Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/338692EA803011EE8BE94459C4F9AE02.roa
File: 338692EA803011EE8BE94459C4F9AE02.roa (raw, json)
Hash identifier: H6+0cne/jKnqOlt6/M54/7SF5WN51jPHf4/1zYXdglM=
Subject key identifier: 32:77:BB:EE:DE:18:0D:50:BA:1C:FD:A1:B2:CF:FD:E8:3A:D0:EF:F8
Certificate issuer: /CN=A913E05B/serialNumber=5758A413556582F8598E1F45FC633799A7B1D107
Certificate serial: 0F78
Authority key identifier: 57:58:A4:13:55:65:82:F8:59:8E:1F:45:FC:63:37:99:A7:B1:D1:07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/338692EA803011EE8BE94459C4F9AE02.roa
Signing time: Sat 11 Nov 2023 01:18:21 +0000
ROA not before: Sat 11 Nov 2023 01:18:21 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 24322
IP address blocks: 103.65.141.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3960 (0xf78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E05B/serialNumber=5758A413556582F8598E1F45FC633799A7B1D107
Validity
Not Before: Nov 11 01:18:21 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=654ed65c-ce76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:4f:ab:ee:86:bf:0f:8f:38:1d:e1:99:8c:
81:79:1a:be:c1:cd:3a:3b:ec:0a:b4:20:54:c2:3e:
36:45:79:14:54:1c:38:31:bf:b5:28:dd:cb:aa:a6:
89:93:bb:40:28:c3:aa:2b:fd:95:d2:bb:8b:65:ea:
41:28:88:e2:2e:af:d9:e4:47:09:d3:fb:76:b6:90:
a5:e8:9a:f5:2d:bf:f2:70:74:76:40:96:7b:20:dc:
4a:3d:e2:49:09:56:a8:d5:b0:47:e5:08:c2:a1:b8:
01:12:a9:e4:90:23:99:bc:ca:1d:1a:96:54:be:70:
31:fd:24:67:42:93:5b:66:d3:ee:75:6a:2a:96:d8:
38:b6:59:fb:2f:9f:24:be:a7:b6:09:71:7a:c4:4e:
2c:28:bf:71:a2:2d:a9:39:a9:08:ac:ce:02:d0:c4:
04:55:e3:fc:a4:cf:42:85:97:73:02:31:8c:ec:83:
3e:89:18:b5:d4:7d:81:2f:1f:2d:e0:3f:ab:f3:a5:
30:af:6e:8c:74:50:ed:3d:0e:08:ae:a3:f7:b1:6c:
7c:05:da:54:0c:4c:d3:c6:dc:e7:da:40:62:d1:f6:
54:a3:7b:64:f6:b2:4a:b6:12:ff:4c:c5:8c:be:e3:
da:65:8e:52:ec:93:1d:c3:ef:2c:9a:3f:c1:c5:89:
5d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:77:BB:EE:DE:18:0D:50:BA:1C:FD:A1:B2:CF:FD:E8:3A:D0:EF:F8
X509v3 Authority Key Identifier:
keyid:57:58:A4:13:55:65:82:F8:59:8E:1F:45:FC:63:37:99:A7:B1:D1:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/338692EA803011EE8BE94459C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.65.141.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:70:0b:c4:19:06:7f:01:d9:08:da:d9:90:de:38:d3:67:03:
98:ae:ae:f4:28:bc:4f:00:ef:4c:b1:c2:fd:91:6d:32:e5:64:
b7:3b:93:17:16:f0:e3:4c:34:8f:a2:bd:e5:30:81:18:d3:2e:
ea:67:21:fe:85:39:7d:27:74:19:83:67:be:3c:a7:5e:b5:68:
be:a6:ed:b0:4d:80:ac:5e:9f:b4:34:2b:40:b7:06:1e:71:9b:
3c:cd:95:45:77:c5:6c:ef:db:5a:96:17:71:b5:bf:1e:61:c8:
fa:95:57:d7:36:c6:2c:a4:fb:30:15:21:08:5a:e4:7c:de:c0:
5e:d1:22:5f:9a:e7:af:4c:15:46:6b:d7:99:11:dc:d2:85:35:
c7:41:de:16:30:db:91:85:22:e4:39:f9:2e:56:d2:f5:43:cb:
a7:5a:35:8a:83:21:98:cc:a0:00:d9:22:54:a2:67:fa:bc:c4:
4c:ff:a7:01:88:08:b6:8e:50:1d:b6:95:72:8b:5c:b2:7a:75:
14:0c:2b:98:eb:ac:8c:cd:53:7d:0c:e9:36:4a:a9:05:3b:ab:
c5:e6:11:75:51:4a:26:9f:d4:f3:96:3e:a7:27:a0:d5:d5:4a:
9d:d2:d1:34:8c:ff:4c:3e:e8:e5:7e:94:f7:91:5b:4f:d0:9c:
be:ea:6e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 11 03:08:41 2023 by rpki-client on console-fra.rpki-client.org