Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/D652E70E51CD11EDA7D9696CC4F9AE02.roa
File: D652E70E51CD11EDA7D9696CC4F9AE02.roa (raw, json)
Hash identifier: b2f6mOQu82pBgfsd89rE8wtHhMwEhQyyPydcVdheU90=
Subject key identifier: 7C:16:1B:00:70:D3:0B:64:72:D1:10:F5:00:48:44:9C:BF:26:2D:EE
Certificate issuer: /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
Certificate serial: 01CA
Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/D652E70E51CD11EDA7D9696CC4F9AE02.roa
Signing time: Mon 03 Apr 2023 05:15:34 +0000
ROA not before: Mon 03 Apr 2023 05:15:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134424
IP address blocks: 103.185.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458 (0x1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
Validity
Not Before: Apr 3 05:15:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=642a60f6-e772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:5d:25:cf:94:47:b9:5e:7e:75:d9:51:2c:
eb:d6:98:df:0c:42:95:8d:21:1a:81:09:87:8b:f8:
e1:65:9a:a7:2e:7d:5d:9d:c9:50:1c:aa:75:4c:8b:
78:f4:c5:0c:1b:dc:2a:96:08:72:ad:e0:5c:ca:31:
7e:bb:e6:97:d3:73:75:20:bd:2c:6a:67:89:2c:32:
e4:65:f4:38:33:94:89:9d:75:6d:11:1f:3c:ff:83:
47:8c:a1:6e:f9:33:59:fd:f2:34:49:98:14:51:9c:
26:8c:ca:88:76:40:46:07:4a:cf:64:df:01:c2:6f:
20:ef:ff:c9:79:bb:28:83:d5:40:f8:97:3f:de:03:
02:56:0a:4d:d7:f2:5e:a3:c4:1e:71:ff:6f:18:1b:
1e:86:7e:16:e8:dc:1e:2b:e3:2d:a6:f0:95:df:47:
f8:c0:eb:fa:73:c5:0c:ce:ea:70:62:3e:97:4b:f7:
f3:9a:11:83:4e:36:01:d7:c2:7c:9d:3e:d5:ba:bc:
af:ad:39:7a:db:c7:50:fb:08:99:22:61:38:88:91:
e3:5f:8b:7f:dc:cb:78:57:62:57:4a:14:e6:2c:8c:
2a:c6:a3:5f:b2:60:bb:5a:10:3d:79:c1:2b:c2:45:
b9:eb:d6:2d:bc:2e:ff:95:83:f0:0f:ff:a5:d8:0b:
a1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:16:1B:00:70:D3:0B:64:72:D1:10:F5:00:48:44:9C:BF:26:2D:EE
X509v3 Authority Key Identifier:
keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/D652E70E51CD11EDA7D9696CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.25.0/24
Signature Algorithm: sha256WithRSAEncryption
77:44:40:e4:28:7d:91:d2:33:75:5d:e1:fa:e7:59:6f:d3:47:
dc:1e:c2:c2:40:b0:b4:5e:95:09:1f:1a:a4:a5:89:ab:38:52:
76:ba:b6:ea:69:ff:fa:3c:3a:3d:05:61:7d:05:a3:fe:f2:62:
88:a2:c7:56:d1:fc:2f:0d:31:14:02:eb:4b:d5:4f:7c:28:1f:
ae:3c:ae:e9:b9:19:a7:7c:bd:30:db:51:a6:4c:fd:b2:67:b0:
dd:a2:10:fe:d5:2f:18:3a:17:51:13:a3:c3:f6:e7:26:db:e3:
d3:28:a7:f2:51:f6:32:8c:38:44:5d:41:7c:5b:3f:18:74:bc:
11:34:b0:22:79:fc:f0:00:30:8d:f5:52:a6:be:fe:92:fe:ca:
10:2d:29:7b:e4:cf:46:52:14:d1:77:06:9d:c6:08:6d:c0:56:
cb:a0:37:04:28:e1:60:fd:3c:90:76:fd:9a:d0:02:eb:78:71:
c1:d5:3a:47:0f:78:3a:87:76:17:7a:7d:da:48:20:1a:9b:92:
78:05:70:88:fa:e0:31:0e:ec:71:0b:70:b6:c2:3a:5b:ff:3e:
04:50:3f:f7:46:e3:e6:a2:0b:c5:a8:9c:91:0d:81:bd:c9:a5:
01:3e:4a:21:8f:8b:f5:66:36:3a:98:0c:3f:b2:f2:93:6d:e3:
59:3f:e1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 19 07:23:00 2023 by rpki-client on console-ams.rpki-client.org