Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F1C/63458888DA3311EB9B58BF1EC4F9AE02/5AB8E7CEDA3711EBACB20A48C4F9AE02.roa
File: 5AB8E7CEDA3711EBACB20A48C4F9AE02.roa (raw, json)
Hash identifier: JlcZp1MLe0J7YMGrxS/+ddCaHpZetGZrp2sh8QZI9Bc=
Subject key identifier: F3:B3:C1:B3:A3:16:FC:CA:D4:96:CD:4B:69:FD:A0:D1:A8:34:7C:47
Certificate issuer: /CN=A9150F1C/serialNumber=0B45A9956110718D863F37AB3CA16671FB83543E
Certificate serial: 03BB
Authority key identifier: 0B:45:A9:95:61:10:71:8D:86:3F:37:AB:3C:A1:66:71:FB:83:54:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0WplWEQcY2GPzerPKFmcfuDVD4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150F1C/63458888DA3311EB9B58BF1EC4F9AE02/5AB8E7CEDA3711EBACB20A48C4F9AE02.roa
Signing time: Wed 21 Dec 2022 02:42:24 +0000
ROA not before: Wed 21 Dec 2022 02:42:24 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 131111
IP address blocks: 103.78.212.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 955 (0x3bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150F1C/serialNumber=0B45A9956110718D863F37AB3CA16671FB83543E
Validity
Not Before: Dec 21 02:42:24 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=63a2728f-d38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:6a:d4:01:67:3b:e6:30:14:af:25:09:2e:
92:20:9e:f0:85:d1:1d:c6:be:c9:97:05:0e:4e:82:
9f:bd:12:9b:df:cf:c7:d2:54:aa:57:7b:69:b1:c9:
cb:6e:61:a6:3b:7a:b8:b4:91:0e:16:ac:40:77:3f:
cb:ad:c4:e0:9e:bf:04:91:44:99:55:3e:0b:51:66:
af:91:4a:7d:3b:4f:35:22:c6:2d:1d:25:16:e7:86:
7b:60:88:73:04:e3:c2:88:86:49:12:7a:3b:5d:ef:
02:81:09:fe:0c:09:3c:6e:d2:0b:26:75:81:ae:91:
d3:58:76:b2:e0:ab:07:2a:68:16:41:c3:2e:28:8c:
e2:ad:14:98:0c:06:21:c6:f2:20:15:cc:70:68:c8:
f5:34:16:dc:32:06:b1:d5:7b:b6:82:52:b7:5d:1a:
78:c0:2b:fc:63:92:9d:97:e3:55:1b:22:12:16:b0:
38:3c:a6:ad:15:9f:0d:27:f2:ab:e4:88:69:9a:60:
f3:37:05:1a:84:e2:a5:d4:db:df:06:28:f4:32:23:
d4:63:46:6f:19:b9:b9:57:98:6e:82:c1:86:cd:d0:
17:5a:76:42:06:e3:51:fe:c2:d7:69:31:67:f4:00:
c8:d1:75:eb:76:0e:68:8d:49:d0:9a:63:2b:44:8a:
52:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B3:C1:B3:A3:16:FC:CA:D4:96:CD:4B:69:FD:A0:D1:A8:34:7C:47
X509v3 Authority Key Identifier:
keyid:0B:45:A9:95:61:10:71:8D:86:3F:37:AB:3C:A1:66:71:FB:83:54:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150F1C/63458888DA3311EB9B58BF1EC4F9AE02/C0WplWEQcY2GPzerPKFmcfuDVD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0WplWEQcY2GPzerPKFmcfuDVD4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F1C/63458888DA3311EB9B58BF1EC4F9AE02/5AB8E7CEDA3711EBACB20A48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.212.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:d5:98:13:6a:be:bb:7f:26:fd:e3:3c:1d:19:07:6f:6d:d2:
d8:43:54:45:f2:76:21:ca:d4:99:4a:b7:73:a3:4d:39:ed:a0:
90:15:40:25:06:8b:07:3c:38:a0:aa:e9:6a:a1:e4:0d:cc:70:
5e:81:d4:f5:b4:9b:53:96:61:e4:97:68:ab:e0:da:cf:03:85:
4c:65:f5:7c:87:ea:9b:3b:65:83:46:46:72:8d:75:36:84:26:
8a:d5:ce:6b:69:bf:59:b9:b3:cc:5d:ff:77:69:ba:59:b7:a9:
2a:70:7f:5e:a6:0a:8b:e8:84:3a:38:13:a0:2a:9c:c5:6c:a6:
d2:15:39:01:7f:bc:e8:9e:10:93:72:08:70:4d:11:60:c8:cc:
7c:ae:87:1d:b1:8e:a5:eb:16:71:15:2d:5a:34:cd:63:3a:2b:
2d:5b:60:10:dd:3f:c6:43:4b:4f:cd:25:ec:a5:b3:8a:b4:df:
8f:16:86:c4:a8:eb:b6:16:9b:0a:76:3e:11:8a:29:e0:43:b2:
32:1f:9e:88:1f:99:9c:0b:b7:5e:cd:01:af:32:54:42:36:38:
c2:7d:11:d7:74:55:23:c3:ee:f6:95:d2:22:7f:e9:1e:f2:c5:
98:c6:68:ed:08:a4:16:68:d4:a5:3e:5f:68:57:b4:29:68:54:
78:da:40:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 06:54:22 2023 by rpki-client on console-fra.rpki-client.org