Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/7B43A5F6646411EE86B82027C4F9AE02.roa
File: 7B43A5F6646411EE86B82027C4F9AE02.roa (raw, json)
Hash identifier: dgJNBEexVEuw2sQlcX6m4coKfSDzJvzzvQHgrwPU860=
Subject key identifier: 81:31:F9:3B:1D:7B:81:B7:6D:5C:B1:EA:23:85:B1:12:29:A1:71:CE
Certificate issuer: /CN=A913D65B/serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41
Certificate serial: 89
Authority key identifier: 58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/7B43A5F6646411EE86B82027C4F9AE02.roa
Signing time: Sun 08 Oct 2023 15:29:31 +0000
ROA not before: Sun 08 Oct 2023 15:29:31 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 136516
IP address blocks: 103.82.94.0/24 maxlen: 24
103.82.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D65B/serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41
Validity
Not Before: Oct 8 15:29:31 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=6522cadb-3e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:09:13:0f:2f:4c:94:15:b2:85:09:2c:ce:72:
1a:cf:2e:b8:4a:c9:03:09:16:0a:8d:98:b1:50:23:
ad:47:10:e7:4c:a4:69:da:ae:82:8f:a7:36:a8:94:
4d:65:71:84:c4:f0:b5:f5:21:13:6c:b0:d4:fb:fd:
8f:5a:90:1a:70:a3:9e:15:85:ef:c6:44:a0:46:96:
d1:20:87:7d:de:2c:14:a9:78:19:52:dc:47:c9:0a:
33:ea:f4:62:ba:fd:e9:85:c5:2b:a2:d8:e9:3a:31:
90:3c:de:2a:0b:6a:af:43:2b:68:42:48:ab:21:d2:
f0:0a:4b:3f:70:66:cb:ce:dc:ed:cb:77:35:c7:f5:
0a:77:14:39:56:40:a1:0c:80:2c:48:ab:14:82:9f:
32:ae:09:90:24:66:34:4e:9a:4b:f8:29:f6:1b:e4:
77:84:7d:69:68:90:8f:79:ec:cf:9b:95:67:71:a1:
6e:59:2a:f8:bb:dc:41:de:3d:93:d1:ef:7b:c5:34:
b7:e9:b8:91:b1:07:2c:1a:45:eb:42:64:74:50:13:
9b:d2:75:91:df:88:b9:56:d5:f8:8c:fb:e1:17:b8:
67:fd:f0:ec:7f:b4:00:7a:0f:c1:73:67:16:a1:f5:
ed:96:ff:64:db:a6:86:2e:3a:a4:98:93:66:c5:59:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:31:F9:3B:1D:7B:81:B7:6D:5C:B1:EA:23:85:B1:12:29:A1:71:CE
X509v3 Authority Key Identifier:
keyid:58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/7B43A5F6646411EE86B82027C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.94.0/23
Signature Algorithm: sha256WithRSAEncryption
31:15:79:52:56:89:1b:1c:e3:12:84:9f:06:f5:62:fc:98:a4:
32:53:99:2b:d5:94:61:81:1d:2e:c1:f4:7d:01:c6:46:91:97:
fa:4f:22:70:91:48:53:3d:19:99:11:48:f6:75:c2:e0:33:77:
99:e1:64:eb:e5:32:58:b5:d8:5a:80:05:bf:e7:50:ee:92:3e:
4e:80:f2:71:ee:8b:8a:08:b1:eb:5b:af:18:2c:78:be:9a:4d:
34:18:6e:86:57:0f:21:b4:5d:c6:2a:11:c8:e0:3b:69:30:15:
42:11:75:44:96:cb:4b:6f:ae:9e:be:b1:c4:1b:f1:68:e2:5d:
68:0a:76:dc:f5:27:b8:50:48:48:61:8a:eb:6b:40:6c:db:90:
62:59:a1:ab:e9:cc:85:10:d2:37:44:ab:5d:04:45:7d:38:52:
22:72:d4:42:8c:e4:53:30:c2:92:6a:25:e1:ca:12:86:68:0b:
20:35:a0:74:a4:40:33:bb:73:03:4f:7b:95:70:81:d5:f2:57:
87:fa:ed:57:bd:0c:fb:e1:f5:ec:11:95:5f:c1:e1:27:6d:70:
fa:6e:6d:02:bb:51:b5:94:83:23:e2:6e:3e:25:5d:11:ff:64:
e1:1a:33:7a:c6:5a:4c:50:8c:19:1b:2f:1e:31:b8:4e:b6:1d:
7a:80:ba:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 07:53:45 2023 by rpki-client on console-ams.rpki-client.org