Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/1644B446D8F111EDBECD346AC4F9AE02.roa
File: 1644B446D8F111EDBECD346AC4F9AE02.roa (raw, json)
Hash identifier: bT78NpvmyfJQ28iApcf9GCQ0cu5T2lnOLbklW4IWiPc=
Subject key identifier: 00:80:5A:60:77:EC:AE:B8:A6:31:39:32:55:33:87:F5:62:86:D1:03
Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Certificate serial: 0D70
Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/1644B446D8F111EDBECD346AC4F9AE02.roa
Signing time: Wed 12 Apr 2023 05:15:49 +0000
ROA not before: Wed 12 Apr 2023 05:15:49 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 9833
IP address blocks: 103.232.213.0/24 maxlen: 24
103.232.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3440 (0xd70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Validity
Not Before: Apr 12 05:15:49 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=64363e85-0339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8d:34:b5:07:7b:90:7e:b6:26:47:4a:38:b2:
d5:e3:8d:9f:b5:94:c6:35:7e:74:d2:d1:86:8b:96:
3e:a5:c3:79:74:3d:ed:09:e5:38:54:fa:38:ca:76:
cb:e6:1a:7e:b7:19:89:f2:fe:40:cc:73:ec:d2:12:
8b:ca:98:20:12:db:a7:5d:27:01:b5:f3:e8:af:fa:
e0:18:65:f7:29:f3:bd:6a:1d:bd:ec:44:7f:48:f0:
04:87:ad:23:f9:45:39:21:a0:d8:59:bc:56:b3:6e:
9b:7c:4b:49:9f:38:2c:4f:84:a4:e9:71:de:9e:eb:
18:ca:67:4b:b0:9a:a9:9f:20:7c:3e:56:60:b8:48:
e7:97:8b:87:11:37:3b:47:a5:5c:d6:27:76:9f:d9:
a9:64:9c:74:35:d2:bc:22:1b:18:ad:72:a7:63:cd:
bf:9c:8f:c5:3c:b9:95:24:bc:69:7e:92:24:7d:50:
7a:d1:45:1a:3a:1d:f7:47:d3:02:41:66:56:d5:10:
47:68:e5:22:76:10:70:29:1d:13:53:c0:59:e1:a8:
94:a6:ac:d3:22:03:cc:3f:da:29:74:f2:2f:b7:ea:
c2:65:a8:2a:fd:8e:e0:e4:0b:38:e0:62:0c:5a:f5:
31:0d:1a:27:34:fa:a2:11:dd:d8:df:49:ab:05:99:
c5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:80:5A:60:77:EC:AE:B8:A6:31:39:32:55:33:87:F5:62:86:D1:03
X509v3 Authority Key Identifier:
keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/1644B446D8F111EDBECD346AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.232.213.0/24
103.232.215.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e7:46:7e:3a:6d:17:18:a0:e0:59:40:9f:36:93:01:78:38:
d0:c6:47:5d:1f:4c:2d:30:99:2f:49:f4:76:f0:59:7c:c9:66:
af:1b:41:b6:9d:5d:0f:28:09:9a:45:8f:30:7f:93:29:4b:67:
37:f9:0b:cf:a5:50:96:d9:c6:8c:21:27:7f:38:36:56:ba:ca:
f8:78:32:78:d4:e9:ef:9a:69:db:16:69:8b:65:db:8d:c3:83:
a4:ce:ff:0c:95:aa:5c:75:3f:a6:ac:10:73:88:ee:3b:8c:b4:
ed:9b:54:43:1c:c8:d0:e5:38:8d:18:5a:b4:de:71:8b:82:e8:
44:c4:fc:a5:34:9d:a2:75:ff:df:ad:d6:7a:11:48:84:b3:1b:
3f:08:5d:83:ad:ab:33:e4:dc:7f:a7:6e:77:34:15:b7:5d:cd:
24:72:3d:dd:01:a3:71:d6:07:5a:1a:29:de:7e:e7:55:83:f9:
c6:0f:fa:ff:be:85:86:ac:df:12:59:e8:fc:fb:55:15:c6:06:
93:33:5e:0d:23:a5:38:85:cc:30:ea:12:65:71:14:32:cd:10:
50:82:7b:e0:89:7a:09:50:85:ed:b8:a8:7f:19:6e:51:8a:da:
9c:9c:83:66:e8:c5:86:2f:b1:51:bf:b9:84:55:7b:61:f5:27:
07:5f:6e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-fra.rpki-client.org