Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/17E6430436DF11EEA084285BC4F9AE02.roa
File: 17E6430436DF11EEA084285BC4F9AE02.roa (raw, json)
Hash identifier: ibcl8rDzFbyIgLXdvsPY/PaMg6tY+hHnbfYKCTYH2PI=
Subject key identifier: CC:35:34:E7:2A:9A:07:2A:F9:7E:45:CD:36:99:2C:84:03:B6:11:5A
Certificate issuer: /CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28
Certificate serial: 07C2
Authority key identifier: D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/17E6430436DF11EEA084285BC4F9AE02.roa
Signing time: Wed 09 Aug 2023 18:03:50 +0000
ROA not before: Wed 09 Aug 2023 18:03:50 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 150683
IP address blocks: 103.141.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1986 (0x7c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28
Validity
Not Before: Aug 9 18:03:50 2023 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=64d3d506-5047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f6:f6:21:d4:58:61:bb:70:e5:df:11:bb:3c:
8b:55:da:3d:7a:b8:ac:2b:b5:0d:b2:25:1f:c6:7e:
63:20:a2:3e:e1:92:0c:16:11:a3:09:8f:e1:df:a3:
e6:63:47:dd:4c:b1:df:2b:95:3d:36:6d:cd:42:9e:
bb:45:18:4e:a9:3d:be:98:c9:36:fe:9a:ff:ba:e6:
00:32:6e:d6:08:47:00:f1:25:3a:fb:22:7d:1d:75:
a6:27:6e:d4:16:56:a2:0d:2f:c0:ff:82:ab:70:99:
b9:69:ea:f6:0c:6d:02:bb:31:aa:02:ba:52:9d:c8:
a7:3e:66:74:81:a5:cf:99:0c:92:bc:f8:0e:53:01:
b9:72:aa:e7:5a:1d:c2:25:df:ab:a2:91:1b:59:c0:
da:2f:fe:30:51:ae:87:91:e1:0e:55:7c:fc:c8:30:
bd:da:05:55:a2:14:f7:e5:15:01:93:86:c1:42:dd:
14:f4:63:ad:28:ef:89:70:05:7d:79:c0:f2:1d:db:
1d:6e:bf:5b:d1:60:0b:aa:36:22:d0:15:83:9e:03:
ae:fd:ed:bb:9b:6d:40:3f:66:a1:11:e0:08:f4:25:
93:67:e0:ea:21:5f:df:41:ac:f8:66:46:e1:d8:10:
38:51:fb:03:63:4f:ba:8e:dc:9f:81:ad:b2:d7:4b:
79:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:35:34:E7:2A:9A:07:2A:F9:7E:45:CD:36:99:2C:84:03:B6:11:5A
X509v3 Authority Key Identifier:
keyid:D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/17E6430436DF11EEA084285BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.159.0/24
Signature Algorithm: sha256WithRSAEncryption
98:21:bb:71:61:da:5a:bd:06:5e:b1:cb:57:f5:25:cd:91:89:
fc:12:80:e7:29:20:42:d4:e4:0b:29:86:68:a4:c6:e8:33:3b:
d7:40:f6:62:04:8c:d0:81:83:21:b6:96:cf:9f:f6:93:1c:71:
42:c0:27:39:a8:05:42:86:49:06:ed:05:3e:e1:8b:2b:d8:6e:
93:65:34:0c:12:5b:ea:5b:0b:2f:0d:d6:da:82:aa:f3:1a:3b:
98:5a:d1:4f:45:1a:3f:a7:b0:5c:3a:7b:e7:cf:93:8c:e1:e4:
da:a9:54:2c:96:f2:8a:08:ed:6f:bb:7f:10:e8:a7:27:b3:47:
81:0e:30:a4:8e:9a:05:ab:1f:76:34:6a:01:85:27:0e:1c:9a:
fd:0a:bf:23:61:9f:6f:25:e1:98:e3:24:e1:3c:66:0f:79:47:
71:b8:59:a3:ed:67:32:c5:02:e5:a1:28:a0:91:11:1e:64:d1:
e2:a5:37:3c:ed:8c:e4:94:bd:95:6a:dd:b9:d7:92:21:23:81:
0d:1c:66:45:b5:c8:04:0b:8c:1f:77:79:7b:48:de:48:43:c2:
35:01:37:9d:76:5b:76:a8:30:76:f4:e9:f0:84:c8:62:7b:25:
6d:6f:d0:e6:1b:06:e9:99:5e:4b:c4:d3:76:b0:1a:2c:ad:6b:
8d:3b:ce:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 9 20:52:18 2023 by rpki-client on console-fra.rpki-client.org