Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/1E6FA8BA283411EDABF49D69C4F9AE02.roa
File: 1E6FA8BA283411EDABF49D69C4F9AE02.roa (raw, json)
Hash identifier: +vEJoqzhbw3dOyFljgTdlFeb3+3XCQuWiOvp80TFgss=
Subject key identifier: CF:F4:F5:91:49:D4:59:2D:0A:23:E2:E5:0D:8D:C3:8E:DF:B7:40:0B
Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470
Certificate serial: 05EA
Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/1E6FA8BA283411EDABF49D69C4F9AE02.roa
Signing time: Wed 12 Oct 2022 23:49:53 +0000
ROA not before: Wed 12 Oct 2022 23:49:53 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 140733
IP address blocks: 43.249.8.0/24 maxlen: 24
43.249.9.0/24 maxlen: 24
103.40.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1514 (0x5ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470
Validity
Not Before: Oct 12 23:49:53 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=634752a1-7d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:38:54:35:b3:b4:be:4f:26:5a:d8:3c:e3:50:
e3:f0:7f:40:6e:9c:48:3f:36:0e:28:6e:c0:01:14:
b7:b9:6c:1b:ee:48:de:5f:61:6f:41:4c:5d:19:ff:
ad:3d:97:dc:57:66:15:b4:c1:fd:08:1a:f3:c8:00:
63:f2:36:d0:bd:c3:af:df:2a:cd:c1:1d:0c:12:c9:
96:eb:6a:fa:43:3a:ab:f6:48:64:8d:53:11:a3:ee:
c7:0d:f0:f8:8a:43:92:e4:be:a6:ae:1e:4e:76:76:
89:31:3a:eb:d5:7d:29:f0:f6:91:f4:42:5b:d0:93:
32:73:8a:af:c3:a6:ed:53:1e:84:d4:e4:c8:57:64:
bc:c9:f1:fd:eb:5e:86:64:74:65:39:8c:a9:3c:4f:
8e:9c:50:f1:33:4d:40:e8:81:c2:f3:55:0c:ed:86:
9c:d0:e6:e6:07:9a:a1:a1:d8:7a:5f:8a:1d:54:1b:
6b:3c:88:49:1a:81:64:6a:d5:70:61:18:95:85:f2:
40:81:16:a3:b1:6a:92:9a:26:de:00:6c:05:8c:b5:
a4:d1:91:43:d3:2d:f7:5e:a5:70:d5:40:bf:43:3a:
74:2a:db:5d:4d:59:e0:0b:02:ca:2d:89:96:20:1c:
b7:92:0a:f1:ea:84:64:e9:16:0d:7a:ba:1d:15:61:
30:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F4:F5:91:49:D4:59:2D:0A:23:E2:E5:0D:8D:C3:8E:DF:B7:40:0B
X509v3 Authority Key Identifier:
keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/1E6FA8BA283411EDABF49D69C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.249.8.0/23
103.40.101.0/24
Signature Algorithm: sha256WithRSAEncryption
82:46:f8:6d:28:89:70:fc:51:ad:67:2e:e1:e7:c1:26:c6:24:
ec:11:0b:ce:35:6b:82:fe:d4:d9:89:97:3f:35:97:e9:8e:0b:
9e:51:f5:52:a8:33:4c:0a:e5:35:af:8d:82:26:b8:7e:5a:0c:
3b:4a:ea:4a:92:ec:f3:c3:9c:2a:40:59:2b:b1:97:ec:dd:ab:
0b:3b:48:c4:2d:84:9e:77:8d:3a:28:2d:16:c8:88:64:1f:73:
83:f0:3e:a6:81:22:39:3e:11:a7:7f:f7:98:37:e0:37:86:0c:
d5:c5:e0:0c:3e:29:69:99:db:67:77:4b:b3:5d:2b:e8:b7:ab:
30:72:c5:ba:66:3f:7b:cc:c9:c3:94:4e:90:85:53:d7:b5:1f:
dd:c0:44:6d:e9:ce:c7:32:15:98:02:7c:8c:b1:0e:33:fd:ce:
66:29:ea:6d:60:16:33:11:87:d4:a2:d0:03:bc:0d:98:18:ac:
c4:98:d1:39:13:02:47:f8:01:20:b6:cd:34:ad:8f:8d:4d:0c:
01:60:f3:76:ce:6c:00:ed:2d:88:9c:66:ae:f1:8e:13:32:56:
6d:b8:81:8c:92:f5:c6:a5:7d:42:25:a2:ed:a6:be:be:9f:97:
e8:9b:b0:13:45:2e:a5:ef:9d:cd:91:51:8a:3c:c1:ee:e7:48:
d8:7c:ce:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:44 2023 by rpki-client on console-ams.rpki-client.org