Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/09F8A60E08AF11EA95136084C4F9AE02.roa
File: 09F8A60E08AF11EA95136084C4F9AE02.roa (raw, json)
Hash identifier: IcV2rtzUWzaYJta7N5YNGiFG0RlWBDanM8Z1nu2oo8k=
Subject key identifier: 88:E3:24:6A:79:36:12:69:69:BD:F0:9D:66:D3:6C:DB:9A:53:CD:15
Certificate issuer: /CN=A9135033/serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30
Certificate serial: 0BF7
Authority key identifier: 0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/09F8A60E08AF11EA95136084C4F9AE02.roa
Signing time: Fri 10 Nov 2023 18:46:26 +0000
ROA not before: Fri 10 Nov 2023 18:46:26 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 63989
IP address blocks: 103.131.64.0/24 maxlen: 24
103.131.65.0/24 maxlen: 24
103.131.66.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3063 (0xbf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135033/serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30
Validity
Not Before: Nov 10 18:46:26 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=654e7a81-495b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:5f:4a:1c:67:0e:ff:0b:3f:e3:1f:56:74:
a0:29:8d:1b:07:fe:7e:2c:cf:69:08:56:62:38:dc:
a0:56:85:62:84:01:55:7c:34:27:39:b3:8a:09:79:
a8:7b:f0:78:c0:d1:b0:93:78:57:34:bf:d0:c5:2b:
02:5f:91:c9:37:d1:c0:5d:19:75:b4:59:ea:25:6a:
4e:e3:23:45:71:7f:2f:71:cb:0e:bb:27:aa:37:87:
06:fa:c6:49:f6:ba:ad:c4:92:85:d4:12:7b:dc:26:
85:eb:a1:18:ea:be:b2:fd:88:78:15:00:12:9e:49:
61:69:f8:02:ee:04:8b:c6:38:cc:b0:ec:21:49:1c:
16:6e:0a:28:52:d5:66:99:0a:a9:b4:a8:d2:37:01:
0f:83:07:f2:ca:c3:40:f3:d6:b6:b7:0b:f9:f0:e1:
81:ad:84:12:4b:1d:c7:e6:27:38:eb:72:17:75:db:
a2:18:e8:ba:b4:25:8c:bc:f8:6a:6f:06:68:1c:58:
bc:c4:1b:1e:c4:50:2a:54:4e:88:36:af:91:ad:6b:
bc:e6:64:7c:da:c5:d6:81:91:4b:cd:0d:2d:ff:fa:
ca:30:60:5c:f2:96:aa:f3:45:9d:5f:c9:98:1e:d9:
3d:36:2a:e8:e7:a1:c7:78:20:7d:5e:33:30:40:3d:
02:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E3:24:6A:79:36:12:69:69:BD:F0:9D:66:D3:6C:DB:9A:53:CD:15
X509v3 Authority Key Identifier:
keyid:0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/09F8A60E08AF11EA95136084C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.64.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:1f:76:b4:da:4c:6c:d7:be:c8:f5:9f:a6:3a:73:97:75:57:
cb:22:83:b9:06:b6:fc:a3:09:85:cc:72:6e:af:e3:b0:63:dc:
a0:c7:0a:81:4a:74:f7:a9:20:d3:8d:39:21:e1:72:15:56:89:
5e:16:5b:b0:ca:85:eb:b7:a9:1e:4f:cb:1b:f7:42:59:c8:08:
c5:93:56:22:f9:5f:75:27:ab:48:53:74:b7:c8:59:f9:8d:92:
40:47:32:c1:36:11:77:3f:1e:64:07:8b:94:ee:79:63:2f:f7:
cd:f9:b7:2f:ed:b8:e7:4b:2b:4a:74:c8:93:24:f7:df:61:87:
4b:32:db:c6:0c:15:40:49:16:5d:a0:98:83:30:5d:a7:36:f1:
78:b5:5a:46:06:5e:2e:a9:fc:35:9d:0a:33:cd:2c:89:f2:70:
c5:47:ff:8f:fa:4a:2d:31:fb:9f:09:79:62:ce:1f:0b:41:64:
5a:bd:64:99:c0:fb:6f:a9:f1:1b:31:1c:9c:17:cb:cc:1b:94:
d9:5a:0c:60:09:85:d4:88:9b:f9:7d:fd:ff:4b:e5:bd:c0:1e:
de:a5:ae:93:e5:c1:7d:bb:81:1e:56:7e:fb:05:5b:1e:f4:aa:
cc:bd:a2:f6:cf:23:b4:97:bd:4e:dd:6d:5e:be:83:70:15:04:
b0:d3:7f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 22:55:07 2023 by rpki-client on console-ams.rpki-client.org