Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/6F2BD65EBBA911ECB5515D5CC4F9AE02.roa
File: 6F2BD65EBBA911ECB5515D5CC4F9AE02.roa (raw, json)
Hash identifier: gaTBFeklKoDr5yT5nGiiTePm7IPmhh4KM12/TjSrAEs=
Subject key identifier: 1B:23:8E:AC:9A:24:F3:54:55:2F:82:E9:F4:DB:0F:91:99:BE:94:1D
Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Certificate serial: 04
Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/6F2BD65EBBA911ECB5515D5CC4F9AE02.roa
Signing time: Thu 14 Apr 2022 04:14:53 +0000
ROA not before: Thu 14 Apr 2022 04:14:53 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 149783
IP address blocks: 103.186.84.0/24 maxlen: 24
103.186.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Validity
Not Before: Apr 14 04:14:53 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62579fbd-ea9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:8c:fb:53:59:d9:36:23:44:d4:08:6d:67:
8c:43:b7:b2:50:f4:e5:25:4d:71:f9:db:3b:cb:a2:
be:83:41:a0:ad:db:72:f5:e5:69:10:91:f6:1e:b7:
d4:16:cc:a4:34:16:e9:f5:a3:14:5b:65:5e:bb:9e:
66:7e:d1:32:2b:6c:d1:af:01:30:9d:9e:f1:e0:06:
44:76:a1:d3:86:46:27:9a:5b:ab:d2:67:26:e8:4e:
80:e7:c4:7d:86:e8:f2:10:d3:cb:69:32:b5:44:97:
16:99:5e:c1:af:52:be:9a:5d:92:a9:ca:e5:c0:38:
f1:c1:b1:66:8c:e5:b1:11:3f:54:fc:e2:4a:00:45:
0a:12:ed:9c:ca:b8:7b:95:02:f5:94:c1:0b:a3:0f:
5a:9d:11:ca:91:db:83:72:4e:a8:0d:d2:5d:1e:36:
68:92:ac:ad:d5:f9:2e:d2:fa:51:47:08:aa:51:2f:
df:50:c1:45:67:4d:97:c9:99:db:4a:8c:42:8d:73:
d9:b3:0e:d2:df:bb:22:2b:59:2e:1d:cb:1a:5b:a3:
4b:25:41:ea:03:57:01:fc:f2:ec:5a:45:79:f5:44:
5b:90:36:ed:97:8c:da:e2:13:2a:6d:0f:82:f7:4b:
7b:2f:e0:e1:49:24:9a:17:d6:9d:5c:44:7e:7a:c0:
56:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:23:8E:AC:9A:24:F3:54:55:2F:82:E9:F4:DB:0F:91:99:BE:94:1D
X509v3 Authority Key Identifier:
keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/6F2BD65EBBA911ECB5515D5CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.186.84.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:44:4d:96:5e:bf:f0:c1:ac:56:80:96:d6:44:80:4f:2d:4f:
8f:8b:bf:12:c8:63:11:fc:fb:3a:b6:1e:88:0c:11:a1:6d:f7:
d8:e1:b7:bc:61:c2:47:e9:1f:a3:30:f8:5f:11:65:56:57:d7:
8c:1e:f1:9b:74:5d:1a:cc:b9:44:36:e1:19:33:5b:df:d8:29:
0f:df:1d:f5:a5:22:23:85:88:b4:87:b2:3f:11:d9:02:6c:c4:
89:78:d8:e2:57:7d:16:24:08:e1:2f:9a:fa:ee:e1:44:b8:42:
9d:41:e5:cf:e6:eb:2c:5d:45:53:dd:d0:5a:cf:aa:42:a3:fd:
b4:98:7f:fa:27:75:1f:4f:8f:18:25:9b:15:ba:4f:e0:8c:5e:
14:da:e0:93:c5:84:75:37:2d:1b:66:50:3c:58:f8:c7:ed:6b:
77:fc:19:41:59:5a:36:c2:b0:61:19:44:c0:23:7b:87:a4:d1:
10:4b:d3:ac:f2:9b:9c:44:23:d0:f0:9e:17:5b:07:f3:68:b5:
90:9c:13:3d:e8:1b:06:94:d3:31:67:06:d4:fd:7c:0c:ff:e6:
ff:b6:97:73:75:7c:6b:9e:46:8b:d9:70:0c:aa:4c:c7:fd:b7:
bb:9b:9f:78:41:b5:1d:c9:f1:3a:c8:85:7a:fb:61:95:0e:2b:
1d:74:97:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-fra.rpki-client.org