Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/03EC0C20550911EDB38D9172C4F9AE02.roa
File: 03EC0C20550911EDB38D9172C4F9AE02.roa (raw, json)
Hash identifier: RhGlSK0ILGMkScPUuOmVNqpQLuZF60o3SEMJiBS3urE=
Subject key identifier: B2:C3:24:70:9C:BE:E4:E7:92:F4:23:AF:97:BC:D6:1A:0B:0E:44:95
Certificate issuer: /CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Certificate serial: 02
Authority key identifier: 3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/03EC0C20550911EDB38D9172C4F9AE02.roa
Signing time: Wed 26 Oct 2022 08:34:33 +0000
ROA not before: Wed 26 Oct 2022 08:34:33 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 150311
IP address blocks: 103.250.28.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Validity
Not Before: Oct 26 08:34:33 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=6358f119-31de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5e:ea:2a:75:86:a9:ca:af:5a:d3:72:75:9b:
3a:7c:08:97:62:64:91:fa:89:2a:8a:a9:bb:b3:a3:
8e:2c:1b:bc:ea:d9:31:b4:ee:2d:94:86:1e:ff:4b:
93:05:88:38:32:47:bd:bc:eb:d1:aa:b6:56:45:ec:
e6:fc:9d:01:bc:1a:28:ad:9a:01:10:c8:00:64:21:
ea:e8:25:c2:40:9a:24:7b:69:19:0a:2c:60:7f:95:
97:63:db:ba:88:81:3f:c1:8a:00:ad:d5:37:d7:57:
d1:3e:b3:06:73:58:40:3a:99:60:80:95:23:e8:7e:
48:5b:f6:2b:19:33:2c:f0:90:cd:cf:df:ce:21:5f:
00:ca:1a:09:18:71:29:80:87:49:f1:ef:53:7e:60:
75:e1:c0:78:47:c8:d6:0e:ab:8e:ba:d1:e8:0d:b0:
d4:f3:c9:47:c1:66:a9:f6:1b:42:8d:c6:06:b3:28:
24:c2:4c:45:f5:c5:89:1c:72:f9:d5:b2:5b:fd:29:
45:a9:40:cb:e3:14:a1:af:b5:32:9b:5a:ae:a5:2d:
d0:df:4a:84:8e:5f:db:19:d3:42:cb:43:8c:f1:29:
2f:aa:b1:f2:6d:55:49:24:94:51:52:e6:2d:14:d8:
ca:4c:46:09:bc:fc:ed:34:71:cc:b4:d4:2e:f5:52:
de:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C3:24:70:9C:BE:E4:E7:92:F4:23:AF:97:BC:D6:1A:0B:0E:44:95
X509v3 Authority Key Identifier:
keyid:3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/03EC0C20550911EDB38D9172C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.250.28.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:3d:18:3e:f8:de:25:96:18:7f:96:ef:88:64:e1:a6:f5:77:
26:1b:5f:16:92:d2:c8:cc:0f:43:ca:4e:64:aa:73:87:ce:6f:
f2:b8:56:6e:3e:d3:ad:28:bb:1c:b8:ab:2d:3d:84:01:76:0a:
c3:a0:96:47:f5:de:bf:ae:f4:fe:f1:de:2c:54:bb:7a:db:02:
1c:c0:cf:3e:f1:39:db:52:9d:91:e8:e6:4c:8f:27:98:a4:fb:
91:24:f8:21:af:23:97:7e:b3:15:5d:6d:23:41:49:a8:40:cf:
58:6c:11:55:00:1c:da:9a:26:bb:81:52:fc:eb:0e:d3:a1:3b:
31:ee:83:bb:a0:34:a7:47:b4:b6:2c:68:5e:d2:95:26:4c:c0:
1f:9c:34:34:0a:d2:29:be:f4:f5:e8:90:60:3b:d3:0c:9a:32:
88:19:3c:ad:a0:69:c7:12:32:e0:ab:b1:b5:2b:52:ba:0b:29:
1c:74:38:2f:67:fc:e9:f0:86:93:ff:04:ef:41:c5:16:11:72:
aa:68:21:15:22:26:ae:1a:e4:0a:ae:47:14:72:3c:34:5d:23:
da:75:01:c5:29:df:db:b4:dd:a7:9f:bb:0c:7b:f6:64:82:74:
7a:f5:8f:4f:95:7c:b1:8e:cb:ee:94:cf:ce:fe:b3:2f:b0:91:
e1:ac:52:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:44 2023 by rpki-client on console-fra.rpki-client.org