Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/1233D39691B611ED8BA25C80C4F9AE02.roa
File: 1233D39691B611ED8BA25C80C4F9AE02.roa (raw, json)
Hash identifier: DVYUM5dWimwFmtiGtbb79ppEPwivxOaqMpCp7YJ7nb4=
Subject key identifier: 3F:4E:3C:95:55:83:93:C0:11:DE:CB:77:6E:FE:EC:83:4F:D3:A9:BF
Certificate issuer: /CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD
Certificate serial: 0125
Authority key identifier: 36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/1233D39691B611ED8BA25C80C4F9AE02.roa
Signing time: Tue 17 Oct 2023 03:54:56 +0000
ROA not before: Tue 17 Oct 2023 03:54:56 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 150178
IP address blocks: 103.193.11.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD
Validity
Not Before: Oct 17 03:54:56 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=652e0590-48f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c0:bb:bb:68:af:81:c6:6b:b5:7e:9a:34:05:
88:6d:63:5f:59:3f:8a:51:de:df:bf:e8:21:e4:64:
ac:d8:52:7a:2e:ea:f1:49:2a:49:68:23:c1:05:1f:
a0:04:10:39:c6:4a:e1:36:c8:b8:e8:97:3d:67:23:
89:62:79:93:75:08:bb:13:90:58:e3:46:0e:56:15:
cd:91:38:83:db:0c:2f:dd:02:bf:bf:50:60:c1:80:
2b:f4:a9:0d:95:62:7a:25:c7:79:65:25:b3:14:94:
d6:82:3d:74:40:07:4c:ab:25:74:4d:8a:f0:22:29:
45:74:90:3f:ed:8a:bb:7d:06:0a:5a:13:ed:c2:d1:
15:63:be:81:a7:da:ea:92:73:9d:be:13:74:aa:f9:
23:35:a3:6c:cb:f1:6a:ce:3e:08:ba:a1:fa:33:cc:
4b:2b:c1:f1:3f:e9:8a:45:ee:0c:9b:43:5a:3d:b2:
c5:92:ec:0a:d6:1a:d2:56:a8:2b:f2:73:f6:e8:7c:
f8:8b:5f:f8:c2:be:9b:2d:d4:66:cb:5d:72:c1:84:
0d:7a:f9:a8:e3:cb:3c:20:a9:8b:af:b3:81:3c:70:
fc:7d:d6:37:6b:7d:17:00:c0:35:20:71:e8:3c:5a:
5b:8a:54:e3:b9:07:69:cf:59:77:36:2c:67:33:7c:
1e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4E:3C:95:55:83:93:C0:11:DE:CB:77:6E:FE:EC:83:4F:D3:A9:BF
X509v3 Authority Key Identifier:
keyid:36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/1233D39691B611ED8BA25C80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.193.11.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:22:30:73:52:13:fd:5c:9d:22:67:99:ad:20:cd:6a:f6:2c:
2a:74:12:50:08:8a:2c:16:75:2f:85:36:a9:17:9d:b3:20:51:
c2:b3:17:01:40:1f:ff:ac:07:c4:e1:34:d7:b1:6e:4f:44:cd:
77:a8:9c:15:a6:fb:76:be:63:07:65:8c:e0:fc:9f:eb:6d:95:
7b:fe:42:7e:02:fc:60:e3:8d:da:53:73:7f:50:7e:c4:51:fc:
a7:31:54:43:a5:6e:61:68:55:81:ab:01:61:3d:1f:b7:b4:b3:
25:53:dc:b8:b2:93:dc:ac:2c:10:3d:6c:8e:17:ca:75:f8:b4:
29:9a:84:52:85:a5:24:42:93:40:78:48:d6:9c:03:e1:65:fb:
9c:0f:17:b1:f6:bd:68:c1:bb:76:26:d4:9f:1d:2a:10:68:4e:
da:85:af:77:76:f6:53:dd:8a:5d:09:44:fe:3c:60:a2:70:62:
ee:a6:1d:d6:5a:73:1c:38:7c:31:eb:10:6a:a2:a9:12:d4:1c:
88:1d:d1:9c:26:17:f4:42:30:95:2d:c4:ba:f9:ea:4a:a5:aa:
94:70:4b:ea:4c:39:e5:9f:b8:e8:46:a6:68:f6:34:fd:d6:bd:
0c:64:3b:b1:35:d3:7e:74:3d:65:92:af:77:11:03:90:d8:32:
b7:57:22:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 13:51:51 2023 by rpki-client on console-fra.rpki-client.org