Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/9F2D52862C4311EE9C354172C4F9AE02.roa
File: 9F2D52862C4311EE9C354172C4F9AE02.roa (raw, json)
Hash identifier: AehbOGfzq9oPyBFYaZz7es5/y7BubGt8eHlplanFf5k=
Subject key identifier: 37:CA:6B:ED:C2:3C:3B:42:84:39:D9:F7:B6:F1:F1:D9:FC:F0:38:17
Certificate issuer: /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135
Certificate serial: 10
Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/9F2D52862C4311EE9C354172C4F9AE02.roa
Signing time: Thu 27 Jul 2023 06:05:44 +0000
ROA not before: Thu 27 Jul 2023 06:05:44 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 135615
IP address blocks: 103.175.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135
Validity
Not Before: Jul 27 06:05:44 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=64c20938-055b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2e:9f:06:ef:78:b0:67:cb:55:ef:52:c2:9c:
d8:c7:d1:7d:16:f1:86:8a:02:ad:00:7f:11:12:a2:
76:9f:cd:66:55:fb:1a:67:09:57:1f:78:85:4f:4e:
fb:84:63:e1:69:b4:9a:25:ab:d2:7e:41:bc:c3:11:
8d:be:9d:23:8e:34:92:a7:61:f8:39:0b:92:5d:08:
04:3f:85:00:4b:7a:0c:83:f2:a6:65:ca:85:9a:ce:
29:19:8a:fb:e1:e5:8f:83:47:44:51:49:f3:2f:8b:
39:86:ff:13:c3:7c:a9:1e:cb:4a:7e:9a:71:76:42:
22:da:7f:2d:b1:7a:c2:7e:d0:7a:f2:f7:39:e1:52:
a4:ff:a9:fb:a4:08:33:8f:2e:0d:f8:04:dc:bd:ba:
bb:de:b1:af:55:02:43:7f:7b:cc:40:1d:e0:01:51:
73:51:f6:a2:22:fc:9d:c7:42:7d:86:78:a3:b6:a7:
bd:be:54:1a:23:4f:9d:50:b1:da:3b:87:27:a7:ae:
30:fa:10:cf:6b:9b:b4:6b:45:18:a9:23:03:c9:40:
fd:c3:d2:bd:54:42:8a:da:61:45:8b:4d:18:81:c4:
85:88:f7:5d:2e:d2:30:d4:9d:88:af:61:b4:ad:ab:
f6:46:dd:91:fc:ec:af:07:56:70:1d:36:b2:a5:0e:
ee:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CA:6B:ED:C2:3C:3B:42:84:39:D9:F7:B6:F1:F1:D9:FC:F0:38:17
X509v3 Authority Key Identifier:
keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/9F2D52862C4311EE9C354172C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.56.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:3b:eb:b3:ac:dc:13:62:3e:c6:73:f9:a8:73:b4:64:00:d8:
d6:1e:15:7b:f0:12:f0:a1:3f:65:85:5a:67:b4:4e:24:aa:b3:
73:f5:35:0e:8f:3d:72:59:60:70:bf:16:fc:f7:99:cf:a7:27:
26:5c:60:7f:45:13:48:c1:bb:73:53:74:31:79:36:78:a5:ee:
f9:f6:5f:5c:9c:37:74:53:b4:e8:97:4b:a3:60:5b:05:18:07:
e2:33:e4:aa:c0:5e:13:dd:96:e7:50:a0:7e:61:07:77:8c:2a:
1b:bb:cf:cc:97:e4:7f:25:71:96:7d:eb:16:1e:7b:27:1c:87:
72:5d:91:7d:f4:2b:3e:58:a2:ef:8c:fd:c8:bb:a6:e7:57:2b:
04:45:08:53:0d:6a:a8:6c:96:90:22:fc:2d:e0:36:de:1c:99:
30:eb:dd:7d:64:52:f3:d6:f4:8b:f8:42:46:16:5e:16:aa:9e:
3d:44:e4:5d:b3:d5:28:a8:8a:0b:76:a1:9f:a8:e7:69:f6:9f:
d0:22:a8:13:82:28:49:6e:c6:9e:76:ff:e1:83:27:90:b9:5e:
59:28:3d:16:5d:1e:94:41:03:82:7f:96:1b:78:29:54:89:24:
3f:93:62:87:92:47:ac:c5:9c:d6:9e:ae:b0:55:8c:c2:94:3d:
6e:56:a0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 27 17:07:24 2023 by rpki-client on console-fra.rpki-client.org