Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/1407C464C25611EC94A6D470C4F9AE02.roa
File: 1407C464C25611EC94A6D470C4F9AE02.roa (raw, json)
Hash identifier: k3nhdwhdnHQHjGbxdjMRyBBU34bwr3dF9BlBlTjJHwI=
Subject key identifier: 0D:93:9E:9B:38:08:57:16:2D:05:50:DA:49:74:F3:8A:ED:D3:BD:DB
Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Certificate serial: 0C4B
Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/1407C464C25611EC94A6D470C4F9AE02.roa
Signing time: Wed 06 Jul 2022 07:05:27 +0000
ROA not before: Wed 06 Jul 2022 07:05:27 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 149796
IP address blocks: 103.232.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3147 (0xc4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Validity
Not Before: Jul 6 07:05:27 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62c53437-372f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:49:e6:fe:45:11:b7:f2:9b:1d:9c:d1:ac:4c:
e5:ba:51:1d:94:a3:b5:c1:4b:ff:26:d7:53:e8:22:
7a:da:56:55:f9:0c:29:7f:b9:e3:d7:e7:1e:e1:7a:
6d:67:71:b1:99:2a:5f:ef:66:a6:12:a7:37:4b:51:
c6:8c:cc:54:7d:05:d2:81:64:cd:1e:e0:d2:cb:23:
de:3c:ec:66:74:d6:08:85:57:6d:fd:2a:da:e7:27:
dd:20:f8:b1:1d:46:e1:3f:4c:e2:b2:70:bf:1a:6d:
c8:e4:de:6d:33:87:43:d1:9b:de:2f:53:9e:b3:2d:
37:d4:ae:95:d6:64:fb:df:f7:bb:c9:81:88:c4:54:
74:70:a6:94:f8:aa:7c:67:41:ee:6f:84:fc:19:5f:
e9:d5:7c:dd:31:b2:b1:b9:ac:d6:70:76:db:24:d5:
3f:8d:60:11:c7:94:f0:0b:be:11:f3:b4:c5:27:c0:
61:6b:56:5c:84:ac:5b:db:23:e1:92:40:d6:f4:9b:
b4:7c:4a:fe:60:a6:ab:4a:8a:35:4e:30:ef:44:4b:
29:ec:b8:bf:b4:5a:0e:41:7c:69:49:45:9c:08:f7:
58:16:47:4f:01:59:26:5d:9c:4f:e2:09:ad:0e:71:
cf:32:bc:1e:0f:a3:94:2e:48:e9:41:ae:5e:26:c3:
f8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:93:9E:9B:38:08:57:16:2D:05:50:DA:49:74:F3:8A:ED:D3:BD:DB
X509v3 Authority Key Identifier:
keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/1407C464C25611EC94A6D470C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.232.214.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:52:fa:a2:10:d2:2d:2f:fc:e2:de:dc:8e:35:6f:5a:39:70:
27:eb:66:89:a7:14:7a:de:ed:53:ed:59:36:4f:3b:cd:a2:86:
40:ae:24:fa:47:c1:9c:79:f0:60:7e:a4:d6:56:b9:be:49:fe:
95:b5:c9:cb:d8:42:3e:3c:3e:f7:48:39:05:5a:bd:fd:1e:35:
69:6a:13:5c:bb:0f:19:0c:ff:d8:e8:75:8b:56:fd:6c:27:c8:
bf:71:f9:5c:69:0c:f7:42:c6:2c:a9:1c:d4:fa:1b:b7:af:2f:
e7:5b:dd:dc:55:3d:6c:85:b2:d0:7b:31:e4:36:76:b9:74:6d:
c6:b0:22:80:53:f2:f7:a1:8b:b6:a1:e0:49:85:dd:a9:0e:06:
3b:9d:8b:63:50:44:9f:7f:c0:f7:3e:21:42:ca:8d:34:ca:70:
0c:35:42:c2:5c:3d:68:9a:28:e7:72:2c:28:91:83:77:bc:d7:
36:aa:05:57:b1:f4:83:cc:6d:3a:0f:91:5b:41:fa:61:d8:53:
52:e6:b7:94:b2:6c:4b:2b:1f:9c:ef:66:d9:72:da:b7:0b:78:
f4:ee:cd:c6:a3:e2:7c:9d:0e:f3:3d:41:e1:77:6e:bc:4e:c3:
59:23:be:cc:fa:85:e0:44:b5:39:77:5f:88:1d:05:8e:3d:86:
54:24:8c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-fra.rpki-client.org