Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/2A27121EEE4611ED9BEFED31C4F9AE02.roa
File: 2A27121EEE4611ED9BEFED31C4F9AE02.roa (raw, json)
Hash identifier: R2HiNw+fDRcdzhLvKgckOWJ8z9yHwW8v/FWEnJnd98U=
Subject key identifier: 95:34:88:D5:0F:B8:53:A5:CE:F6:BA:C4:5F:20:DC:F8:F4:61:22:D1
Certificate issuer: /CN=A916A39E/serialNumber=724D84100B2599931903869AB05220776C8BAC42
Certificate serial: 02
Authority key identifier: 72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/2A27121EEE4611ED9BEFED31C4F9AE02.roa
Signing time: Tue 09 May 2023 08:47:44 +0000
ROA not before: Tue 09 May 2023 08:47:44 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 132685
IP address blocks: 103.73.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A39E/serialNumber=724D84100B2599931903869AB05220776C8BAC42
Validity
Not Before: May 9 08:47:44 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=645a08b0-71fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cd:5f:c4:ce:fc:49:2e:37:5a:2a:51:19:57:
b0:04:f3:05:c3:ef:ad:53:dc:d0:2e:38:81:6c:ae:
c9:a9:e9:83:2e:31:23:04:8c:33:7c:20:aa:99:6a:
41:85:d0:4a:aa:f1:46:b8:1c:74:3d:d0:2c:b3:b0:
cb:fd:90:75:04:40:0e:dd:9b:43:d4:97:58:0d:a3:
c5:a0:28:85:a9:f8:c7:b8:8e:de:f3:18:ed:e5:d8:
ee:37:2b:11:7d:ff:1d:64:7b:7f:97:09:ac:9c:0e:
89:1d:3f:26:d4:b4:48:9a:ab:65:2f:e7:32:e0:93:
39:6d:0c:71:ba:bd:92:d9:e6:86:85:cd:e5:95:40:
c8:8a:f5:2b:d7:74:dc:21:40:9d:2e:09:86:73:7a:
24:7c:62:7b:cb:33:65:4e:bf:b1:44:2c:9d:89:b3:
97:7e:bb:41:05:27:8e:8b:91:9e:ed:8e:91:cd:fc:
78:75:77:cb:3a:32:60:f2:e3:3c:c0:3b:88:a5:60:
5b:43:25:cc:f0:30:a0:3a:9d:d0:68:e3:78:87:54:
a2:00:ee:8b:03:96:2b:14:51:4c:fe:7e:7f:fc:6c:
94:06:0c:81:21:e3:a2:e6:bd:b7:bf:86:bf:18:d3:
bd:bb:e7:44:e1:c8:9e:e0:15:7c:fb:a4:dc:8b:8d:
5a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:34:88:D5:0F:B8:53:A5:CE:F6:BA:C4:5F:20:DC:F8:F4:61:22:D1
X509v3 Authority Key Identifier:
keyid:72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/2A27121EEE4611ED9BEFED31C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.195.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:9b:3a:ce:7a:09:ec:92:5c:81:18:5f:32:a0:21:ee:9b:ee:
76:6c:20:26:9d:f9:87:e2:ca:64:1c:a4:b4:81:b5:14:f1:91:
b3:0b:e4:18:05:3f:9b:38:8b:e6:b7:98:b9:b2:d3:3a:aa:16:
e2:da:ee:54:54:20:10:0d:f2:26:59:30:7d:ec:7a:79:ed:76:
3c:df:b5:fe:d9:0f:3d:79:2e:2e:97:1e:98:46:4a:af:3c:86:
39:94:f0:97:1c:13:34:03:8d:24:6b:79:c0:63:7d:a3:59:30:
c3:bf:55:84:17:7f:75:00:7d:54:32:66:d9:33:4f:4a:42:7a:
e5:e1:42:95:bf:ab:8b:cb:b8:d5:04:37:80:b3:07:53:cd:bb:
7b:ee:ff:98:9c:e8:4e:5d:83:e3:d9:b4:f5:39:0f:cf:97:69:
c3:9d:3e:56:0a:07:8e:31:26:79:7b:37:b0:29:8a:16:9c:11:
e9:76:18:66:1a:88:11:5c:b0:a1:a2:20:8c:c5:29:d7:e0:dd:
e6:e1:e6:f6:fb:66:db:1b:4e:a6:62:82:29:10:14:47:11:55:
61:29:88:a9:90:cc:38:cf:66:a1:1d:06:22:2b:d6:44:d1:45:
75:d0:54:65:15:14:b0:ac:3a:08:30:b1:3a:b0:9c:6a:be:4f:
80:a7:81:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:45 2023 by rpki-client on console-fra.rpki-client.org