862A11EE8A384F83C4F9AE02.roa
File: B9B70A0C862A11EE8A384F83C4F9AE02.roa (raw, json)
Hash identifier: pvCdlLjLl3Bq2u72rZXkLaPa6I4xHfxCwoqTA1Qu+Ik=
Subject key identifier: D2:87:F1:2C:BE:80:7D:B0:15:37:EF:48:B5:4D:18:57:E1:71:DF:CC
Certificate issuer: /CN=A9127EEB/serialNumber=B3DF6BDBA3EFEB6516D0E77E13682FCAF1139EE5
Certificate serial: 0B20
Authority key identifier: B3:DF:6B:DB:A3:EF:EB:65:16:D0:E7:7E:13:68:2F:CA:F1:13:9E:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s99r26Pv62UW0Od-E2gvyvETnuU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/B9B70A0C862A11EE8A384F83C4F9AE02.roa
Signing time: Sat 18 Nov 2023 15:54:16 +0000
ROA not before: Sat 18 Nov 2023 15:54:16 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 20473
IP address blocks: 103.49.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2848 (0xb20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EEB/serialNumber=B3DF6BDBA3EFEB6516D0E77E13682FCAF1139EE5
Validity
Not Before: Nov 18 15:54:16 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=6558de28-2575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6f:46:76:27:db:56:34:84:f1:0c:e0:14:27:
c9:2a:c4:f8:2c:f3:12:d0:57:e5:97:a4:7a:5b:01:
db:32:7a:79:4d:c1:e7:c9:a5:d4:81:21:3c:68:a9:
38:d2:7b:71:ac:cd:5d:a2:7f:b0:b0:92:20:f7:d0:
3a:67:80:ea:9a:a7:f6:85:81:32:f1:9d:7b:c6:57:
db:42:df:2a:49:89:12:8f:c0:b0:48:fe:a2:98:36:
31:d6:32:51:f2:0f:75:2e:2a:02:ec:19:6e:05:26:
8d:f1:4b:24:b3:cb:90:58:50:cb:f4:33:90:34:a1:
e6:21:b5:42:55:a6:eb:26:2b:14:a4:6e:8a:11:0f:
90:28:ac:f3:3e:ac:f4:db:18:46:d7:41:87:1b:e9:
3d:d7:3d:55:2a:18:b0:60:e2:f1:5a:fc:81:bf:bb:
ff:ed:a6:a6:4c:64:99:6e:17:f4:0f:f0:82:d3:85:
39:2e:86:2f:48:fa:0c:e7:ed:44:08:01:75:d3:65:
80:99:8f:5a:96:5d:7c:03:a0:02:0d:fa:4c:12:59:
10:9b:94:22:0e:0d:c5:67:65:a0:11:ce:af:db:49:
ef:51:b3:67:52:55:5d:3f:67:52:3b:e5:24:c1:1f:
f9:3c:20:f3:3d:b2:27:34:be:6f:cf:b4:ae:24:67:
2c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:87:F1:2C:BE:80:7D:B0:15:37:EF:48:B5:4D:18:57:E1:71:DF:CC
X509v3 Authority Key Identifier:
keyid:B3:DF:6B:DB:A3:EF:EB:65:16:D0:E7:7E:13:68:2F:CA:F1:13:9E:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/s99r26Pv62UW0Od-E2gvyvETnuU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s99r26Pv62UW0Od-E2gvyvETnuU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/B9B70A0C862A11EE8A384F83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.42.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:d1:ff:4b:39:9f:dd:14:94:51:72:e8:1a:cd:c2:2c:7c:e2:
83:64:11:7c:8c:d4:36:5c:b4:f0:b2:f5:c3:7c:f8:94:5e:37:
99:45:4d:2f:1a:c8:f3:df:5a:c3:6c:7f:6f:f7:2a:75:82:70:
c2:b9:b4:4f:90:b3:b8:0e:1e:df:da:dd:20:5e:92:10:87:9f:
77:5a:f6:4e:86:d8:ff:6b:8e:32:25:ab:33:bb:67:02:0f:62:
11:75:11:96:2d:6a:f0:49:2e:f7:66:43:cd:38:7a:67:ab:9a:
bc:2f:a4:8f:2c:32:ab:66:f4:31:ef:c1:af:1e:7f:b2:7b:87:
bf:b0:1b:78:94:ae:cd:ef:f3:2e:1a:be:68:eb:4f:78:87:92:
7c:cb:76:45:55:68:52:5c:a6:ee:dc:d4:8b:67:59:21:f7:6d:
b5:63:3e:3b:a6:0d:52:6f:fe:f5:c5:e1:f7:07:2f:44:d3:32:
58:94:d7:db:3d:4a:ee:b1:a9:f6:4a:87:ce:8f:15:0c:cf:8e:
91:59:d2:17:4f:7d:08:5d:eb:9d:ce:35:48:92:1a:10:82:bd:
b7:a6:48:56:44:69:27:5e:1c:13:16:05:1a:1b:fd:5d:a7:de:
d9:eb:e7:8a:3d:42:db:5e:8f:aa:d3:db:e9:26:05:1c:ae:3f:
17:c1:31:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 17 23:03:26 2023 by rpki-client on console-fra.rpki-client.org