Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/A1790E08DE2511ECAAE0D855C4F9AE02.roa
File: A1790E08DE2511ECAAE0D855C4F9AE02.roa (raw, json)
Hash identifier: xqRyx67w86x2kK9eR4DSZt8RKVDKnsh5oVH201MYWVU=
Subject key identifier: 68:D6:59:67:10:61:73:5A:5B:B6:72:B3:FD:54:61:BF:AF:0E:CC:98
Certificate issuer: /CN=A91513B0/serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
Certificate serial: 032A
Authority key identifier: 01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/A1790E08DE2511ECAAE0D855C4F9AE02.roa
Signing time: Sat 03 Dec 2022 03:12:09 +0000
ROA not before: Sat 03 Dec 2022 03:12:09 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 209642
IP address blocks: 103.125.115.0/24 maxlen: 24
103.147.172.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 810 (0x32a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91513B0/serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
Validity
Not Before: Dec 3 03:12:09 2022 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=638abe88-4974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:55:16:1a:2d:19:0b:8a:ae:08:24:16:4a:
cc:5c:92:02:f5:2a:e2:50:f9:42:78:d6:06:44:f4:
3f:6e:79:e5:f1:7f:c1:c4:10:86:b7:d7:57:9b:8e:
54:67:ba:b5:5c:ce:5c:f9:4a:a8:ac:72:61:ba:37:
82:a5:80:11:cb:1e:92:aa:4c:24:e7:e8:29:e0:5b:
5e:e2:f3:6a:7e:b8:5c:90:26:90:3e:a7:a2:94:28:
b3:ae:3d:af:99:fe:e5:65:25:e0:b7:27:ed:f7:0f:
1d:71:ad:ca:ae:06:dd:2e:b0:e1:8e:45:fe:24:de:
55:f7:03:87:64:f2:44:f1:e8:b0:66:ac:e3:70:f0:
cb:89:38:81:10:fa:4d:e4:40:ad:f4:89:fb:c2:de:
31:64:e8:6f:97:6d:9a:d1:cc:17:d6:75:14:99:df:
7b:19:b3:97:e8:83:7d:7e:24:4c:58:be:36:2d:ef:
11:11:8d:e8:0e:73:fa:65:1c:b6:a5:50:bf:b3:bd:
4f:6c:1d:e1:de:23:77:0a:f3:7a:91:df:62:1f:1d:
c0:91:f5:aa:cf:15:1b:a0:fc:f3:25:44:6d:ea:5f:
18:25:5a:f9:21:93:61:f5:6d:ac:79:95:4e:39:08:
23:4a:9c:e9:08:d2:e1:6a:0a:99:5b:d3:c1:c6:66:
a7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D6:59:67:10:61:73:5A:5B:B6:72:B3:FD:54:61:BF:AF:0E:CC:98
X509v3 Authority Key Identifier:
keyid:01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/A1790E08DE2511ECAAE0D855C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.115.0/24
103.147.172.0/24
Signature Algorithm: sha256WithRSAEncryption
20:c5:39:59:4e:47:39:61:2e:27:79:46:77:c5:23:86:e3:e4:
01:4a:8d:04:70:53:12:ae:55:93:86:db:36:e3:fd:54:9c:1c:
7b:73:c6:26:38:31:ce:87:70:80:bd:d9:d3:c2:c3:40:34:26:
7a:9e:16:e8:ad:79:a6:60:09:67:9d:39:d7:db:0c:69:83:ad:
74:de:06:cc:61:f8:f3:27:dc:01:10:d9:71:47:59:d1:8e:17:
fd:0a:6b:4a:2b:ed:6c:cb:9b:7d:2b:0b:03:99:39:7d:c5:a5:
96:5a:38:21:b9:e3:52:5d:91:04:a4:f1:26:69:7d:7d:3b:4a:
12:de:3c:b6:42:13:74:0a:83:3f:2d:07:41:50:fe:cd:57:10:
18:47:76:2d:c6:e1:bc:09:29:25:3b:62:9b:e4:68:2b:de:83:
78:db:74:d0:a7:90:fe:fd:81:fb:94:40:57:0d:5c:a4:e4:95:
e2:52:db:3c:b1:5c:11:2f:da:84:a8:be:d0:1d:0b:15:54:80:
95:75:17:e5:e8:f7:08:ae:5d:5d:75:3a:68:e3:9c:1d:55:0a:
a8:00:4e:81:4f:52:8c:4e:ed:c9:72:d3:df:e4:1d:17:45:10:
56:b5:06:ba:df:71:ad:d6:68:c2:0d:fd:16:3f:11:01:10:4c:
99:7b:5e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:39 2023 by rpki-client on console-ams.rpki-client.org