Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/088347FC45AA11EEAEF1F580C4F9AE02.roa
File: 088347FC45AA11EEAEF1F580C4F9AE02.roa (raw, json)
Hash identifier: 9mENCT8iRW2yHDmoQdbbPYQN7ASzYEAHsJxO+OWtD+A=
Subject key identifier: 05:9D:B1:4C:58:11:0D:64:AB:3B:4A:24:83:8A:12:0D:06:A5:FA:E2
Certificate issuer: /CN=A9151050/serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7
Certificate serial: 0704
Authority key identifier: 08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/088347FC45AA11EEAEF1F580C4F9AE02.roa
Signing time: Mon 28 Aug 2023 13:51:49 +0000
ROA not before: Mon 28 Aug 2023 13:51:49 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 140894
IP address blocks: 103.153.6.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1796 (0x704)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151050/serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7
Validity
Not Before: Aug 28 13:51:49 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=64eca674-b32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ec:b6:13:b0:da:a5:58:d0:84:b1:6d:4b:9d:
4b:35:69:5b:bb:45:fa:76:5d:a8:34:27:c9:83:78:
48:9b:09:c1:f5:1c:20:91:f5:78:c6:96:c8:53:44:
cc:b9:db:a2:65:9e:b7:9d:26:6b:78:c1:21:d4:f5:
b2:12:c5:50:9d:94:8e:b2:80:e2:30:f1:ef:03:fb:
16:a5:2a:0e:69:54:0b:c2:2d:c8:55:a4:48:a9:76:
f5:9c:3b:07:54:8c:05:fb:6b:b7:8a:10:74:53:fd:
f5:2a:8c:76:b8:8b:62:3c:ba:a3:7f:82:35:ec:d2:
3a:9f:47:32:44:24:53:14:97:40:04:0d:be:8c:a8:
28:d9:71:5d:cc:12:bd:6f:d6:57:9d:4f:ef:40:b6:
16:f8:e5:67:22:39:d4:70:2d:7a:bb:b2:4c:0d:e2:
93:e4:f0:e9:65:a5:8a:f7:3b:ed:2a:a9:4a:7b:80:
c9:fa:e6:6f:33:d5:ef:8e:af:ad:0b:ec:c3:f0:c8:
21:bb:8e:5f:da:51:78:c6:62:2e:0d:0e:fd:a5:0d:
5b:1a:ba:f2:dc:46:60:fb:d6:b2:96:42:b7:8d:32:
37:22:9a:49:3f:7d:3d:61:70:64:86:07:8c:fa:5b:
af:1b:93:49:fa:2f:cf:aa:40:f8:68:95:fc:dd:38:
bb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9D:B1:4C:58:11:0D:64:AB:3B:4A:24:83:8A:12:0D:06:A5:FA:E2
X509v3 Authority Key Identifier:
keyid:08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/088347FC45AA11EEAEF1F580C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.6.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:29:6d:ff:03:7c:4a:53:61:9c:76:44:b4:a1:71:c5:ef:f2:
b9:cc:a4:dc:1a:41:15:89:0b:d9:1b:bc:91:54:b1:7f:b7:97:
2d:27:24:6b:81:1a:98:9f:88:64:bf:49:5f:25:60:2e:cc:5e:
5d:58:cc:c4:c0:14:e3:83:ec:00:c5:e4:ac:91:98:42:88:23:
3d:cf:60:e5:29:6f:35:80:74:95:fd:11:4c:1d:bb:aa:52:cf:
7f:77:41:d1:07:67:72:98:01:e1:0a:4d:d8:31:a5:d4:d4:7a:
59:0b:0e:90:63:a8:0f:5f:5d:95:59:e9:7e:a8:7f:56:16:95:
4c:a8:9a:2d:74:3e:e9:49:25:da:42:c3:28:88:b6:1e:94:f2:
41:11:94:19:05:b2:62:4d:ae:6d:c9:80:88:cc:0c:83:c8:35:
46:92:94:f0:88:da:4f:af:7b:fe:41:b8:12:b7:f3:f6:ce:5a:
ae:a4:1b:63:72:0d:85:96:79:c9:73:30:48:5b:c3:98:65:f7:
19:40:f0:db:5e:aa:f0:00:fc:fa:66:d1:53:53:cd:a1:dd:4f:
a4:79:45:92:0d:7d:10:af:41:b8:1f:c8:c2:48:ac:01:0d:e0:
1b:6f:ee:3c:f0:2d:13:bc:2e:a7:a7:e4:30:cc:8d:7d:c2:34:
5f:8a:23:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 29 09:32:44 2023 by rpki-client on console-fra.rpki-client.org