Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/31821418740C11EEB2E41755C4F9AE02.roa
File: 31821418740C11EEB2E41755C4F9AE02.roa (raw, json)
Hash identifier: Vks4+CZNJllB+N0jwJ/k6uRTDKzEWrIyWxAsdY9SLoA=
Subject key identifier: 81:37:F1:70:4B:1F:0B:EA:4D:79:CB:88:94:00:23:16:BF:6B:60:A0
Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Certificate serial: 03C3
Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/31821418740C11EEB2E41755C4F9AE02.roa
Signing time: Thu 26 Oct 2023 14:30:22 +0000
ROA not before: Thu 26 Oct 2023 14:30:22 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 133480
IP address blocks: 103.75.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 963 (0x3c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Validity
Not Before: Oct 26 14:30:22 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=653a77fd-4ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:b7:b1:2a:80:27:f0:44:64:3e:81:a4:70:
3d:71:fe:c4:83:a8:f3:89:1f:ec:d1:31:c7:db:14:
ab:c4:50:bb:07:0f:da:74:f1:65:84:71:c0:83:87:
4d:9c:6e:94:cb:a6:f6:0f:28:14:f4:1b:61:6f:43:
5f:64:d2:fe:41:4b:88:a2:60:80:e0:79:af:8f:2d:
1f:83:b8:52:93:74:fa:a1:a2:f8:44:b8:6b:8c:52:
11:34:1c:fc:14:bd:98:91:86:89:de:58:10:a7:8c:
ce:dc:75:7b:aa:f6:9c:a5:90:73:77:b2:76:0a:89:
8c:e9:c4:42:b4:35:dd:b8:8f:90:b6:0f:be:83:37:
19:4a:5c:d2:39:45:a4:50:df:51:9d:69:a3:de:22:
fc:03:d4:5c:fe:72:e8:9a:1f:8c:ca:38:ba:d3:58:
3a:f7:5f:bb:24:57:9f:74:51:c4:76:26:6b:78:ee:
0e:41:ea:5d:f4:17:17:86:76:de:3c:5b:38:74:db:
47:24:c5:39:ac:3d:4e:24:12:0f:65:da:93:c8:a1:
f5:61:5f:24:bd:14:38:24:79:7b:cf:1d:3d:75:42:
12:15:2d:04:83:7c:75:12:d1:fe:20:73:b9:9d:3f:
ba:57:02:a0:7b:9c:e2:22:67:fb:e9:1b:f7:38:9c:
74:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:37:F1:70:4B:1F:0B:EA:4D:79:CB:88:94:00:23:16:BF:6B:60:A0
X509v3 Authority Key Identifier:
keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/31821418740C11EEB2E41755C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.75.119.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:4c:ba:c0:6a:90:6e:01:45:f9:42:c6:ab:20:06:eb:58:58:
0b:87:c3:43:20:ad:0f:cb:48:1b:c8:31:da:54:40:04:a0:a0:
59:b2:88:e8:29:82:99:34:6d:0e:71:b6:6b:83:00:93:09:f1:
05:20:37:f8:55:3a:c8:e8:d5:b1:93:d2:01:b5:6f:bf:07:39:
9c:85:bb:bc:4f:18:41:00:82:c8:c3:8f:3f:35:c5:b9:eb:46:
d4:89:74:9c:08:cd:2d:20:8b:2e:4d:2b:36:a8:48:f2:a2:15:
ce:36:cb:24:4a:80:a0:d2:59:f7:89:40:1b:22:16:81:ef:1c:
d8:e6:26:cc:93:d6:c0:5d:ec:15:70:a8:99:d0:64:78:19:8e:
2f:6a:c6:e1:42:83:cf:d4:39:88:54:4d:dd:24:47:27:a6:94:
8e:2b:82:3c:c6:c1:89:02:09:a8:21:b5:fc:9e:61:bb:64:04:
1b:34:32:93:e1:5d:d9:a0:a7:be:e2:70:af:7b:07:f0:b9:c1:
b6:46:31:9b:4f:f4:ce:e8:2a:4f:df:a2:32:e8:81:e6:07:e1:
ed:d9:64:1e:cb:83:03:81:4c:5d:d4:bf:aa:58:98:02:ec:7d:
b5:8c:25:e2:45:87:4a:6d:5a:a4:68:73:62:64:e7:58:ad:fc:
07:72:6a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 13:00:48 2023 by rpki-client on console-fra.rpki-client.org