Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/7CC977BE2BC711EEAEED976EC4F9AE02.roa
File: 7CC977BE2BC711EEAEED976EC4F9AE02.roa (raw, json)
Hash identifier: DaU7uAyj3Zio7tsl1DUifWZZz20+06miTJLCABJ4Td8=
Subject key identifier: 4E:08:FD:09:BC:7A:18:A7:DB:C6:E5:B8:AA:22:71:9C:C3:FF:1B:25
Certificate issuer: /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135
Certificate serial: 04
Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/7CC977BE2BC711EEAEED976EC4F9AE02.roa
Signing time: Wed 26 Jul 2023 15:17:09 +0000
ROA not before: Wed 26 Jul 2023 15:17:09 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 139716
IP address blocks: 103.175.57.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135
Validity
Not Before: Jul 26 15:17:09 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=64c138f5-08af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:d8:96:b8:53:9c:42:97:e3:b6:cf:9c:30:
ab:f1:11:7a:2b:7e:67:3c:86:7b:3a:16:7a:bb:c2:
cf:a4:01:52:2f:dc:a3:6d:93:d5:81:f0:85:e7:5a:
6b:21:1c:dc:03:c9:2b:a6:9a:5a:0d:41:59:49:a3:
5f:9e:b4:32:4f:b8:61:0c:f3:3f:61:a1:4c:3f:55:
48:fa:af:b6:a5:55:d0:6d:b8:4c:b9:4b:64:94:c0:
88:4f:d2:33:0f:ae:d9:d3:d6:6b:da:45:fc:6a:ea:
7f:ea:27:4c:e6:38:59:a8:93:06:38:0d:7b:8e:59:
0f:fa:8a:08:23:e6:63:d2:a8:d9:e1:52:64:56:6f:
e3:f8:ce:5d:39:3f:3f:3c:c5:a6:e5:25:0b:a9:ab:
d2:8a:2e:df:b4:56:1e:3f:6a:0b:ee:c4:f4:30:5f:
7a:99:c0:a4:2b:ce:ea:da:8c:be:d2:02:a3:3b:0f:
7b:d6:7c:25:4c:80:1d:34:04:50:ab:fc:28:6d:96:
79:31:f4:db:98:52:e6:5e:32:71:8f:04:92:c9:52:
97:0e:74:b2:cf:06:4e:16:d3:d7:ff:4b:43:71:cf:
72:4b:38:ed:df:9c:51:d2:dc:d1:db:54:06:0d:64:
a5:53:94:fc:c6:e2:b1:ee:6c:93:4f:7a:52:a4:06:
62:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:08:FD:09:BC:7A:18:A7:DB:C6:E5:B8:AA:22:71:9C:C3:FF:1B:25
X509v3 Authority Key Identifier:
keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/7CC977BE2BC711EEAEED976EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.57.0/24
Signature Algorithm: sha256WithRSAEncryption
85:cb:10:a1:20:8d:3f:07:d8:25:08:b6:02:a3:e5:35:f0:47:
94:4c:f3:12:ab:11:f6:05:cb:3e:67:81:6a:bf:92:97:45:34:
bf:bf:09:bd:3b:8a:d5:75:17:fa:f2:cc:6b:6b:6b:d2:08:fa:
c1:c8:de:84:f6:e0:98:16:b0:c9:f4:77:1c:9a:94:a2:fb:c6:
83:ee:4f:e1:48:7d:9e:12:60:7c:a6:c2:d1:d8:69:65:8d:8e:
c8:f6:ee:ec:3e:68:eb:5c:f0:de:42:1a:7e:34:21:0e:d6:78:
39:43:95:d7:67:81:3a:d1:b5:b1:c9:a0:4d:bd:cd:4c:57:3a:
90:ab:51:35:df:79:0a:43:88:f6:f5:7c:93:b5:48:a1:fe:ea:
9b:68:85:2d:fc:4d:77:b4:ac:ba:ba:cc:e8:75:18:19:7a:e9:
aa:9b:4f:de:95:88:60:8b:05:f7:f7:a8:f4:68:3b:5a:13:8f:
de:94:c8:06:1d:2d:f4:e4:dd:ed:03:3b:1e:4e:b6:b5:5e:b2:
98:62:ed:ce:75:c0:c9:be:a8:7d:34:33:c0:99:a8:e4:8e:57:
60:f6:1f:f6:8b:8c:b0:44:3f:b8:94:9b:a1:89:e0:4e:a3:80:
f0:68:d8:5d:b8:5b:2b:00:9b:a6:6c:67:5f:1d:fb:29:1a:a7:
52:cf:42:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 18:57:35 2023 by rpki-client on console-fra.rpki-client.org