Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/6B29663CDFAE11ED93DFDF76C4F9AE02.roa
File: 6B29663CDFAE11ED93DFDF76C4F9AE02.roa (raw, json)
Hash identifier: c4xOjFICzs9Y/YTeFk9zUGihQTuJ0OsOz4Ra9jFahsY=
Subject key identifier: F9:52:47:78:1C:1B:9F:64:E5:76:A9:8E:10:2D:49:38:52:20:4B:7D
Certificate issuer: /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
Certificate serial: 27
Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/6B29663CDFAE11ED93DFDF76C4F9AE02.roa
Signing time: Thu 20 Apr 2023 19:06:14 +0000
ROA not before: Thu 20 Apr 2023 19:06:14 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 149621
IP address blocks: 103.182.210.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
Validity
Not Before: Apr 20 19:06:14 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=64418d25-6857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:60:ed:38:13:b9:43:ea:bc:96:da:09:3b:
70:bc:f8:2c:23:5e:b8:0d:5e:81:39:d7:29:e4:a7:
07:27:11:cf:ee:5a:44:b7:e9:05:33:f8:23:53:d9:
97:20:3c:ec:78:0a:ea:3b:a3:e4:59:2a:64:fe:19:
c3:25:c7:7a:5b:d1:4d:9b:7e:2a:34:2f:3a:23:15:
eb:1c:8e:91:d4:df:61:ff:34:df:47:16:38:92:dc:
01:dc:79:cd:d8:c8:70:7a:02:8e:7e:94:70:e1:a9:
b3:47:04:dd:23:81:5c:0e:5d:9a:4c:16:11:f0:94:
c7:0e:db:94:e2:95:62:9d:12:97:ea:03:74:e8:e3:
b6:1e:de:6c:44:8e:78:b4:5d:21:5c:b6:1c:8f:37:
96:c6:4f:2c:77:44:53:fb:01:a5:7a:c1:79:3b:18:
16:e7:05:87:bb:1d:48:6c:0e:9e:c5:06:c9:5c:96:
5c:47:16:7c:bb:ec:7b:26:ff:54:95:ce:c7:21:90:
c2:b0:1c:e6:64:b4:ae:86:96:f0:23:8e:0d:81:97:
be:eb:c0:97:4d:7b:05:1f:c3:81:8c:9f:9f:96:ce:
ea:71:ba:a7:c6:b6:52:fa:92:2c:b8:b8:c8:85:c5:
a1:de:fe:ff:f5:a0:a0:80:bb:43:d4:10:f7:98:be:
d8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:52:47:78:1C:1B:9F:64:E5:76:A9:8E:10:2D:49:38:52:20:4B:7D
X509v3 Authority Key Identifier:
keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/6B29663CDFAE11ED93DFDF76C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.182.210.0/23
Signature Algorithm: sha256WithRSAEncryption
54:5c:1b:09:9b:92:dc:03:8f:ed:de:86:80:1e:0a:47:7a:24:
a6:1e:5f:9b:23:45:f8:5b:5a:df:76:06:fc:fd:a1:56:40:fa:
3a:e9:7f:20:b7:0c:13:2a:03:c1:67:62:b1:b6:72:d8:c8:9c:
fe:dd:46:8d:cd:7e:e6:3f:b0:66:39:da:ae:7e:64:cd:d2:47:
ac:f2:61:12:49:a8:01:95:67:a5:ad:ab:28:b0:cc:b9:34:ce:
f9:70:f5:b0:ec:08:48:8e:b2:c2:dd:9b:70:ea:4b:4a:6c:0a:
c3:bf:7d:1b:b7:96:80:c6:04:f6:96:0a:43:ef:63:f8:51:75:
49:a2:94:7b:fd:2f:c5:d5:02:ec:ab:24:8e:25:4a:e9:cb:4e:
ae:59:f1:fd:2d:7b:3d:97:0d:24:0a:0b:1e:67:fc:91:5e:30:
17:e2:c9:fd:07:53:d4:54:e9:77:57:c3:f5:0a:e0:f3:cb:d4:
62:1d:c8:d6:36:0a:b3:69:86:7b:9d:c0:ba:08:a7:ff:7e:0b:
53:b4:7b:39:ef:46:fc:d8:c3:5c:23:0e:19:65:a6:8b:42:84:
a7:4a:e2:e2:cc:bd:7f:1e:95:77:54:0b:51:90:15:eb:ca:79:
7c:72:38:80:22:63:3e:59:1e:e8:f3:0b:9d:29:98:48:bb:5b:
a5:b4:a4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-fra.rpki-client.org