Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/26FDBC6410CA11ED8FD1E65EC4F9AE02.roa
File: 26FDBC6410CA11ED8FD1E65EC4F9AE02.roa (raw, json)
Hash identifier: v8bqNuuFg7M4amwrImCLaWWp0MBfpM8c5jGCIaWN6+8=
Subject key identifier: 62:9D:B6:93:29:CE:C1:35:EA:E1:2E:14:00:F7:DA:48:3B:F1:A6:46
Certificate issuer: /CN=A914E1C1/serialNumber=E3F3154D988276A2F541E5EA62818C770BBB80EA
Certificate serial: 02
Authority key identifier: E3:F3:15:4D:98:82:76:A2:F5:41:E5:EA:62:81:8C:77:0B:BB:80:EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/26FDBC6410CA11ED8FD1E65EC4F9AE02.roa
Signing time: Sun 31 Jul 2022 12:13:14 +0000
ROA not before: Sun 31 Jul 2022 12:13:14 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 132561
IP address blocks: 103.58.180.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1C1/serialNumber=E3F3154D988276A2F541E5EA62818C770BBB80EA
Validity
Not Before: Jul 31 12:13:14 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62e671da-8d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cc:9b:d2:5b:45:e1:0a:10:73:1e:a5:06:48:
56:23:ca:15:25:d6:07:d6:b6:a0:8c:bc:fe:47:44:
a3:1e:7e:42:9a:5c:d5:01:56:8f:e1:70:59:4f:0b:
b9:a8:2f:19:83:0c:2e:86:68:78:4c:72:41:fa:0c:
1f:03:ee:f7:a9:db:3d:04:b7:d3:7b:7e:6d:e8:f3:
ce:a2:17:75:bd:93:93:89:65:a9:6d:48:b6:00:a0:
a7:83:05:0e:a5:60:ea:04:ba:9f:87:5d:4e:62:22:
1f:f9:3e:b9:7a:d5:41:76:2a:f6:92:0c:ec:35:bc:
72:93:69:55:a3:c8:68:45:cb:87:18:79:4c:5f:60:
3f:d6:ab:ca:bc:d0:10:89:54:c9:42:df:f5:f4:2e:
55:f6:07:69:20:d3:c3:cc:a1:35:c8:91:1d:cc:02:
1e:d6:74:95:05:b9:f9:a9:38:58:88:d1:aa:7e:15:
1a:93:b2:8e:06:3d:a2:ec:f9:49:3e:0d:96:63:b2:
44:89:f8:4a:98:d6:f0:b0:65:8c:03:62:d1:33:75:
db:9b:fe:bf:6a:d1:4d:28:35:3c:7d:2f:28:57:07:
d3:43:d0:0e:84:c1:64:12:45:0d:6a:55:96:06:d4:
5f:48:bc:d5:45:cf:99:83:e9:18:c2:91:ef:0b:6e:
5a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9D:B6:93:29:CE:C1:35:EA:E1:2E:14:00:F7:DA:48:3B:F1:A6:46
X509v3 Authority Key Identifier:
keyid:E3:F3:15:4D:98:82:76:A2:F5:41:E5:EA:62:81:8C:77:0B:BB:80:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/26FDBC6410CA11ED8FD1E65EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.58.180.0/23
Signature Algorithm: sha256WithRSAEncryption
92:5d:90:87:a4:90:91:ed:5a:6f:24:ab:68:6b:c8:f3:b9:18:
e3:77:ab:82:b2:e8:9b:cc:f1:ac:17:2f:ba:5c:e2:77:09:85:
8a:df:4b:7a:5a:32:8e:df:0c:fa:35:7f:17:e4:3b:ab:d2:66:
17:5c:37:b7:41:38:f7:4a:9b:d2:c9:35:08:cd:40:1d:a7:b1:
96:58:17:99:4e:53:7c:56:2b:7f:ce:5b:56:44:f5:11:80:32:
68:87:f0:5b:4d:31:f8:6a:44:5d:f7:0d:b8:79:7c:c6:9a:05:
78:fd:98:63:dc:88:15:c0:77:cd:1d:27:40:33:04:36:4a:06:
09:48:97:51:78:4e:75:29:53:9c:83:a2:6f:d4:e8:ad:4c:1f:
d0:c2:89:d1:24:71:af:fc:e6:1d:d1:9a:62:4b:cb:cf:8c:ae:
ee:42:4b:42:32:cc:36:5b:70:be:ac:77:6d:74:ca:2d:87:38:
d8:db:7c:fd:33:2a:90:d1:97:0f:57:13:70:6a:ea:8e:3e:95:
10:43:0c:05:ed:43:98:f0:7b:11:02:75:fe:9b:f7:2e:79:1d:
2c:84:a5:14:93:99:e3:8b:07:d9:ce:dc:29:67:4b:df:f3:04:
68:59:f7:a4:5d:dc:d8:ad:1b:a4:30:fe:20:ed:e1:7d:9b:a1:
fb:a8:33:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:41 2023 by rpki-client on console-fra.rpki-client.org