Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/13FC325494BD11EDA6CA517BC4F9AE02.roa
File: 13FC325494BD11EDA6CA517BC4F9AE02.roa (raw, json)
Hash identifier: 93UzskT8HTfUN8e3f4omC8VLDYdW55Vf38dsUJJVPWA=
Subject key identifier: 7D:91:DD:25:49:AE:6D:C9:E1:EA:A4:F7:C4:4A:27:F0:06:70:39:22
Certificate issuer: /CN=A913C1CB/serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A
Certificate serial: 02D2
Authority key identifier: 48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/13FC325494BD11EDA6CA517BC4F9AE02.roa
Signing time: Sun 15 Jan 2023 10:12:13 +0000
ROA not before: Sun 15 Jan 2023 10:12:13 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 134562
IP address blocks: 103.175.242.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722 (0x2d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C1CB/serialNumber=48C5DB5A1BBDEB2211058C07D27670B42B6D876A
Validity
Not Before: Jan 15 10:12:13 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63c3d17c-7ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:26:2b:b2:94:6c:11:91:f7:8a:75:d3:d5:dc:
4f:cf:e9:58:ea:50:67:e5:85:18:e8:74:20:fb:02:
6f:ac:b4:91:57:ed:20:ea:34:0e:3c:b6:8f:7a:0f:
f5:86:c9:22:f3:6a:bb:59:07:5e:5d:35:7f:4f:7d:
ae:80:9b:9e:aa:4e:db:57:16:bd:03:06:5b:67:51:
fa:37:4e:1d:65:47:fe:91:f5:2f:ad:98:3a:6c:4e:
dd:96:97:1f:23:70:dc:d1:66:83:26:2d:74:d4:5a:
1c:6f:23:87:bc:95:9a:26:bb:f4:6d:bb:7e:d6:1c:
a6:11:3c:b7:80:20:f1:70:39:d0:8c:e5:31:24:e3:
f4:ad:3f:7f:53:cc:5f:58:3a:fc:1e:d5:ca:ff:4e:
28:d6:b3:c0:16:1a:0e:96:14:f6:c7:07:dc:17:ec:
8a:f4:2a:f0:8b:1f:a1:f6:03:f9:ff:30:d6:19:58:
70:b0:c0:61:41:a3:96:9c:48:55:43:fb:28:65:fb:
cf:bf:f1:93:90:e7:5e:cb:05:52:10:53:95:6e:8c:
6b:5f:50:3e:0a:6b:5e:a9:12:ef:da:df:1e:1e:a2:
88:4a:65:77:37:ba:2c:ea:8d:c3:df:5d:97:5c:a6:
fb:30:ed:b4:61:99:6f:6e:7c:aa:b4:29:ea:99:d0:
ee:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:91:DD:25:49:AE:6D:C9:E1:EA:A4:F7:C4:4A:27:F0:06:70:39:22
X509v3 Authority Key Identifier:
keyid:48:C5:DB:5A:1B:BD:EB:22:11:05:8C:07:D2:76:70:B4:2B:6D:87:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/SMXbWhu96yIRBYwH0nZwtCtth2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMXbWhu96yIRBYwH0nZwtCtth2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1CB/E38E3280405C11ECB17F6819C4F9AE02/13FC325494BD11EDA6CA517BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.242.0/23
Signature Algorithm: sha256WithRSAEncryption
35:71:f1:b2:f0:88:39:88:a9:3f:69:f5:68:c7:d7:14:3c:62:
6f:fd:1f:ef:7c:1a:1a:52:e5:16:c8:5c:15:c3:a6:d8:bc:41:
46:e2:f0:c4:c0:6d:b3:ef:04:40:07:4c:49:5a:a8:30:9f:86:
10:ab:0c:c1:79:63:97:84:5e:6e:b9:51:21:37:ad:48:75:63:
48:28:ba:c9:46:32:a1:2c:8f:bc:89:1a:20:ff:e2:e5:2d:11:
f8:c0:93:8c:19:1b:29:06:47:bb:39:cf:7c:9d:28:bf:e0:11:
4d:4d:65:81:0e:4f:93:d7:41:fb:18:54:bb:9e:94:d2:22:cc:
45:07:c4:06:ea:bc:5f:87:e7:68:9c:d6:42:b7:57:09:ba:92:
9c:ad:c8:7a:7f:41:04:7e:8b:8b:36:c4:52:8e:03:63:f6:39:
73:0b:09:fd:cd:0e:23:2f:7a:76:ae:25:aa:ab:50:64:b9:5a:
2c:11:f4:40:6e:89:df:da:b7:f0:77:9a:b9:4d:a6:60:68:37:
24:1a:b9:a4:2a:d1:3a:28:22:18:42:d2:57:6b:c0:fa:d8:1f:
19:74:ec:00:39:16:ce:44:33:41:f7:c6:6c:8d:7b:80:98:9e:
e3:d9:02:24:31:ac:e3:9a:0c:9e:41:e0:29:6c:5a:e7:9e:1d:
12:b7:d7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:39 2023 by rpki-client on console-fra.rpki-client.org