Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/F14E4920857511EBA59C9E3BC4F9AE02.roa
File: F14E4920857511EBA59C9E3BC4F9AE02.roa (raw, json)
Hash identifier: lQYBNuitbDICW3C+tWVjWjL447T5PfqnGTqMC2meTMM=
Subject key identifier: A6:39:96:2D:98:01:BD:9F:FC:F0:7C:9C:6E:2A:3C:A3:ED:D6:49:38
Certificate issuer: /CN=A9127EEB/serialNumber=B3DF6BDBA3EFEB6516D0E77E13682FCAF1139EE5
Certificate serial: 0A89
Authority key identifier: B3:DF:6B:DB:A3:EF:EB:65:16:D0:E7:7E:13:68:2F:CA:F1:13:9E:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s99r26Pv62UW0Od-E2gvyvETnuU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/F14E4920857511EBA59C9E3BC4F9AE02.roa
Signing time: Fri 24 Feb 2023 20:27:08 +0000
ROA not before: Fri 24 Feb 2023 20:27:08 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 61317
IP address blocks: 103.49.40.0/22 maxlen: 22
103.49.40.0/24 maxlen: 24
103.49.41.0/24 maxlen: 24
103.49.42.0/24 maxlen: 24
103.49.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2697 (0xa89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EEB/serialNumber=B3DF6BDBA3EFEB6516D0E77E13682FCAF1139EE5
Validity
Not Before: Feb 24 20:27:08 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=63f91d9b-fbe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f4:88:f5:ec:86:96:c1:86:bb:c9:da:a1:28:
ee:4b:c7:16:0b:75:f0:b8:43:cc:b8:58:5d:cf:db:
bf:68:f9:a9:a7:71:4e:2b:05:cc:a2:27:78:68:3f:
2e:00:aa:da:f0:c2:d6:22:60:cf:08:e8:de:bd:5e:
c9:79:e3:b0:1a:b6:9e:7f:4e:a7:79:ee:ff:01:fb:
79:95:b0:46:1a:5d:18:26:31:4e:a1:b2:1a:25:22:
b7:ab:e4:3a:d1:f8:e3:3d:92:46:4d:e8:c8:8b:67:
a5:d8:3a:eb:d6:87:ed:bb:9f:64:d9:c2:2e:80:15:
c2:47:e7:62:59:19:f8:63:8a:3a:e7:3a:74:73:44:
99:86:7a:72:84:87:bf:9a:2a:38:90:c1:a6:5b:4b:
7f:17:5f:70:30:cb:74:ef:7e:80:fb:3c:99:91:6c:
8e:4f:f8:4e:0a:4b:9d:5f:fa:77:f9:36:ef:29:bc:
ea:06:ba:2f:87:2b:46:57:bf:8d:77:64:51:3d:a1:
34:9c:f2:5a:ac:95:8c:5a:be:c1:48:42:7d:d5:d9:
23:d4:33:4d:b6:8f:76:20:40:32:a8:fb:f1:49:6f:
5f:8b:dd:1f:11:1e:3e:c9:03:09:b2:ed:f8:b0:46:
bf:ee:7e:8b:86:d1:53:b4:5c:8c:96:79:81:a7:50:
ab:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:39:96:2D:98:01:BD:9F:FC:F0:7C:9C:6E:2A:3C:A3:ED:D6:49:38
X509v3 Authority Key Identifier:
keyid:B3:DF:6B:DB:A3:EF:EB:65:16:D0:E7:7E:13:68:2F:CA:F1:13:9E:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/s99r26Pv62UW0Od-E2gvyvETnuU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s99r26Pv62UW0Od-E2gvyvETnuU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/19A626FE128611EA82AA0E5EC4F9AE02/F14E4920857511EBA59C9E3BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.40.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:83:0b:2c:73:93:f5:76:3f:38:0e:ee:2f:27:42:34:a2:16:
1e:94:b5:9f:83:39:f2:9c:45:c7:27:39:e2:76:1d:c4:bb:80:
4e:48:a4:fb:bf:ef:39:81:9e:b2:50:8b:ce:a7:1f:80:2e:a2:
8d:a4:60:1b:dd:e7:8e:fd:b2:dc:a7:45:66:ad:81:a2:8b:69:
03:e9:89:fc:77:86:b6:4f:9a:59:b8:70:df:59:bd:aa:60:d4:
73:b6:56:51:b8:f1:09:3f:86:93:68:69:07:07:c5:65:6c:5c:
0a:72:6f:15:cc:55:c0:45:a9:aa:63:2f:7b:e0:e6:6f:38:42:
0d:74:9d:0e:92:6d:55:ec:e9:c6:6f:7b:ec:29:15:2a:46:ae:
44:d4:d2:58:0d:5b:bd:b0:b4:1c:a1:9c:07:38:14:24:e8:56:
96:fa:a4:fa:06:55:7c:3a:c0:27:c0:43:f3:12:79:de:b4:30:
f6:6b:8a:cd:30:0a:f6:48:34:83:af:d6:80:ca:0d:8d:b9:6b:
1f:44:31:06:c0:b3:24:35:50:39:8a:b8:8f:1e:0c:a6:3c:76:
b2:07:06:1e:6f:05:3a:1b:08:6f:c6:23:27:24:38:38:f1:b1:
2b:a4:55:f8:95:90:7e:20:23:60:b3:af:0a:2d:15:7e:e7:90:
16:a7:08:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 16:57:34 2023 by rpki-client on console-fra.rpki-client.org