Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/9A4262D6BE4811EB986DAE86C4F9AE02.roa
File: 9A4262D6BE4811EB986DAE86C4F9AE02.roa (raw, json)
Hash identifier: boTIB+9nxSEhEL5wwAr++RsBrhu2d8/Sv49fduR0qwE=
Subject key identifier: C1:C3:5D:FE:81:33:FB:59:3D:B2:61:5D:BA:A5:72:47:58:3A:26:5D
Certificate issuer: /CN=A9148F9A/serialNumber=9F7DED7D05B81DE66C735BB8547E76048C9C3F5A
Certificate serial: 0478
Authority key identifier: 9F:7D:ED:7D:05:B8:1D:E6:6C:73:5B:B8:54:7E:76:04:8C:9C:3F:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/9A4262D6BE4811EB986DAE86C4F9AE02.roa
Signing time: Thu 03 Aug 2023 00:21:30 +0000
ROA not before: Thu 03 Aug 2023 00:21:30 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 140875
IP address blocks: 103.152.194.0/24 maxlen: 24
103.152.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1144 (0x478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148F9A/serialNumber=9F7DED7D05B81DE66C735BB8547E76048C9C3F5A
Validity
Not Before: Aug 3 00:21:30 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64caf309-68c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:7c:89:2b:52:29:0b:84:33:1e:4a:95:da:
4d:81:95:9e:32:be:48:ff:c9:60:42:2f:22:40:a3:
cd:5d:28:c2:e0:64:0e:ba:1d:9a:3a:85:38:7d:2f:
36:35:88:2f:e5:1b:dd:49:ec:20:94:c4:40:ed:7f:
86:cc:a3:4e:50:9d:32:7d:bb:5a:34:1d:bb:f9:98:
fc:3a:58:76:cc:c9:e0:1e:a3:e5:4c:2d:c7:7b:23:
66:16:6b:6b:d5:99:b1:49:50:97:34:ee:a0:3a:91:
4c:ca:19:07:3b:a7:d1:4c:53:53:1f:72:25:6b:52:
ec:71:83:a6:4a:a0:e0:2f:e1:ed:79:cb:f2:21:8c:
28:5c:e8:b8:45:a4:aa:7c:fc:8d:da:37:40:05:67:
32:71:03:04:07:49:00:36:22:1d:37:4e:8c:01:d5:
7b:2e:c9:8f:6c:ac:5b:51:29:46:c1:d9:ae:d1:a8:
42:de:b9:35:92:f5:8e:ea:c7:17:f2:f8:7e:d3:39:
9d:cd:24:d3:71:94:55:63:25:4a:a6:68:9d:44:67:
cc:b7:c5:e6:7f:b7:bc:ca:90:1a:9c:d2:c0:b7:ea:
4d:ce:67:41:36:1b:c8:51:d3:78:77:f7:c4:55:22:
f2:94:79:3b:b7:a3:bc:95:4e:61:5f:fd:e6:78:c9:
72:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C3:5D:FE:81:33:FB:59:3D:B2:61:5D:BA:A5:72:47:58:3A:26:5D
X509v3 Authority Key Identifier:
keyid:9F:7D:ED:7D:05:B8:1D:E6:6C:73:5B:B8:54:7E:76:04:8C:9C:3F:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/n33tfQW4HeZsc1u4VH52BIycP1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n33tfQW4HeZsc1u4VH52BIycP1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F9A/C0EA5798BE4511EBB0C5D084C4F9AE02/9A4262D6BE4811EB986DAE86C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.194.0/23
Signature Algorithm: sha256WithRSAEncryption
27:ec:a3:2e:61:11:71:9f:e5:74:40:cd:6b:50:fe:13:86:44:
f9:60:53:67:e9:03:4b:c7:4d:95:df:ef:7f:80:80:8f:2c:fb:
0f:dc:a5:bc:18:3e:79:e9:2e:ab:21:2f:07:ed:19:55:7a:88:
19:4f:62:8a:d1:e9:da:f0:d7:c6:83:16:84:95:10:3f:6e:8d:
bf:b8:5b:97:87:18:8f:75:a5:64:1b:93:87:aa:24:62:03:e1:
2a:0a:1e:81:ef:3f:c7:1c:ee:d0:60:2a:f1:0d:89:5a:9f:63:
4d:b8:70:ec:2d:15:85:a3:4a:01:31:82:01:0b:a7:0b:47:14:
62:87:80:2f:8d:dc:ee:45:c4:8b:fc:01:c7:bb:1a:e5:cf:09:
26:de:74:6e:2c:56:c9:c2:5b:5c:90:af:0b:96:a7:85:67:06:
59:18:09:b8:71:e0:c0:60:df:39:8a:cc:64:19:8f:17:9d:31:
20:89:10:a7:55:04:08:2f:0b:bf:15:09:62:5f:bd:3e:a0:1d:
0c:4c:ca:f5:7e:71:42:2f:d5:52:55:d0:db:52:9e:b4:b0:6c:
54:91:59:62:ff:3a:5c:7f:08:45:70:5a:9a:40:db:a0:c6:03:
67:8d:b6:8c:31:c8:28:e7:2d:93:4a:63:32:28:47:8d:01:fe:
cf:7d:97:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 21:00:42 2023 by rpki-client on console-ams.rpki-client.org