Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176B87/7AEB660284DB11ED8623A43DC4F9AE02/9819F25A84DD11EDA0FCBC3DC4F9AE02.roa
File: 9819F25A84DD11EDA0FCBC3DC4F9AE02.roa (raw, json)
Hash identifier: qO/xQSTb+TJAc8421lzAjN5BJ3/IyKBQXO2GDOPmHXc=
Subject key identifier: 08:B2:0D:5A:AC:A0:B5:7D:F8:00:83:DD:01:F6:82:4F:F8:5B:0F:60
Certificate issuer: /CN=A9176B87/serialNumber=CB72B2D886F4C125F7D47C41ECF8E2C660F2D823
Certificate serial: 23
Authority key identifier: CB:72:B2:D8:86:F4:C1:25:F7:D4:7C:41:EC:F8:E2:C6:60:F2:D8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3Ky2Ib0wSX31HxB7PjixmDy2CM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176B87/7AEB660284DB11ED8623A43DC4F9AE02/9819F25A84DD11EDA0FCBC3DC4F9AE02.roa
Signing time: Thu 23 Feb 2023 06:55:52 +0000
ROA not before: Thu 23 Feb 2023 06:55:52 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 53727
IP address blocks: 103.147.204.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 04:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176B87/serialNumber=CB72B2D886F4C125F7D47C41ECF8E2C660F2D823
Validity
Not Before: Feb 23 06:55:52 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63f70df8-3e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3a:0b:b0:84:0e:a6:04:9f:4d:99:3a:8b:d0:
3a:4e:2e:6e:dd:f3:5e:7c:a7:e3:3b:2d:59:a9:57:
b5:b6:13:0f:2e:f7:40:0d:e1:30:37:86:23:a0:f7:
c0:01:71:74:95:44:9a:60:e2:4b:3f:e5:31:36:bf:
5d:1e:b3:43:5b:b3:c0:e0:11:03:f7:9f:dc:9c:e2:
b2:6e:64:a0:03:aa:1f:28:69:0b:b8:9d:8f:04:53:
eb:e7:96:a0:99:b1:57:20:94:fa:c4:96:c8:df:81:
eb:81:b1:c3:dc:19:15:c3:45:ac:b7:ef:ea:08:c7:
11:44:af:50:55:84:09:44:7c:a2:fd:f6:0b:5f:dc:
22:4d:b7:11:e8:c3:cc:b7:be:06:a6:f1:24:58:6a:
59:41:4b:1c:9f:46:ef:07:60:63:80:9e:4c:06:e3:
df:00:04:d7:b1:e9:8d:ad:84:a1:90:d6:74:97:7e:
f3:21:99:9d:36:51:f6:26:9b:f8:08:56:03:ec:87:
c8:4b:35:54:61:ff:fe:c6:c2:7c:a9:c2:46:ac:87:
b4:86:ec:02:51:bc:39:2d:9d:5c:38:50:26:b2:6a:
f8:c0:99:11:db:3f:5a:dd:eb:26:c7:0b:d7:f1:7a:
4c:aa:0d:80:7e:c1:87:b2:48:f7:7a:3e:6c:86:58:
2b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B2:0D:5A:AC:A0:B5:7D:F8:00:83:DD:01:F6:82:4F:F8:5B:0F:60
X509v3 Authority Key Identifier:
keyid:CB:72:B2:D8:86:F4:C1:25:F7:D4:7C:41:EC:F8:E2:C6:60:F2:D8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176B87/7AEB660284DB11ED8623A43DC4F9AE02/y3Ky2Ib0wSX31HxB7PjixmDy2CM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3Ky2Ib0wSX31HxB7PjixmDy2CM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B87/7AEB660284DB11ED8623A43DC4F9AE02/9819F25A84DD11EDA0FCBC3DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.147.204.0/23
Signature Algorithm: sha256WithRSAEncryption
94:e0:32:8a:e7:64:e3:a1:a6:13:76:f6:a6:93:3a:24:ec:37:
75:a5:69:86:f9:04:ac:fe:75:00:a4:79:5a:82:9c:4b:30:62:
61:b6:73:b9:79:4a:3b:23:b5:cc:3b:62:6e:79:64:d5:3a:a6:
c1:3d:36:9e:f1:48:f7:76:c3:7d:b2:48:e9:7b:b4:06:de:6b:
77:8b:ae:f1:5d:8e:6b:2c:ec:88:17:b9:2d:52:92:7a:e2:e0:
30:4f:9b:d7:29:39:56:ec:09:f1:d0:07:12:71:2b:b9:57:41:
7a:0e:16:f3:75:ec:f0:bf:87:4f:5d:0b:66:bb:10:83:b6:ed:
c2:ad:f7:a0:16:f1:65:f6:ee:79:56:16:c9:fd:81:88:64:41:
54:f4:57:31:00:0b:a3:3f:15:1e:d0:cc:4e:e5:5a:dc:4d:0a:
e7:38:3a:9b:4f:bf:26:25:60:c3:f3:32:b1:a7:42:f7:43:0f:
4a:23:7d:25:73:8e:81:d4:14:0f:c1:93:ce:8e:1c:ee:f0:77:
2d:f2:22:08:65:05:02:dc:59:59:1e:ac:a9:cb:f1:d4:03:a5:
6d:d5:a4:0f:96:04:f2:30:05:ee:af:50:45:02:0f:98:48:9f:
23:67:c2:2a:b0:a4:77:d5:e8:88:52:3b:c9:ac:03:03:0a:76:
4b:ed:e8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 07:31:13 2024 by rpki-client on console-ams.rpki-client.org