Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/33713D94458111EE89691C79C4F9AE02.roa
File: 33713D94458111EE89691C79C4F9AE02.roa (raw, json)
Hash identifier: Zitu4h3r0K1NDd+OUMKXF+VQCOs8rnYbQUtY9I5LXDA=
Subject key identifier: 27:0E:6A:5F:7E:B4:83:A5:C2:84:0B:C8:85:CC:45:DA:B9:9A:C1:23
Certificate issuer: /CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
Certificate serial: 05DB
Authority key identifier: D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/33713D94458111EE89691C79C4F9AE02.roa
Signing time: Mon 28 Aug 2023 08:59:31 +0000
ROA not before: Mon 28 Aug 2023 08:59:31 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 141731
IP address blocks: 103.159.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1499 (0x5db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
Validity
Not Before: Aug 28 08:59:31 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=64ec61f3-5f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:05:da:f6:ba:96:5e:27:3c:bb:58:50:b9:d6:
3a:0c:32:21:53:8d:22:fb:4b:bf:c0:97:26:8a:c7:
e3:da:c3:4a:41:d7:76:60:93:45:7f:05:c7:25:ab:
5e:ea:ac:83:6e:d9:f1:09:59:35:14:9b:6b:08:8b:
53:e5:1e:bd:5c:ab:97:64:f4:3e:5a:b3:23:ff:1a:
23:06:1f:ea:33:ac:e1:9c:0c:0f:24:a5:ab:49:80:
ff:58:89:3e:fa:70:b7:c9:38:5f:5e:c4:5d:46:af:
f6:cc:15:e3:a2:3b:d5:7a:61:5b:b5:1d:ca:b7:8a:
6f:84:db:cc:3d:2a:9b:f1:f7:ce:05:96:fe:4f:93:
b9:f4:36:dd:39:96:b9:23:9d:73:09:f5:40:b2:54:
ec:92:b4:58:a4:bc:48:fd:89:c0:e5:69:44:a0:fc:
ff:3d:31:a8:95:4e:ad:c0:58:4d:d4:03:0c:ce:46:
a8:37:ce:25:4b:c6:39:fd:4d:db:cb:28:36:2f:2b:
bb:05:a5:f6:32:cc:54:21:55:cf:5d:ce:19:f0:a9:
2d:a3:fc:79:8b:4f:59:a3:0a:2e:9d:9f:63:d7:18:
bc:fa:8b:97:e8:a2:f9:c4:52:50:63:59:d2:67:53:
fe:d9:ce:6b:1e:f2:12:4e:39:6b:91:a7:99:83:7c:
86:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0E:6A:5F:7E:B4:83:A5:C2:84:0B:C8:85:CC:45:DA:B9:9A:C1:23
X509v3 Authority Key Identifier:
keyid:D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/33713D94458111EE89691C79C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.171.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:81:62:ca:9b:e2:64:2e:0e:1e:18:78:65:06:99:6d:10:cb:
76:88:df:52:77:ee:e1:67:49:11:6d:42:94:3e:b7:83:b0:4d:
53:65:2d:f5:4b:e4:cc:9f:fa:3f:e5:46:43:bd:1d:a1:3e:e7:
5c:b3:25:2d:f8:52:e0:26:9a:b4:01:ff:01:73:43:cd:9f:d0:
0b:91:72:1b:76:0d:85:0f:3c:ad:63:10:0f:bf:ef:f4:7c:77:
a6:03:70:17:da:b9:73:38:73:78:4a:8d:44:35:3e:4b:47:1a:
ec:fd:e8:f3:ff:38:32:b1:6c:b4:ee:e5:43:08:49:68:bd:ce:
22:1e:50:56:44:5e:63:a6:45:cb:56:2e:a2:cf:56:3f:f8:a3:
60:ce:1d:21:4b:84:1a:57:59:5b:ea:0c:d5:1a:48:0c:ab:6f:
14:65:b1:51:ae:b2:c5:21:a6:35:62:4b:15:9b:54:e7:b4:04:
b8:bf:c3:a3:ee:71:a1:12:b3:df:8c:c6:b4:d0:00:5b:fb:b6:
e4:4d:94:67:f9:57:84:56:bd:58:e5:de:f2:3e:1a:ea:de:54:
39:c5:29:23:a5:f6:b1:f0:9d:61:98:a7:43:1e:49:7a:1d:75:
50:f6:c2:29:a2:d7:61:0a:fe:f0:b1:bd:59:1d:ba:b3:15:52:
4d:11:df:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 10 07:40:34 2023 by rpki-client on console-ams.rpki-client.org