Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/DB612316D36C11ED8F630113C4F9AE02.roa
File: DB612316D36C11ED8F630113C4F9AE02.roa (raw, json)
Hash identifier: gt5FCErSaC93lyNPb/8KHmvuWqML3Vr6QAz4f/t62W0=
Subject key identifier: 15:5C:6A:6C:D6:51:5E:5C:2A:24:7D:FD:1E:F5:2F:6F:73:BD:62:44
Certificate issuer: /CN=A914EC08/serialNumber=D1B8E671973559020F8703D17DCD892692E640A2
Certificate serial: 44
Authority key identifier: D1:B8:E6:71:97:35:59:02:0F:87:03:D1:7D:CD:89:26:92:E6:40:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0bjmcZc1WQIPhwPRfc2JJpLmQKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/DB612316D36C11ED8F630113C4F9AE02.roa
Signing time: Wed 05 Apr 2023 04:46:41 +0000
ROA not before: Wed 05 Apr 2023 04:46:41 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 134475
IP address blocks: 103.73.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EC08/serialNumber=D1B8E671973559020F8703D17DCD892692E640A2
Validity
Not Before: Apr 5 04:46:41 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=642cfd31-cc6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7f:24:b0:19:7e:80:c1:72:a5:56:b6:6a:84:
0a:f7:af:d2:4f:f4:1f:38:5e:08:eb:16:76:f7:a4:
e5:9c:e1:c9:ca:77:63:f0:4b:68:71:b9:a8:1d:8f:
bd:6f:4a:77:34:68:a9:83:14:2b:30:81:7e:15:16:
bd:d6:4a:95:70:5b:1b:db:7f:ff:06:ee:5c:d2:ec:
6f:bb:99:5a:c7:e6:a1:07:22:ca:36:ec:bc:31:d5:
4d:c5:03:30:5b:5c:75:7a:21:27:4e:0e:45:91:5d:
4d:18:39:b6:60:a4:b1:66:61:dc:58:cb:d7:42:39:
1e:4b:3f:ba:93:49:78:e9:59:f1:42:d6:18:c9:ed:
4d:9b:6e:d2:8e:a6:41:97:3f:65:ed:aa:32:8f:a7:
ee:16:66:e3:73:32:e7:a1:1d:4b:15:6b:f0:e6:a9:
44:e2:0b:45:3a:7b:b7:33:c8:56:e7:9c:f3:42:e5:
14:8f:86:34:75:2d:38:37:8c:54:a1:b4:3a:ec:9d:
5e:d7:9b:69:74:41:46:31:9f:aa:41:78:ae:e3:7f:
b0:00:69:ab:c0:69:cf:37:2d:ae:5a:7a:f5:73:de:
11:ec:b7:4b:7c:51:63:54:a8:75:c8:d0:0a:50:88:
fc:ac:c2:26:e8:0b:bb:b3:57:73:30:54:0d:f6:c6:
bc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5C:6A:6C:D6:51:5E:5C:2A:24:7D:FD:1E:F5:2F:6F:73:BD:62:44
X509v3 Authority Key Identifier:
keyid:D1:B8:E6:71:97:35:59:02:0F:87:03:D1:7D:CD:89:26:92:E6:40:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/0bjmcZc1WQIPhwPRfc2JJpLmQKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0bjmcZc1WQIPhwPRfc2JJpLmQKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EC08/812A2C587D3B11ED98BF9E48C4F9AE02/DB612316D36C11ED8F630113C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.35.0/24
Signature Algorithm: sha256WithRSAEncryption
07:5a:77:dc:9b:10:8c:64:ae:ea:f6:e8:40:00:3e:42:dd:b0:
66:b1:78:1b:7e:89:f6:88:40:ad:4a:fe:a2:ea:c2:90:a1:4b:
45:57:63:a5:e7:cf:53:7f:49:2d:fa:9f:82:00:c6:c8:e1:25:
ca:16:c3:f6:98:98:5f:f1:b2:06:ca:bf:7c:e9:42:06:98:ea:
29:4a:9c:c8:55:51:4a:ca:1b:00:5f:80:7f:c1:2a:02:29:1d:
ad:32:d0:c6:3b:c3:3f:b6:d6:c0:df:25:d0:1c:c5:eb:d6:14:
94:9c:79:14:fc:46:0f:95:73:a3:e1:48:76:9d:4a:98:e2:ab:
f3:b4:79:a3:4e:e1:e8:0f:3a:5c:fc:97:b8:5c:80:5c:76:6f:
4e:34:38:1e:07:53:dd:0b:71:d0:fa:d2:2d:c2:14:09:f8:6a:
f9:2e:53:12:f6:d6:48:29:e0:31:a4:51:34:f4:bc:aa:21:ba:
ce:fb:cf:65:31:e8:18:cf:45:ef:5f:ce:08:fc:38:51:40:45:
42:5f:d5:9e:b0:8f:37:30:4b:1a:ae:59:f0:53:be:76:fd:ff:
a2:1a:e1:51:a1:c3:ad:29:f8:d4:59:c8:5b:46:d4:e4:9e:d2:
e6:2a:83:27:05:74:e1:3a:0b:79:c3:3e:39:5a:2d:a5:c5:10:
5f:25:4f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:39 2023 by rpki-client on console-ams.rpki-client.org