Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/0A217EEEEE4311EDAC5C4E7AC4F9AE02.roa
File: 0A217EEEEE4311EDAC5C4E7AC4F9AE02.roa (raw, json)
Hash identifier: D0Ew0qfjaQ0oo/3HJwjvoebTLEXR3vHCQy3WDydP4KU=
Subject key identifier: 89:73:9B:82:D5:EF:F6:5E:93:83:45:6F:51:93:81:D0:19:F0:0A:89
Certificate issuer: /CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Certificate serial: 0155
Authority key identifier: 3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/0A217EEEEE4311EDAC5C4E7AC4F9AE02.roa
Signing time: Mon 03 Jul 2023 02:52:33 +0000
ROA not before: Mon 03 Jul 2023 02:52:33 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 136969
IP address blocks: 103.190.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Validity
Not Before: Jul 3 02:52:33 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64a237f1-5674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:04:72:ab:46:37:39:39:75:44:75:cc:57:8b:
3c:fd:50:28:9b:9a:e6:a9:11:b0:e1:b1:9f:10:a8:
19:42:dd:87:01:e1:a8:5c:1d:7a:e6:bc:8f:20:12:
2a:a6:8c:6f:f7:fe:fe:42:99:ff:b7:e2:31:09:44:
ef:49:86:0a:02:1c:72:78:1d:e9:e4:20:4a:2e:c6:
2f:b6:f7:b9:87:23:0b:cd:5a:a7:1a:a0:f7:86:52:
90:76:34:f3:74:8e:c9:aa:00:81:de:b5:16:1e:3a:
96:a2:e5:d8:14:bc:39:2d:e8:98:79:59:cc:d8:f6:
9c:cf:44:5b:45:00:73:14:cc:5b:16:40:61:d2:a1:
dc:1d:a9:fc:72:09:c4:71:50:1b:ec:1d:4b:11:58:
90:f0:dd:6b:f2:b1:7b:00:a2:47:cd:61:5b:c5:75:
4f:51:15:57:87:11:64:6d:93:0d:25:38:0a:ce:f1:
df:45:ce:3f:c9:ae:99:09:58:0e:2a:cb:f5:a4:2f:
5d:7a:f7:a0:f9:4f:b5:ef:cb:70:9a:88:0f:e2:12:
df:40:b4:11:7e:c3:ec:e9:37:53:5c:27:b5:bf:b9:
ae:a5:88:2f:14:55:fd:d2:ab:2c:0c:33:11:17:76:
85:b9:b3:07:04:3d:5e:3b:a8:3c:b2:73:c0:7c:b6:
32:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:73:9B:82:D5:EF:F6:5E:93:83:45:6F:51:93:81:D0:19:F0:0A:89
X509v3 Authority Key Identifier:
keyid:3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/0A217EEEEE4311EDAC5C4E7AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.190.23.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:ed:87:0d:59:aa:65:4b:00:93:ac:4c:ad:a0:c2:cb:d4:a9:
e1:97:30:b0:cb:20:fa:d9:cf:21:a4:15:8b:84:df:9a:e7:bc:
15:8b:f8:f3:4b:56:65:34:83:4c:ee:5a:1f:a1:85:31:82:49:
4c:03:03:4f:55:84:ec:47:aa:e3:1d:8d:9f:d5:c8:5d:c3:4c:
99:ce:f2:f6:ca:b4:a1:03:a9:85:b1:d9:06:44:bb:fd:0f:1a:
fc:7f:fa:98:67:e3:4d:5a:41:07:26:99:b1:bf:c9:f4:eb:03:
c9:b7:21:32:8e:b8:a3:a5:02:40:dd:65:87:85:b5:0b:8b:4b:
78:e7:5e:01:a9:bd:fd:90:be:6b:c2:a3:ac:a6:84:1e:a4:30:
11:0d:9d:24:8a:da:64:0d:c0:66:a0:57:fb:94:24:4c:fe:61:
62:d4:d7:a5:e9:94:09:a8:6b:69:44:aa:2f:db:6f:04:34:1d:
a3:6e:7f:a0:d9:95:d5:f9:81:9e:59:ef:23:92:95:87:80:82:
88:4f:6f:d2:50:6c:c4:9a:9b:da:0f:e0:83:01:fd:cc:55:8f:
96:18:45:fa:d3:9b:3d:01:83:5d:42:b1:fa:05:d1:04:75:c7:
7a:e5:d7:bc:79:bd:e7:76:bf:60:78:07:00:b9:f5:17:75:a6:
dd:73:85:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 4 12:07:11 2023 by rpki-client on console-fra.rpki-client.org