Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F005/D2E91690EC7311EAA6619F85C4F9AE02/42D7E19CEC7511EABDD09D87C4F9AE02.roa
File: 42D7E19CEC7511EABDD09D87C4F9AE02.roa (raw, json)
Hash identifier: p8GQtZGB/sHlzNDeZh7BNfs1aLZ6gI+BfzObYJ4Vfao=
Subject key identifier: 81:07:1D:16:DA:F3:82:7C:62:14:8E:BB:3F:0E:51:B9:EC:7D:0E:3E
Certificate issuer: /CN=A913F005/serialNumber=0D29AAECD3DFA80C1650A524A2B514B9A8C0BEC7
Certificate serial: 062F
Authority key identifier: 0D:29:AA:EC:D3:DF:A8:0C:16:50:A5:24:A2:B5:14:B9:A8:C0:BE:C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DSmq7NPfqAwWUKUkorUUuajAvsc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F005/D2E91690EC7311EAA6619F85C4F9AE02/42D7E19CEC7511EABDD09D87C4F9AE02.roa
Signing time: Mon 30 Jan 2023 23:49:32 +0000
ROA not before: Mon 30 Jan 2023 23:49:32 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 132480
IP address blocks: 103.104.212.0/24 maxlen: 24
103.104.213.0/24 maxlen: 24
103.104.214.0/24 maxlen: 24
103.104.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1583 (0x62f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F005/serialNumber=0D29AAECD3DFA80C1650A524A2B514B9A8C0BEC7
Validity
Not Before: Jan 30 23:49:32 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63d8578c-c4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:22:c0:48:a8:a7:8f:80:26:8c:41:78:d1:
af:3a:62:0c:c3:10:9c:5b:76:4e:7a:e3:3f:d0:77:
9b:44:90:51:cc:33:f1:0b:7b:17:06:a8:90:98:65:
bb:5f:f3:00:3a:56:37:75:d5:26:98:31:6f:a4:94:
9f:f8:52:40:14:c2:5d:85:23:83:b1:17:b2:21:10:
3d:eb:e9:80:de:d6:60:0b:32:fd:0d:c1:8d:e9:03:
56:ff:ab:0f:2a:a6:ee:28:26:4c:3a:26:3e:06:b2:
12:93:d5:96:8f:68:18:86:26:43:3c:18:97:37:eb:
04:89:f3:f0:f3:11:95:6e:51:27:3e:a4:33:5d:f8:
39:2b:32:14:29:7c:02:21:ee:06:ab:25:be:0f:0f:
d2:cb:c8:40:6b:e7:a3:b9:27:a6:4f:ab:c0:dd:45:
f2:83:58:61:b4:4b:a4:36:0d:e7:69:a7:da:18:dc:
de:ac:6c:43:2d:e8:a0:40:fc:97:53:52:65:10:eb:
f2:c3:30:ea:c5:db:50:6b:3c:6d:0e:f4:ef:94:67:
02:ef:72:0d:2e:db:e1:e1:32:fc:04:24:30:86:2d:
5f:5f:a5:16:c1:c4:b4:f1:61:21:30:2a:74:10:65:
47:4e:24:12:4f:fd:25:ec:26:94:3f:2b:0e:fc:75:
81:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:07:1D:16:DA:F3:82:7C:62:14:8E:BB:3F:0E:51:B9:EC:7D:0E:3E
X509v3 Authority Key Identifier:
keyid:0D:29:AA:EC:D3:DF:A8:0C:16:50:A5:24:A2:B5:14:B9:A8:C0:BE:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F005/D2E91690EC7311EAA6619F85C4F9AE02/DSmq7NPfqAwWUKUkorUUuajAvsc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DSmq7NPfqAwWUKUkorUUuajAvsc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F005/D2E91690EC7311EAA6619F85C4F9AE02/42D7E19CEC7511EABDD09D87C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.212.0/22
Signature Algorithm: sha256WithRSAEncryption
79:29:fd:36:06:05:b2:e5:13:fc:58:4e:4f:4c:f8:89:c6:04:
ab:95:ec:0c:4e:55:7d:75:7e:5b:96:e3:c2:4e:f1:f4:27:4a:
95:27:5c:1c:9b:de:19:ac:f1:d4:d2:14:39:10:b9:b9:4b:43:
19:6d:12:5d:fb:81:0f:b9:b7:b6:cd:5a:39:13:7a:c0:ce:ce:
c0:ac:49:32:4d:ff:13:95:6c:3b:da:71:c8:6b:7b:c7:d4:b2:
ac:5b:a3:93:22:36:2b:8f:e8:8e:2c:2c:9b:24:d3:dd:7a:55:
c5:13:5a:d7:98:01:b4:bb:74:50:c3:a0:91:82:78:30:ac:38:
38:e0:10:a6:10:7a:c3:62:57:ed:0a:ba:22:b2:8e:74:94:b4:
8f:9d:b6:a0:c8:ed:d1:65:d1:95:b0:b1:7d:2e:d5:96:11:0e:
a8:34:d6:68:36:a9:8b:8c:e8:24:07:5f:dc:f4:48:3b:9e:6c:
e4:55:d3:92:7f:d8:c0:32:3f:b5:a7:d1:f9:98:59:10:d3:44:
5e:0c:b8:4e:a7:fe:27:a6:c8:42:ab:26:aa:2d:09:60:a5:83:
c4:d3:12:0c:32:2b:58:7a:05:d9:b5:a8:f9:a5:b8:4b:a6:61:
65:02:26:88:21:4f:fe:c7:ef:ef:7b:ca:f6:f1:88:f8:42:16:
ce:74:15:5a
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 27 05:59:30 2023 by rpki-client on console-fra.rpki-client.org