Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/5C7542F4060E11EB9A4BBF52C4F9AE02.roa
File: 5C7542F4060E11EB9A4BBF52C4F9AE02.roa (raw, json)
Hash identifier: hHmiC/PL3f4/lp+2apj6y/UFcEOV5oahtEwxOsTfmts=
Subject key identifier: E3:70:0B:97:67:4B:C7:98:24:53:4C:9C:84:23:4F:AF:E1:0C:0E:24
Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4
Certificate serial: 0AD5
Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/5C7542F4060E11EB9A4BBF52C4F9AE02.roa
Signing time: Wed 08 Feb 2023 20:06:48 +0000
ROA not before: Wed 08 Feb 2023 20:06:48 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 135386
IP address blocks: 103.133.92.0/24 maxlen: 24
103.133.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2773 (0xad5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4
Validity
Not Before: Feb 8 20:06:48 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=63e400d8-4e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:14:4b:06:92:9a:3d:be:d5:0c:91:f2:94:95:
14:4f:49:3a:d5:33:65:38:24:65:fe:3c:49:34:c5:
f3:68:97:3a:e9:43:38:d4:f8:d8:36:78:a0:ca:b4:
ae:d0:28:25:e4:8b:63:40:7e:b2:a5:05:f3:a6:44:
29:e7:de:c9:3f:39:a9:93:cf:b5:0a:79:9a:b7:5a:
40:a5:b0:3c:53:c6:a0:42:84:42:5b:00:ae:b9:cf:
1a:9a:49:cb:95:5d:c6:a1:3e:5b:07:75:a5:1a:68:
42:11:e4:da:23:53:3c:0b:70:9a:ed:0b:71:59:77:
83:20:72:d8:db:81:61:38:20:4c:9b:2c:8a:ee:be:
b8:d0:71:78:b1:12:e2:12:41:8a:c2:49:0b:90:03:
a0:56:87:0f:8d:ad:02:67:cf:e8:9c:7d:be:42:d9:
17:ca:db:bf:fe:44:dd:5c:e4:2b:41:79:6c:9e:de:
67:b7:16:5d:6a:d6:c8:9d:3e:a4:86:e9:f6:01:fe:
2b:03:dc:34:09:dd:1f:d9:a5:c8:2e:57:54:b3:84:
93:c4:60:e4:6d:39:52:55:fc:39:91:29:58:e5:e2:
08:57:57:f2:2e:1c:be:96:f2:00:25:73:48:08:98:
aa:d9:fc:8d:6c:d6:26:77:a4:77:f7:2c:52:13:d3:
24:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:70:0B:97:67:4B:C7:98:24:53:4C:9C:84:23:4F:AF:E1:0C:0E:24
X509v3 Authority Key Identifier:
keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/5C7542F4060E11EB9A4BBF52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.92.0/24
103.133.94.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:7e:e4:a8:b6:45:a0:cf:8e:be:e6:1f:65:ad:a6:8d:c1:7a:
d6:4c:e7:10:2d:34:7a:a8:0c:5f:aa:e5:11:4d:3a:ef:fb:ea:
04:bd:96:5f:d6:8e:65:31:d8:73:e5:e2:2a:d1:62:30:c8:c4:
c0:20:16:a0:f5:5b:b2:8d:a4:b4:28:4c:ab:2e:f5:c9:2c:06:
e6:48:25:26:45:91:7f:6a:b5:db:29:41:f6:41:ae:cd:91:82:
07:c2:a5:4f:91:6f:02:b5:a6:25:f8:7c:35:5c:73:06:7f:35:
15:06:0c:bd:fe:16:ea:ac:92:b8:70:a0:32:58:37:54:4e:7b:
cb:9c:c6:a8:27:f4:5f:a7:7e:d6:91:3a:c5:c8:fe:35:41:0e:
1b:25:d6:88:69:7c:07:b4:cd:5a:2b:3c:3e:f5:bb:6f:99:9c:
98:02:1f:ec:3a:3b:c1:a8:93:d2:4d:58:90:f9:e6:85:22:36:
e7:98:d3:f2:a7:84:cd:e0:97:21:2a:fa:80:b7:89:8f:10:a9:
51:d8:7d:ab:cf:e2:24:31:5f:e9:55:9a:9e:30:ea:86:19:af:
35:ba:b0:40:97:60:68:de:de:5c:4a:a0:ea:d9:0a:03:6b:11:
89:9f:ff:14:21:8d:c3:48:d6:60:4c:c2:01:5b:a7:0c:d2:ba:
b9:cc:38:c7
-----BEGIN CERTIFICATE-----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Generated at Fri Jul 21 03:08:30 2023 by rpki-client on console-fra.rpki-client.org