Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/C35DEAD833A211EE85E4AA7EC4F9AE02.roa
File: C35DEAD833A211EE85E4AA7EC4F9AE02.roa (raw, json)
Hash identifier: h0yFCAfluha38GnVkYS36Pef6yH3V+KHtANEs9r60pk=
Subject key identifier: F7:E8:D1:20:23:2C:66:2B:5C:55:52:29:B2:89:9B:5E:91:04:8D:72
Certificate issuer: /CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28
Certificate serial: 07B8
Authority key identifier: D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/C35DEAD833A211EE85E4AA7EC4F9AE02.roa
Signing time: Sat 05 Aug 2023 15:15:38 +0000
ROA not before: Sat 05 Aug 2023 15:15:38 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 139351
IP address blocks: 103.141.158.0/24 maxlen: 24
103.141.159.0/24 maxlen: 24
2400:17a0::/48 maxlen: 48
2400:17a0:1::/48 maxlen: 48
2400:17a0:2::/48 maxlen: 48
2400:17a0:3::/48 maxlen: 48
2400:17a0:4::/48 maxlen: 48
2400:17a0:5::/48 maxlen: 48
2400:17a0:6::/48 maxlen: 48
2400:17a0:7::/48 maxlen: 48
2400:17a0:8::/48 maxlen: 48
2400:17a0:9::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1976 (0x7b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28
Validity
Not Before: Aug 5 15:15:38 2023 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=64ce679a-732b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2a:aa:c6:5a:15:46:77:f0:60:75:5d:df:38:
ad:66:01:ac:fd:d5:29:8e:85:14:27:7d:fd:20:1c:
0f:32:2d:34:b9:5f:9c:10:6e:a4:67:a4:86:18:f0:
25:c4:53:37:3d:ed:b0:99:90:72:c2:dd:6d:9f:64:
f9:42:9d:c4:59:2e:bb:a2:f1:10:04:36:ab:59:c1:
ba:dd:7a:a8:f2:54:60:53:ba:80:72:45:f4:40:61:
a2:e5:32:c9:f7:62:30:b6:a6:f2:f4:39:f7:99:b9:
98:45:8d:6a:2f:a6:88:f9:4c:f9:ff:1d:ba:e6:02:
7e:fb:b1:a5:bb:a0:14:dd:83:fb:e3:72:1b:94:b6:
28:8a:d1:c9:be:0e:2b:a9:51:43:98:87:ce:33:cf:
e7:2b:a1:e5:88:4e:c6:1e:cd:dc:0b:8b:24:15:16:
f5:cd:ad:69:09:cc:0e:f5:63:6b:c6:c6:66:ea:f9:
76:6d:8f:a1:1f:09:70:32:a8:7c:93:9d:ce:a0:b8:
ad:49:af:fc:e2:2c:f9:86:21:19:a4:d1:42:58:d4:
6a:eb:4d:92:8e:c7:44:7c:3e:e2:16:1c:0a:8a:96:
f8:d1:bb:c2:08:6b:54:1e:57:8d:ea:50:01:71:c0:
da:93:1d:02:c7:09:68:bb:60:6d:90:b2:6d:af:ea:
4a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E8:D1:20:23:2C:66:2B:5C:55:52:29:B2:89:9B:5E:91:04:8D:72
X509v3 Authority Key Identifier:
keyid:D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/C35DEAD833A211EE85E4AA7EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.158.0/23
IPv6:
2400:17a0::-2400:17a0:9:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
05:1f:4f:37:5c:78:64:b5:fb:ec:94:d9:ee:76:72:13:e0:bb:
85:86:f0:f5:6b:90:b0:86:0f:ad:b0:df:e8:70:5f:a6:55:b8:
18:2c:e5:c0:16:95:f4:d8:63:e1:ac:75:91:00:6a:82:14:98:
c3:69:76:37:ba:c2:b3:e8:f6:fd:61:1a:c8:94:6b:94:a2:a8:
4d:f4:3a:aa:c9:a8:1c:91:24:a9:ae:37:b1:2b:c1:93:00:8a:
6d:69:31:b6:1e:53:30:9d:ce:2e:56:13:f2:f4:17:95:49:99:
11:c2:b3:ad:c5:a2:51:bc:b6:8b:8b:31:d7:1d:6c:55:2c:ab:
3b:95:3c:3d:b0:a8:ed:1b:b7:a4:ee:da:e6:ef:c9:fb:81:f1:
2e:5a:2d:aa:8b:84:94:68:e3:b0:e8:55:1d:6c:ee:ec:01:8a:
a9:70:a7:e6:ed:34:0f:c7:29:48:d4:81:9a:24:a9:f5:ae:d1:
33:ba:07:d5:98:08:fe:31:f6:d4:bc:ee:d3:ca:71:02:4b:15:
33:f8:35:13:05:d1:75:2c:1f:a0:5a:ed:b3:33:2d:24:f2:ed:
08:5e:ed:00:ae:a1:d7:70:d9:c1:03:b0:8d:32:db:84:9d:01:
39:92:fc:43:6f:b3:7e:5c:74:7a:7c:f8:83:ef:eb:ca:a4:24:
0e:99:89:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 9 01:58:21 2023 by rpki-client on console-fra.rpki-client.org