Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/C83CEAD0AD3111EB96D4DC23C4F9AE02.roa
File: C83CEAD0AD3111EB96D4DC23C4F9AE02.roa (raw, json)
Hash identifier: UMJ9By8rBnK0joPcf8ruzzLFKCWZASFOnzZbNIbyVGk=
Subject key identifier: 03:25:19:AA:B0:45:80:42:E6:A9:0B:42:35:3A:B9:6B:F4:67:67:78
Certificate issuer: /CN=A913BBE6/serialNumber=9359DD2E1214EB6BA5622AB3C80B6A9216680CCC
Certificate serial: 04D6
Authority key identifier: 93:59:DD:2E:12:14:EB:6B:A5:62:2A:B3:C8:0B:6A:92:16:68:0C:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/C83CEAD0AD3111EB96D4DC23C4F9AE02.roa
Signing time: Wed 25 Oct 2023 00:12:12 +0000
ROA not before: Wed 25 Oct 2023 00:12:12 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 4768
IP address blocks: 103.5.224.0/23 maxlen: 23
103.5.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1238 (0x4d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BBE6/serialNumber=9359DD2E1214EB6BA5622AB3C80B6A9216680CCC
Validity
Not Before: Oct 25 00:12:12 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65385d5b-dc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:38:ec:94:90:82:42:22:17:7d:17:b7:ab:c5:
2b:5f:80:05:e9:dd:a4:c7:d3:4a:a9:4f:a1:b3:e0:
9f:f2:a0:a1:e6:eb:62:48:87:32:e9:13:a1:b0:84:
f4:95:cd:62:d9:71:3d:cd:fd:22:dc:09:25:3a:9e:
bd:19:1e:40:36:3e:41:f5:40:30:20:9d:65:80:35:
c3:fe:ed:0d:14:78:20:f9:1c:63:0a:29:6e:74:01:
8b:50:5d:19:30:1c:d8:11:dc:08:0f:ea:54:73:be:
14:ee:10:0a:c0:84:89:2c:6d:b6:41:b4:92:a0:d9:
7b:dd:82:f4:95:55:e8:e4:84:5e:cc:84:61:52:7d:
82:62:c7:77:88:28:0c:a9:48:09:ba:1e:ac:ad:dd:
ea:10:ed:e4:df:c5:e8:9d:f0:23:a4:0e:91:4f:be:
1c:45:a1:0c:d3:35:d6:27:08:7b:9d:aa:c6:90:ce:
f2:3c:9b:5d:bf:6e:e7:e3:b2:3f:a2:97:e6:58:74:
99:83:6c:f4:8a:20:12:d9:9a:7a:3c:2c:a2:65:f5:
85:8b:5f:69:0b:22:2b:3f:94:d5:f8:6c:f2:7d:59:
7d:d8:c2:55:79:c8:07:29:6a:7d:0d:35:80:52:79:
c6:4d:b3:64:d3:db:58:0b:a5:3f:30:30:e0:06:df:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:25:19:AA:B0:45:80:42:E6:A9:0B:42:35:3A:B9:6B:F4:67:67:78
X509v3 Authority Key Identifier:
keyid:93:59:DD:2E:12:14:EB:6B:A5:62:2A:B3:C8:0B:6A:92:16:68:0C:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/C83CEAD0AD3111EB96D4DC23C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.224.0/23
103.5.227.0/24
Signature Algorithm: sha256WithRSAEncryption
97:c5:f9:d5:9d:25:a2:5a:0e:25:7f:d1:08:62:6b:f8:6c:46:
fc:9e:05:5e:f2:79:25:46:e6:9e:26:18:43:a2:27:c9:12:b5:
8c:02:16:1f:f8:dd:1b:41:69:ab:84:76:1c:59:cf:bf:31:08:
03:6e:0d:bf:fe:af:79:5a:6e:85:84:ce:e8:97:0b:c8:4a:ca:
98:c6:3c:7c:a5:27:76:03:e9:af:06:aa:70:7d:39:f6:94:eb:
3a:2e:a4:d6:9d:65:df:23:45:6e:8f:9e:a6:2f:b8:6f:6d:b2:
b6:09:87:24:4d:6d:33:1a:d4:3f:73:4f:f6:67:20:6a:d2:de:
ce:e5:3c:85:67:d3:bb:be:3d:e4:3b:7c:53:b4:56:1c:c3:ab:
b5:38:03:a4:14:f4:84:31:e0:e5:06:fb:db:80:c4:61:29:5e:
9b:25:cc:cf:3c:ef:f7:fd:ec:a6:76:23:f0:60:89:e1:a0:68:
b3:22:6d:ee:2d:92:f6:47:7a:74:f5:c1:d9:32:3d:40:49:9c:
03:06:f4:7f:af:dd:fa:11:b2:15:ad:04:63:99:0f:73:d8:c6:
25:32:b6:a0:2e:63:8b:16:71:08:cf:76:fe:55:28:a9:69:43:
33:7d:f9:6a:f3:d5:c0:e3:29:0c:2b:10:22:7e:25:1b:f7:4c:
fe:1f:4e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 10 23:37:21 2023 by rpki-client on console-ams.rpki-client.org