Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/1908C7DC132E11ED8E652319C4F9AE02.roa
File: 1908C7DC132E11ED8E652319C4F9AE02.roa (raw, json)
Hash identifier: ngP2tAXJa3BQR1Su4TnughvawOsgjOcEXC0jbJRfGPY=
Subject key identifier: 3A:B9:CC:43:6E:43:F3:CC:BC:B0:AD:E3:F8:6F:CA:22:B5:A9:56:E2
Certificate issuer: /CN=A914E1C1/serialNumber=E3F3154D988276A2F541E5EA62818C770BBB80EA
Certificate serial: 09
Authority key identifier: E3:F3:15:4D:98:82:76:A2:F5:41:E5:EA:62:81:8C:77:0B:BB:80:EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/1908C7DC132E11ED8E652319C4F9AE02.roa
Signing time: Wed 03 Aug 2022 13:13:43 +0000
ROA not before: Wed 03 Aug 2022 13:13:43 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 9230
IP address blocks: 103.58.180.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1C1/serialNumber=E3F3154D988276A2F541E5EA62818C770BBB80EA
Validity
Not Before: Aug 3 13:13:43 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62ea7487-a707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:31:ad:e9:fe:91:a7:25:43:24:6e:77:26:c8:
d2:53:42:75:0a:36:71:b8:10:10:6c:29:bb:66:ae:
f1:b1:08:0c:d8:d9:86:4c:28:56:bd:ec:d7:37:95:
2c:d9:f6:c5:22:9b:86:36:d8:6e:2c:fc:b5:30:f2:
cd:a6:40:29:c0:1b:b9:d9:95:11:c6:53:71:b8:77:
22:e1:88:23:ec:8c:fc:ef:7b:40:0e:dd:36:e3:88:
77:99:bd:44:a9:4d:22:dc:b2:33:e9:66:74:96:8f:
c2:ab:f9:1f:19:b4:b4:d8:a4:ab:a9:c2:47:a6:b6:
04:82:2d:c8:b0:a2:80:6e:0c:a7:e3:85:31:35:18:
f3:ac:10:2f:1e:35:03:18:b2:15:dc:1a:15:36:75:
c5:37:e0:91:3e:01:36:41:7b:ae:b8:d2:37:53:71:
2a:35:a3:0f:2b:d3:9a:c7:96:2d:f9:02:03:48:3e:
13:c9:f1:81:a6:2e:d9:30:43:3d:a6:70:c8:69:f5:
f1:31:e2:3c:52:bd:d3:a2:cc:1d:3a:5b:fc:e9:7a:
71:2b:3c:53:79:cf:24:65:5e:23:4d:63:23:b4:e5:
98:7b:26:a7:0c:e6:ef:20:f7:d4:9c:40:5e:05:03:
a0:45:51:14:52:17:67:7c:58:67:80:dd:10:43:3a:
41:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B9:CC:43:6E:43:F3:CC:BC:B0:AD:E3:F8:6F:CA:22:B5:A9:56:E2
X509v3 Authority Key Identifier:
keyid:E3:F3:15:4D:98:82:76:A2:F5:41:E5:EA:62:81:8C:77:0B:BB:80:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/1908C7DC132E11ED8E652319C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.58.180.0/23
Signature Algorithm: sha256WithRSAEncryption
85:8c:c9:b4:c4:c2:04:31:ef:a5:cf:74:cb:15:1e:5f:dc:df:
8f:8c:17:7b:21:47:3d:35:48:f5:7c:77:ae:4b:43:a2:ef:1f:
6a:ad:56:65:57:c3:18:0b:66:30:a0:86:c0:f8:6a:9a:06:9b:
a1:31:53:d3:b6:e0:2c:d4:46:5b:46:5a:15:81:d7:25:b4:f2:
77:81:f5:d1:84:d6:83:5c:47:f4:5e:d8:bd:de:1a:18:92:a0:
0e:ae:d3:85:df:fa:e7:88:5c:f7:9c:93:1f:54:ba:c0:42:10:
91:66:17:a7:a1:41:8f:e7:53:0a:41:cb:7d:44:4b:11:23:21:
d8:c5:d6:2e:06:c4:35:54:70:85:87:3f:cf:9b:bf:61:b0:ff:
71:0f:df:c1:27:2b:5f:58:96:2b:a4:1d:ec:a2:08:fa:20:cd:
58:ba:ce:c6:cc:76:d7:32:1f:30:cd:c7:c2:88:83:4d:ee:06:
49:08:1e:30:69:2c:23:54:ab:74:4a:5c:19:98:70:5e:a9:15:
4a:57:5a:25:df:89:12:eb:89:c7:04:37:8a:46:35:77:cd:8d:
b9:9b:15:d8:9f:fa:70:aa:76:0b:d3:77:b4:26:e4:2d:61:30:
e1:4e:29:5c:d8:49:ae:ad:18:e7:d6:18:0e:e1:c6:5f:da:09:
03:cc:50:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:41 2023 by rpki-client on console-fra.rpki-client.org