Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/5F6C5B8A4EF711EDB483A887C4F9AE02.roa
File: 5F6C5B8A4EF711EDB483A887C4F9AE02.roa (raw, json)
Hash identifier: Z6+hZp/v0iN5cwekTSaJsEcDs5BSg3GadQQTZDFe2RE=
Subject key identifier: C3:59:A7:1F:FB:54:25:A3:40:8C:6C:42:99:CC:98:3F:AF:63:DE:13
Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Certificate serial: 025B
Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/5F6C5B8A4EF711EDB483A887C4F9AE02.roa
Signing time: Thu 09 Mar 2023 04:13:54 +0000
ROA not before: Thu 09 Mar 2023 04:13:54 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 141731
IP address blocks: 103.180.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Validity
Not Before: Mar 9 04:13:54 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=64095d02-47c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:09:47:7a:b3:62:50:0d:c2:45:f5:8f:6e:
f5:69:d5:68:e2:b4:6a:ca:b6:3c:26:a0:fa:f2:48:
92:ce:83:19:85:a5:d3:e7:72:da:52:6a:ba:71:33:
18:36:89:ac:47:42:c7:e7:64:36:64:6c:99:b9:ea:
8c:b8:9b:9d:ae:fb:73:d7:1d:e6:b5:93:0d:ad:3a:
7c:86:6f:f3:fb:d6:56:79:62:58:1f:92:ad:57:55:
16:4f:1a:50:0f:fc:32:8d:07:28:60:ea:79:2d:09:
c7:a0:b9:ea:16:8a:7c:61:2b:2d:27:17:9f:2b:e5:
68:74:0d:da:d7:07:3c:81:bd:0b:27:ea:fb:2e:bc:
1e:72:c1:ea:94:99:12:32:53:f1:e2:e7:63:86:eb:
93:19:d4:3f:85:3f:57:a5:ee:0a:9c:0e:80:8a:79:
95:f0:70:7a:68:20:8d:75:e8:3c:25:8f:f3:cf:c2:
6f:fa:15:20:b2:bc:4d:be:2e:77:ca:e5:1c:d0:80:
0d:ec:05:9c:da:51:26:19:cf:53:53:c8:5c:c9:d4:
2a:e7:63:5d:a4:63:42:00:18:56:fb:d9:17:b8:2a:
06:c9:8f:91:36:e8:01:a1:46:af:ca:98:4a:37:f9:
0d:62:cb:d9:e9:c1:51:8d:8c:7e:05:73:eb:99:5e:
9b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:59:A7:1F:FB:54:25:A3:40:8C:6C:42:99:CC:98:3F:AF:63:DE:13
X509v3 Authority Key Identifier:
keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/5F6C5B8A4EF711EDB483A887C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.113.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:3a:a0:54:e5:75:fd:f5:d6:b5:de:1f:7b:cd:25:14:0c:c2:
56:e1:3f:a0:8f:a6:07:81:36:d3:78:70:b9:ed:18:90:2b:80:
d2:a2:e1:90:7e:c7:5c:34:3f:f1:90:d9:9b:fd:79:26:12:fd:
29:b6:8f:e8:c3:bc:ff:10:50:bb:91:97:88:4c:dc:85:5b:cb:
4b:c7:01:e0:62:b8:85:1d:37:f8:22:6c:e1:f9:ef:a7:34:92:
6a:6a:33:d7:70:ad:7a:26:8e:94:a3:43:52:4e:89:d6:45:04:
60:28:8e:d3:5f:69:18:a3:8f:bc:ed:7b:13:7f:0b:74:e9:7f:
bd:f6:e6:79:b9:55:be:36:5b:f4:e5:7c:f7:be:83:4b:47:e4:
4d:8b:a1:31:b0:be:05:c1:65:4f:02:dd:1f:4d:d6:e4:2f:5e:
87:6f:13:6c:56:8e:92:4c:42:7d:94:cc:e2:fe:65:78:d5:83:
fa:a8:1c:3f:b3:37:aa:72:67:3b:37:22:77:f6:fb:e3:b5:42:
6f:e6:0c:53:da:4f:f6:29:be:02:8a:93:c4:a7:15:47:31:5e:
7b:4b:1e:f5:55:25:51:a5:06:1a:b9:c1:2c:ae:07:94:2e:c8:
61:ed:84:ef:f7:ce:3f:53:f4:99:fc:b7:a8:d2:5e:7b:61:76:
23:3f:97:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:43 2023 by rpki-client on console-fra.rpki-client.org