Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/0D6561323F5811EDB76DE755C4F9AE02.roa
File: 0D6561323F5811EDB76DE755C4F9AE02.roa (raw, json)
Hash identifier: 9Uieih0rbfWc+eawy/yUBQ+aDf9KLu6pW1w3DEVfygo=
Subject key identifier: 16:85:CB:8C:C9:8F:11:47:00:90:F8:A1:B7:6C:B0:53:84:BB:49:63
Certificate issuer: /CN=A914D249/serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
Certificate serial: 01C4
Authority key identifier: CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/0D6561323F5811EDB76DE755C4F9AE02.roa
Signing time: Tue 03 Oct 2023 03:03:37 +0000
ROA not before: Tue 03 Oct 2023 03:03:37 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 58945
IP address blocks: 103.35.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452 (0x1c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D249/serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
Validity
Not Before: Oct 3 03:03:37 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=651b8489-58ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f2:48:da:72:fa:0e:70:9e:17:e3:2a:7a:46:
8a:b4:90:31:42:e7:9b:51:5c:9d:eb:f5:f9:14:b4:
cb:3e:1a:57:e5:d8:64:a2:50:48:b4:6c:25:ee:c1:
b0:d3:fc:86:7c:e4:f2:1a:dc:f5:fb:94:cd:50:72:
1b:99:b0:22:8d:1f:2f:ed:dc:35:b9:f1:43:38:ec:
2a:5a:02:f3:73:07:3b:d2:c9:4c:76:db:7b:59:77:
85:61:69:dd:d9:26:4b:1c:83:c2:ae:55:df:77:95:
9e:6b:60:c4:78:cf:1a:ae:0f:ce:cd:96:40:80:cf:
0e:3a:9a:ad:58:1b:af:cf:63:8d:43:c9:bb:12:f9:
25:16:af:bb:0f:10:2c:c3:1c:15:e9:4d:5a:77:ad:
de:21:76:8b:78:78:02:6c:07:0f:29:cd:77:18:5a:
c4:2c:e9:33:e3:e5:fb:45:78:04:a9:98:57:d0:1f:
f4:6e:5b:ff:67:65:e4:47:f8:bf:f0:1a:0c:dc:9e:
76:c9:f6:fb:7c:79:d2:4f:0a:d0:97:b2:ee:3a:29:
df:ed:ff:ef:b5:3b:7c:49:ea:66:b1:47:c7:73:4b:
0f:b5:bd:ab:d3:40:a0:a2:11:9a:81:1d:96:8e:e5:
53:e2:5a:b4:b9:c1:02:7a:da:e0:dc:49:c3:ed:af:
cb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:85:CB:8C:C9:8F:11:47:00:90:F8:A1:B7:6C:B0:53:84:BB:49:63
X509v3 Authority Key Identifier:
keyid:CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/0D6561323F5811EDB76DE755C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.35.158.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:3e:78:6c:c7:fa:b8:fc:45:36:03:29:1d:99:15:38:38:29:
80:5a:66:b7:c1:06:59:8f:12:eb:8b:0b:7d:52:69:5c:f6:56:
a4:29:4b:6e:94:4e:8e:18:3d:fd:da:02:6e:d4:a0:cf:34:18:
b9:ce:9c:9d:ac:89:aa:da:21:1e:6b:ae:6f:79:18:75:01:bd:
57:53:ba:af:27:05:ec:26:92:9b:a2:b0:21:cc:eb:37:15:cc:
93:25:53:6a:c9:af:90:73:a1:09:bf:89:5c:da:df:b7:7a:16:
df:8a:b0:89:7b:4b:6b:60:5e:4d:2a:89:73:a4:50:4a:57:d3:
e2:aa:39:28:e4:67:9b:62:3b:58:94:2c:06:23:3f:1e:f8:ee:
8b:6b:e4:c6:24:9f:72:99:4e:81:fe:2f:ca:35:b0:e2:18:26:
cd:aa:45:a6:ac:1a:65:be:cc:3b:32:29:d2:15:72:dc:75:c6:
26:82:4b:4a:80:72:4f:13:8c:93:2c:0d:16:8c:7d:0f:6c:9d:
78:15:26:a3:fb:78:36:4c:d9:a6:b0:7b:05:d5:1d:f1:01:ff:
c2:cc:05:29:b7:96:68:39:58:14:f8:3b:98:57:6b:9e:a8:b0:
96:4a:ce:de:ff:2e:b8:ce:62:49:37:16:44:17:09:08:61:96:
2d:0e:46:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 11 08:43:38 2023 by rpki-client on console-ams.rpki-client.org