Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/90CF3FB4409411EEB58A093AC4F9AE02.roa
File: 90CF3FB4409411EEB58A093AC4F9AE02.roa (raw, json)
Hash identifier: EMqgk5SlRF/lUdhdvsARtsUscKJUyhjcMXXsFfiwatY=
Subject key identifier: F8:3F:8B:95:F6:B3:FB:B1:DD:01:4E:3C:60:1D:5E:AB:AA:64:FB:FC
Certificate issuer: /CN=A9154FE7/serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A
Certificate serial: 06CB
Authority key identifier: CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/90CF3FB4409411EEB58A093AC4F9AE02.roa
Signing time: Tue 22 Aug 2023 02:35:32 +0000
ROA not before: Tue 22 Aug 2023 02:35:32 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 9790
IP address blocks: 103.123.164.0/22 maxlen: 22
103.123.164.0/23 maxlen: 23
103.123.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1739 (0x6cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154FE7/serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A
Validity
Not Before: Aug 22 02:35:32 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=64e41ef4-ce53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:24:80:be:68:1c:75:a1:0c:5c:d8:be:5c:
63:e7:36:84:c1:97:9b:d0:f5:c7:50:30:29:04:c7:
79:fa:f6:ae:24:5e:7b:cb:bf:1f:d7:3f:3d:cf:48:
7b:5c:ab:75:69:ee:f3:a3:9e:fd:de:7e:6c:77:f3:
a5:4f:8d:64:fa:d4:7c:c3:64:7f:c4:aa:ed:74:94:
54:b1:57:df:bd:bb:22:2e:42:89:40:09:4f:6e:91:
6c:30:90:4f:f3:d2:bc:1c:a5:82:ac:74:d9:7f:8d:
14:6b:fd:9e:9b:81:8d:96:b2:6e:6b:25:2c:51:26:
e7:44:84:f1:de:4c:95:79:cc:61:96:2b:0e:ac:c2:
53:a7:43:09:ce:aa:06:60:b4:2f:32:ce:6b:08:10:
52:31:71:a9:2b:af:be:48:4f:7e:86:42:cb:b6:53:
f3:c4:68:9e:8e:d6:8a:d8:a3:35:08:fb:4c:bb:a2:
36:f1:ba:99:09:e9:72:c1:aa:f6:5c:86:b4:8f:e3:
1b:8d:db:92:35:3a:ae:47:4a:74:cd:7b:f7:24:28:
e2:49:04:0e:2d:a2:2a:79:ef:fd:4d:cf:67:67:d7:
4c:0d:b5:0b:96:b9:a0:6b:21:df:58:81:35:6f:69:
10:af:9d:bd:55:9a:d9:33:8d:b4:29:6c:ac:e6:95:
8c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3F:8B:95:F6:B3:FB:B1:DD:01:4E:3C:60:1D:5E:AB:AA:64:FB:FC
X509v3 Authority Key Identifier:
keyid:CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/90CF3FB4409411EEB58A093AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.164.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:cd:ce:44:07:cd:29:31:72:ed:23:79:0f:eb:40:61:a6:06:
7f:49:27:de:61:73:a6:2c:60:8a:b2:d4:5b:2a:90:41:1e:f7:
af:86:1f:3c:52:83:8f:0d:9c:1d:ea:af:c3:a3:ee:fa:b3:49:
bc:ac:6e:b7:ef:9c:a2:3d:7c:47:12:57:75:49:f1:5b:dc:47:
b5:09:ce:63:fb:5a:11:e3:f6:f2:6e:b6:4a:76:3e:b9:f9:74:
b5:8b:95:41:10:70:4e:5e:a9:c6:6b:4a:f0:6c:7c:18:74:41:
6f:bd:96:56:75:76:b2:a8:6d:33:9c:68:cb:68:c2:3c:2f:8c:
37:8c:3a:1b:54:d6:63:5b:ae:fa:90:1f:5c:f4:89:d8:3b:5d:
78:d3:4e:3e:d3:69:24:24:2e:b2:70:6c:e2:89:5b:de:db:25:
6e:ca:d4:18:6a:31:e4:1b:0c:00:82:f2:73:13:71:ba:14:f6:
19:d3:75:25:8e:16:78:dc:65:3b:18:80:9d:43:44:f3:5a:a1:
87:b0:30:bd:69:76:fd:09:e5:54:89:7a:87:fe:61:ea:dc:7e:
54:1a:73:c4:32:80:e4:ed:72:12:39:50:08:9b:6a:af:c7:0f:
94:43:7a:13:e5:79:ab:c0:4a:40:81:bf:35:b7:af:e1:97:bb:
9f:b5:74:89
-----BEGIN CERTIFICATE-----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Generated at Mon Sep 11 22:12:10 2023 by rpki-client on console-fra.rpki-client.org