Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/44434D4E5B6011ED9E438E17C4F9AE02.roa
File: 44434D4E5B6011ED9E438E17C4F9AE02.roa (raw, json)
Hash identifier: mEbE89kZgc3ZFucjCerH/wV/EcLhtFl6+2ajK4ex45g=
Subject key identifier: 7F:4B:1C:D5:93:27:0D:BC:80:BC:E0:2B:A8:6F:BB:C1:E7:17:B4:F7
Certificate issuer: /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Certificate serial: 0D
Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/44434D4E5B6011ED9E438E17C4F9AE02.roa
Signing time: Thu 03 Nov 2022 10:14:14 +0000
ROA not before: Thu 03 Nov 2022 10:14:14 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 137526
IP address blocks: 103.20.242.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Validity
Not Before: Nov 3 10:14:14 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=63639476-7b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7f:9c:5c:66:a8:ed:2d:93:b5:1c:f7:58:58:
94:1b:2b:77:63:b6:cc:6b:64:68:69:e6:e1:25:f7:
5f:3b:39:a6:1d:eb:1e:ee:6c:41:8e:fe:3f:5b:06:
95:e4:a1:77:58:34:06:ea:d6:89:d9:e7:f2:46:eb:
0e:f5:6c:b8:96:fa:67:d9:a5:38:e7:7b:ec:5d:4f:
d5:92:ab:c6:18:0f:dc:6a:56:e7:bd:3a:4a:42:e0:
6d:5f:e3:04:f6:25:ae:f9:b9:4d:61:ad:27:6b:91:
aa:4c:a0:82:1e:54:8c:66:31:8d:bf:a6:81:c7:fa:
b5:7b:91:d8:9c:59:b4:55:52:d9:c4:66:76:9a:55:
87:8e:bc:9c:1c:56:17:1b:c7:0f:56:eb:4c:2c:15:
0f:45:39:6c:4f:b8:4a:d3:e9:de:41:e4:fd:2c:0a:
1a:a0:ae:d2:5c:78:6c:cd:47:b0:7f:22:71:84:14:
81:df:90:7e:12:6a:a7:00:c8:3a:be:8c:67:1c:ed:
5c:9d:7a:4a:50:0b:96:25:10:5f:ff:a8:d6:e7:6d:
96:52:d2:84:5c:ca:0d:4b:83:f2:1f:4a:9a:8a:9c:
aa:7c:e2:66:71:09:f4:b8:51:fd:99:80:2e:15:8d:
dc:ce:6e:4d:f1:6a:5c:58:17:58:9f:5e:5e:c8:fa:
9f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4B:1C:D5:93:27:0D:BC:80:BC:E0:2B:A8:6F:BB:C1:E7:17:B4:F7
X509v3 Authority Key Identifier:
keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/44434D4E5B6011ED9E438E17C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.242.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:fb:2d:67:7f:b3:1b:67:58:5a:17:b9:be:a0:80:a1:34:21:
38:ec:a2:47:72:93:07:9f:8c:d8:5d:f1:62:ac:9c:c9:c4:8e:
6a:37:22:a5:f6:89:84:e5:4b:f9:19:fb:d0:2f:78:21:d8:10:
50:fb:e6:cc:35:cd:b5:15:db:18:cb:a8:99:22:cf:ca:a5:eb:
1e:18:70:a3:7d:1a:ca:8f:70:1a:63:33:4c:3c:25:d8:c3:5c:
27:cb:ca:b8:6f:02:6f:c2:cb:7e:6f:61:4e:3c:d5:c6:95:6b:
01:aa:40:7e:9f:39:41:54:cb:cf:f4:6b:c9:0b:aa:d3:af:ad:
e3:4f:d5:73:54:d0:ef:d9:1a:ed:fa:fd:fe:1e:a3:18:e2:b7:
77:c8:38:2a:33:29:66:85:5d:73:f1:a1:df:68:a0:aa:85:ae:
fc:66:e9:a1:84:5d:ec:a0:ae:1d:0a:fe:02:b9:dc:a4:60:31:
2f:a4:15:ce:ac:0b:7c:10:f3:de:ef:c7:31:6f:a7:38:cd:f2:
40:5b:e9:2b:31:f9:24:3a:6f:07:cb:82:d5:11:e7:b4:3d:6e:
d7:41:46:de:b4:72:07:aa:16:4e:39:53:d7:48:12:45:cb:04:
9b:61:47:09:e0:f7:f6:2f:6a:1e:96:36:9b:38:35:d6:34:1b:
6f:d2:cc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:47 2023 by rpki-client on console-fra.rpki-client.org