Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/76CDCA12A66111EE885B970DC4F9AE02.roa
File: 76CDCA12A66111EE885B970DC4F9AE02.roa (raw, json)
Hash identifier: T/7XMLUoxPjKirC0WyYmgQ5CATG1MMj7QDlWCRi/4Fg=
Subject key identifier: A4:58:C3:05:BF:E2:13:DF:E4:12:83:01:35:B6:CB:72:63:92:B6:2E
Certificate issuer: /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
Certificate serial: 06B3
Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/76CDCA12A66111EE885B970DC4F9AE02.roa
Signing time: Fri 29 Dec 2023 15:46:43 +0000
ROA not before: Fri 29 Dec 2023 15:46:43 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 141215
IP address blocks: 103.156.152.0/24 maxlen: 24
103.156.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1715 (0x6b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
Validity
Not Before: Dec 29 15:46:43 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=658ee9e3-49d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:b0:a7:46:07:ef:0a:c6:34:42:4e:98:7f:
79:22:22:54:a9:4c:c2:b7:8c:cf:e4:2c:4f:ed:4e:
4b:ea:a2:a1:a0:28:1c:68:f4:40:63:81:4c:6f:ad:
f7:48:f4:cd:35:2c:78:77:ef:38:40:26:a0:2d:37:
c7:c8:cc:20:7b:7a:08:00:8c:40:e9:6c:c3:12:5b:
4f:b9:7d:2e:05:de:78:bf:7b:24:9c:eb:ae:3a:f5:
d6:15:5e:8f:6e:4f:e6:e8:0b:7d:5c:2a:48:5d:05:
a2:31:16:db:b5:2d:a9:3d:ed:7d:00:60:34:7a:ce:
30:ad:33:69:72:5e:c9:14:c9:cb:3e:a5:8d:99:e4:
e7:7d:5f:1e:e8:69:da:b1:ca:9d:bf:fe:a2:a0:2b:
35:92:e9:47:12:be:b1:da:cd:f4:5c:5a:f0:42:d0:
69:b4:3a:ac:64:78:96:d3:13:15:b6:e3:c4:e7:98:
ba:77:02:0a:78:da:8a:17:e8:a3:61:95:a6:1a:8e:
66:93:4c:4c:2a:2d:7f:59:70:1e:5a:b1:b5:a6:3a:
36:c0:fd:f5:b1:85:46:a6:6c:c6:a3:bd:a5:05:2d:
2c:f3:4a:a9:7c:67:e6:d6:47:11:c4:cb:e5:0d:ad:
2f:65:ab:ea:db:9f:ec:29:21:7e:f9:b0:2b:23:72:
a5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:58:C3:05:BF:E2:13:DF:E4:12:83:01:35:B6:CB:72:63:92:B6:2E
X509v3 Authority Key Identifier:
keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/76CDCA12A66111EE885B970DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.152.0/23
Signature Algorithm: sha256WithRSAEncryption
07:af:ea:71:0e:bd:ac:de:f6:13:da:2e:bb:70:c0:ab:95:35:
44:f7:55:18:16:ed:34:4f:af:38:ba:68:84:84:a4:15:da:17:
f4:fe:1e:41:17:63:5d:11:22:79:d1:7b:98:6b:67:cc:77:e3:
25:dd:de:8b:35:91:98:a4:2e:fb:0c:8c:e4:e6:1b:e2:51:a1:
b1:fc:8a:9b:99:42:22:01:bd:13:24:fe:95:02:6d:ce:9c:7a:
9f:03:9e:34:51:32:71:a9:10:47:58:d0:b5:f1:01:96:94:b6:
2b:61:00:f4:c1:56:35:d4:f0:00:dc:6e:8c:1a:fd:3a:3e:d6:
e0:e5:fe:e0:42:af:32:b5:18:0c:b3:b1:5e:19:cf:32:03:12:
74:27:90:b1:f2:8b:8c:d5:3c:2a:ab:5f:a2:bb:3f:dd:73:12:
de:6e:e4:49:00:9e:16:d9:86:0c:91:90:b6:c2:03:13:dc:45:
cb:8f:24:d4:d0:d3:a4:7a:34:6e:cb:7e:85:d7:64:71:52:00:
4d:26:32:64:c7:5a:d6:cc:84:e9:13:2b:c1:f3:a6:7a:9e:44:
2a:08:7b:b8:02:19:76:6c:06:61:aa:e1:41:27:bd:b6:dc:16:
11:f0:c2:9a:33:b3:df:01:59:7f:03:0f:4e:36:5b:e5:61:10:
7c:6e:0e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 4 15:47:18 2024 by rpki-client on console-fra.rpki-client.org