Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/B7EE070856EF11EE8D94F841C4F9AE02.roa
File: B7EE070856EF11EE8D94F841C4F9AE02.roa (raw, json)
Hash identifier: Wib3UTPedEV8/QucdbSrRlD8JqAsG/ifVbnbhSZfLXE=
Subject key identifier: B8:E0:D3:A5:DF:E5:CD:C5:79:3F:CA:43:36:3D:1B:D6:C5:C8:A9:6A
Certificate issuer: /CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
Certificate serial: 03ED
Authority key identifier: E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/B7EE070856EF11EE8D94F841C4F9AE02.roa
Signing time: Tue 19 Sep 2023 13:23:28 +0000
ROA not before: Tue 19 Sep 2023 13:23:28 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 136969
IP address blocks: 103.173.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1005 (0x3ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
Validity
Not Before: Sep 19 13:23:28 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=6509a0d0-9a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:d1:14:ee:05:82:bc:63:fa:67:b9:6e:f2:
ad:66:ae:84:a2:69:b0:01:a1:bd:88:d6:d8:82:34:
d3:7d:26:6f:ca:95:bf:06:0b:02:2d:8a:c9:c0:71:
63:d9:40:81:55:81:88:90:c9:90:e5:2f:1a:a0:c2:
97:6d:6f:85:d4:68:8b:2c:00:6b:97:ee:f4:a3:ba:
13:95:2f:34:db:e5:56:d1:bc:68:0e:f0:d1:d4:dd:
55:4b:39:32:c7:8b:37:82:f6:92:bf:65:fe:f1:ff:
45:c3:2c:09:c8:3a:5c:4d:b1:ab:73:71:c0:83:27:
8a:39:57:c1:46:2c:74:4e:b7:4a:f9:0a:8f:77:95:
2e:fb:7d:85:8a:a9:32:d9:51:97:43:66:1b:76:6a:
78:11:7d:22:c3:96:b8:ec:0f:66:b1:7d:60:5f:0c:
d4:69:5e:d1:8c:da:dc:3d:be:8d:3b:df:24:9d:df:
f6:13:6b:8e:d2:a4:6c:8b:d3:84:ba:6f:a2:34:63:
bf:5c:0f:bf:e9:e6:37:9a:41:08:38:1f:55:a9:cf:
9f:3c:2c:f1:b4:bd:23:92:af:8c:75:05:2c:69:88:
85:d1:8c:60:a6:db:91:06:1c:91:2c:b9:d1:a4:a3:
df:da:6d:ca:37:2e:95:05:33:79:bc:0a:df:ff:88:
67:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E0:D3:A5:DF:E5:CD:C5:79:3F:CA:43:36:3D:1B:D6:C5:C8:A9:6A
X509v3 Authority Key Identifier:
keyid:E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/B7EE070856EF11EE8D94F841C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.7.0/24
Signature Algorithm: sha256WithRSAEncryption
63:c8:e2:bd:8c:54:d3:57:35:1b:50:5f:9a:64:09:41:bc:da:
2f:3b:4e:d9:b4:fa:31:c2:7f:fc:a4:ce:45:e3:d6:80:34:2d:
21:27:89:b8:e5:7e:7c:57:aa:d7:bb:cc:54:90:ba:bc:88:3d:
6a:37:c9:14:52:23:6f:36:6b:8d:df:e7:60:05:ac:9d:39:8f:
58:48:07:ef:d4:bb:e9:88:be:6d:b8:56:1d:99:8d:5c:9b:ff:
53:87:60:b2:92:ea:73:c5:a9:99:86:3d:60:5f:f2:55:77:0f:
a4:f8:c0:b9:fe:6a:34:ee:b1:3b:6d:5e:b4:09:36:07:5d:86:
0b:e6:59:5b:cb:ea:35:c0:e4:07:8e:db:7f:3b:27:da:79:b9:
66:f8:40:6b:4a:63:53:8d:34:2a:ac:4c:12:a7:02:6f:17:82:
a3:5e:7a:05:77:b7:ff:6c:90:9a:2c:ed:23:91:8c:cc:f5:98:
ea:ff:ba:a5:25:c6:1e:5a:25:7f:d4:92:bd:9d:c2:e6:14:f8:
70:e7:d2:b7:47:16:05:37:58:36:43:0c:f3:43:48:ca:a7:1d:
88:53:1d:62:61:05:ee:7e:a1:28:18:c5:7b:06:52:4d:f0:7e:
08:e5:30:29:d7:81:43:08:57:4e:02:7c:ba:d8:a0:f5:34:24:
dc:36:5e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 13:49:52 2023 by rpki-client on console-fra.rpki-client.org