Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/C4569EA2114511EC87605376C4F9AE02.roa
File: C4569EA2114511EC87605376C4F9AE02.roa (raw, json)
Hash identifier: jsbOjErdKxi9Atf250laMx1mucKXgDymofX4dVJIAas=
Subject key identifier: 3A:BD:53:6A:0F:87:99:43:DE:E0:2E:22:6C:7B:B9:6F:BD:69:E9:EB
Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial: 0340
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/C4569EA2114511EC87605376C4F9AE02.roa
Signing time: Sat 07 Jan 2023 03:02:25 +0000
ROA not before: Sat 07 Jan 2023 03:02:25 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 40676
IP address blocks: 103.46.141.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 832 (0x340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Validity
Not Before: Jan 7 03:02:25 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63b8e0c1-6ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3a:72:fe:18:bd:fd:46:64:95:e9:cc:e4:9e:
39:04:a2:65:85:e1:77:60:2b:09:92:3b:d1:01:dc:
43:83:22:2a:ec:02:a4:f4:47:b6:d3:5a:3a:73:97:
78:3c:3a:71:bb:e4:f8:cb:7c:fb:45:e8:9d:a9:42:
27:1c:33:a9:5f:75:b4:00:05:b6:6e:c6:e6:3b:e4:
3a:1d:4d:c4:de:f9:39:58:0d:76:51:03:58:1b:8f:
67:52:72:23:57:e1:c9:f0:25:de:05:9e:cf:bb:be:
c7:37:3d:0b:3a:57:e4:38:e0:fb:dc:4c:31:45:69:
e1:ac:32:0b:f6:69:0c:9f:36:2b:a9:8e:46:46:31:
93:3e:d3:29:7e:50:fb:4d:75:40:e6:b6:c6:58:e4:
ed:6d:14:9f:23:53:30:a5:9a:78:21:c4:96:d0:09:
fe:a3:49:84:b9:94:34:fa:95:b0:47:70:53:3b:6f:
b7:83:0b:26:14:d9:d7:5a:b8:87:a5:b5:e4:9f:63:
7c:d9:ae:9b:26:bf:25:a8:53:67:4f:98:f7:83:78:
d9:5c:72:a7:cf:e4:34:dd:3c:58:38:b1:9a:a1:51:
3c:47:a1:1b:4e:bd:40:40:ad:04:d1:a5:4e:52:21:
a8:c6:18:5c:4b:58:2a:7b:41:12:e3:3d:1e:23:d7:
31:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BD:53:6A:0F:87:99:43:DE:E0:2E:22:6C:7B:B9:6F:BD:69:E9:EB
X509v3 Authority Key Identifier:
keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/C4569EA2114511EC87605376C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.46.141.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f0:3f:b3:a8:3f:b2:9b:fe:9a:51:9f:6c:f9:43:38:55:05:
8d:32:34:9e:6b:3d:b1:03:2f:70:cc:fd:29:90:d9:cf:17:45:
fb:e4:a9:14:0a:bf:f3:c2:06:48:2c:43:c1:20:f0:34:4a:68:
b1:52:18:de:ae:36:97:68:c1:a6:ae:36:70:e9:a8:f0:5f:5c:
d3:8a:92:c4:2d:6c:e7:f7:f0:7b:b3:34:93:eb:a7:19:34:ad:
3a:04:ce:a1:d1:63:35:42:cb:55:9a:d9:4a:be:37:70:10:69:
18:dc:06:ee:cb:5b:5f:06:fb:c5:f1:09:e2:8f:44:72:5f:ea:
31:b3:45:00:69:23:7a:0e:79:6b:fe:3f:99:a3:d3:4c:74:17:
33:ce:f6:68:01:4f:71:74:62:66:25:ca:65:51:5d:41:80:00:
1b:c7:67:94:98:8b:b1:46:a2:af:5a:47:da:a3:63:1c:e7:e8:
b7:86:9f:2b:11:89:6d:22:42:88:12:9b:1b:2c:af:fb:2a:ff:
10:e0:b8:01:27:18:4d:5c:a4:8a:6d:ce:3f:49:18:0c:91:32:
24:d6:75:f7:76:75:18:69:37:95:72:3f:58:17:9d:ba:2a:48:
f8:cc:56:1b:01:9f:9f:37:8b:b9:80:46:0d:0f:e1:48:22:4e:
b2:41:30:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-ams.rpki-client.org