Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FF6A/6D8FB9A01F7311E780FA3C31C4F9AE02/F08E73E01F7411E78A000033C4F9AE02.roa
File: F08E73E01F7411E78A000033C4F9AE02.roa (raw, json)
Hash identifier: WPmMwnADhTqipMi6AiXG/PDgODHNww6juk91X7mA3n4=
Subject key identifier: F8:EA:B0:20:C8:E6:CC:43:0F:93:40:BE:AE:F2:E3:45:A1:C9:77:99
Certificate issuer: /CN=A912FF6A/serialNumber=3CB0B8300C51D0691EE609B1E8FDD650B929C631
Certificate serial: 19FB
Authority key identifier: 3C:B0:B8:30:0C:51:D0:69:1E:E6:09:B1:E8:FD:D6:50:B9:29:C6:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLC4MAxR0Gke5gmx6P3WULkpxjE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FF6A/6D8FB9A01F7311E780FA3C31C4F9AE02/F08E73E01F7411E78A000033C4F9AE02.roa
Signing time: Tue 31 Oct 2023 17:04:01 +0000
ROA not before: Tue 31 Oct 2023 17:04:00 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 132233
IP address blocks: 103.9.176.0/22 maxlen: 22
103.9.176.0/24 maxlen: 24
103.9.177.0/24 maxlen: 24
103.9.178.0/24 maxlen: 24
103.9.179.0/24 maxlen: 24
103.71.136.0/22 maxlen: 22
103.71.136.0/24 maxlen: 24
103.71.137.0/24 maxlen: 24
103.71.138.0/24 maxlen: 24
103.71.139.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6651 (0x19fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FF6A/serialNumber=3CB0B8300C51D0691EE609B1E8FDD650B929C631
Validity
Not Before: Oct 31 17:04:00 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=65413380-0140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:5f:42:f6:28:29:df:c4:89:2a:4d:24:1c:
8a:42:85:5b:f4:9b:d9:0a:72:c2:d8:62:19:6a:62:
c8:14:20:82:c9:c6:f2:6b:53:df:ba:22:51:92:59:
38:fc:02:f6:b6:6f:ad:31:5e:cf:b2:ca:a4:4f:56:
97:6c:c4:81:b2:cd:73:79:25:e8:82:af:1b:5b:5a:
6d:36:fc:8f:a1:41:f7:31:77:19:28:c0:a4:17:49:
1a:ff:72:52:2e:2a:93:10:b1:4e:b5:c8:9b:16:2f:
71:a3:26:3f:c6:6d:21:9e:be:d9:6a:71:c6:58:bc:
b4:60:9a:37:98:d2:c7:41:27:72:f3:e3:f2:05:a8:
15:76:a6:94:a1:8d:16:80:3f:77:db:71:1c:12:0e:
fd:c2:3d:59:b6:d0:14:bf:5e:4c:69:dc:48:21:bc:
7e:8d:c5:20:3c:42:4c:be:44:38:87:be:c2:0d:3a:
7c:e7:8a:b3:15:5c:f6:70:c3:5c:1b:bd:28:fa:43:
ec:32:f0:68:ed:cf:2e:32:cb:d8:37:f7:fb:fc:11:
f1:d4:7d:ee:96:dd:e5:9b:70:d4:ad:36:55:75:f2:
6a:5f:7f:79:25:87:90:fe:d5:b0:5e:2f:4f:e4:ad:
01:4b:51:ec:07:ba:4f:85:11:9b:c0:ad:7d:8a:b8:
39:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EA:B0:20:C8:E6:CC:43:0F:93:40:BE:AE:F2:E3:45:A1:C9:77:99
X509v3 Authority Key Identifier:
keyid:3C:B0:B8:30:0C:51:D0:69:1E:E6:09:B1:E8:FD:D6:50:B9:29:C6:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FF6A/6D8FB9A01F7311E780FA3C31C4F9AE02/PLC4MAxR0Gke5gmx6P3WULkpxjE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLC4MAxR0Gke5gmx6P3WULkpxjE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF6A/6D8FB9A01F7311E780FA3C31C4F9AE02/F08E73E01F7411E78A000033C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.9.176.0/22
103.71.136.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:f4:bd:eb:dd:30:51:d6:aa:13:ed:4b:00:1b:9c:f8:66:b0:
ce:5b:38:2c:0d:1d:fe:80:5f:5b:68:53:9f:72:08:84:5c:da:
62:2c:ef:d9:2c:9e:91:0a:2c:2b:d7:5c:a1:5c:85:03:1a:11:
b6:e5:c6:e2:d0:cb:b3:0b:58:cf:28:e8:e7:76:84:4d:b4:a1:
cd:96:b7:d0:30:53:21:d9:81:b0:d2:20:6f:54:cf:5f:b8:e7:
c0:ae:1e:41:91:1c:f9:27:50:5f:9a:b7:ed:21:50:fb:e9:9e:
b5:f1:ba:4f:54:da:3e:dc:53:38:27:b4:21:32:38:6b:93:a6:
3c:52:a2:57:ad:65:6c:72:52:56:bf:2c:ec:61:24:82:59:e1:
4a:29:f3:64:d1:3c:d0:bd:63:99:f5:25:2e:1f:f5:2d:41:6b:
19:59:4b:19:15:d7:95:82:75:01:ed:4c:49:d9:3c:cd:ce:db:
3c:a3:3b:b1:35:c3:16:76:f9:1e:b5:5c:1a:ed:fe:6b:4a:4d:
a8:eb:d6:f4:4e:45:1c:61:43:90:a6:60:e7:06:51:97:05:4e:
21:90:69:c8:b3:1e:48:cd:ad:d5:6f:d1:63:07:36:94:3d:ff:
9d:54:f8:e8:f1:c7:b0:36:f5:5d:f4:c9:20:5a:a2:c3:bb:38:
81:b1:78:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 09:33:50 2023 by rpki-client on console-ams.rpki-client.org