Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/9C98267CB7D611EDACEDEC79C4F9AE02.roa
File: 9C98267CB7D611EDACEDEC79C4F9AE02.roa (raw, json)
Hash identifier: olGK2oOnKOO0biY7ywu5D5nCoP4/5AonORLh7lJrIts=
Subject key identifier: 23:2B:DD:38:1D:7E:BB:3D:76:EA:15:CC:BF:36:AA:15:10:77:DC:47
Certificate issuer: /CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
Certificate serial: 0337
Authority key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/9C98267CB7D611EDACEDEC79C4F9AE02.roa
Signing time: Wed 01 Mar 2023 02:13:10 +0000
ROA not before: Wed 01 Mar 2023 02:13:10 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 134711
IP address blocks: 103.12.188.0/22 maxlen: 22
103.46.220.0/24 maxlen: 24
103.46.221.0/24 maxlen: 24
103.46.222.0/24 maxlen: 24
103.197.144.0/22 maxlen: 22
220.158.188.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 823 (0x337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
Validity
Not Before: Mar 1 02:13:10 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63feb4b5-511a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3a:1a:db:51:37:24:99:26:45:23:5d:47:7d:
57:ce:e7:2d:45:c7:49:71:05:f9:47:74:c0:c2:76:
63:7f:22:15:a8:81:66:81:be:18:68:64:b3:0c:23:
cf:29:63:38:c4:43:d6:87:a0:95:c2:26:21:81:04:
ba:92:f4:d8:ef:3f:77:bc:bd:95:fb:d2:bb:2f:e1:
6d:9e:fc:80:37:8c:72:3d:c7:81:dd:ea:19:52:81:
9c:e7:7d:2b:90:60:76:96:ef:de:dc:aa:85:d9:81:
4a:fb:14:76:6a:15:a0:53:85:2e:17:77:c9:9f:f6:
ea:6b:62:49:39:8d:e7:0d:20:f5:93:57:5c:0f:7c:
9d:b4:71:80:f7:38:f4:cb:e2:9d:1f:9e:a2:ab:ab:
28:5a:93:b2:31:89:ca:15:1f:03:77:3d:af:f7:e5:
16:3e:8e:6d:37:23:15:db:25:60:a2:4a:d6:a9:5d:
67:e6:36:b0:17:2a:59:c8:2b:1e:0e:a7:4b:69:cc:
90:83:02:a4:b5:63:28:83:c5:65:25:0d:02:e2:77:
a3:14:46:67:69:57:59:b3:47:e9:e4:52:64:04:9a:
ec:90:47:46:c3:81:2a:a1:16:02:1a:20:34:39:e7:
db:e3:ef:36:aa:0a:44:d6:b5:14:a4:47:b6:ed:d7:
41:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2B:DD:38:1D:7E:BB:3D:76:EA:15:CC:BF:36:AA:15:10:77:DC:47
X509v3 Authority Key Identifier:
keyid:87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/9C98267CB7D611EDACEDEC79C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.12.188.0/22
103.46.220.0-103.46.222.255
103.197.144.0/22
220.158.188.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:21:50:93:37:07:77:af:52:7d:a8:c4:df:98:dd:ac:30:b7:
b9:7c:92:7e:a4:48:f6:6a:c5:6f:01:f1:9d:4a:49:2b:9f:50:
da:dc:bd:2a:b3:06:f9:68:e1:9c:6b:53:08:9c:07:dc:db:38:
49:d0:15:d9:46:14:fc:61:f9:ba:bf:57:f2:ca:e0:46:1e:f3:
4d:6a:1c:19:a9:59:cd:c0:ab:78:1d:63:91:f9:ae:27:da:cc:
14:e7:55:ef:37:ff:d8:1a:58:98:f8:b7:7a:57:ba:52:ae:c1:
6a:36:64:72:59:40:b1:2d:2f:b3:97:7d:81:2c:d8:6f:3d:be:
eb:58:82:c2:a8:d5:06:af:42:e1:bf:74:d6:2b:9f:b4:c7:83:
f3:cf:a0:5e:12:1b:dd:04:de:45:db:32:cd:ce:35:53:05:17:
56:19:ee:2a:3a:f6:45:95:2d:ca:37:29:d3:98:c0:06:8c:c5:
54:2b:5f:b6:eb:6e:f2:86:1b:c4:74:0e:0a:85:03:41:8e:50:
fa:69:e5:7b:06:19:49:4f:59:c5:13:e7:d1:83:81:a8:7b:c5:
8e:0c:76:59:6b:66:b4:ab:0d:6d:fc:48:98:97:e6:5a:55:fd:
59:93:31:ea:3b:89:9f:c5:24:a7:e5:92:2a:fe:85:c1:22:cb:
92:77:1d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:39 2023 by rpki-client on console-fra.rpki-client.org