Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/DD609E18629511EE90F97473C4F9AE02.roa
File: DD609E18629511EE90F97473C4F9AE02.roa (raw, json)
Hash identifier: y4PeBiofy2QBiDqi7QqBw6mtbMXpKbb250Kavxrx6wI=
Subject key identifier: 05:EB:F4:E7:BD:C1:15:D6:37:1C:45:CD:0B:CA:EA:3E:93:CC:23:10
Certificate issuer: /CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Certificate serial: 0402
Authority key identifier: 30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/DD609E18629511EE90F97473C4F9AE02.roa
Signing time: Wed 04 Oct 2023 09:10:30 +0000
ROA not before: Wed 04 Oct 2023 09:10:30 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 24499
IP address blocks: 103.123.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1026 (0x402)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CEE3/serialNumber=30E0803DEBA600AC9A92644C96F78A8E885D7C50
Validity
Not Before: Oct 4 09:10:30 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=651d2c06-9fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:d0:b3:ac:68:6d:95:b2:3d:cb:11:6d:a7:
2b:03:1c:aa:21:10:ea:4d:38:74:3b:e0:6a:43:24:
5d:41:88:40:38:f2:ab:53:e5:57:51:f5:81:3a:fd:
ef:60:57:6d:77:2f:e2:eb:73:9a:0d:2c:c0:b7:8d:
ba:53:e5:eb:82:dd:45:9e:ed:ee:39:90:d3:df:df:
bd:d4:30:c6:e9:67:a1:f8:5d:c8:2c:53:dc:96:a9:
6e:d8:95:83:93:d6:19:81:89:1a:d8:7c:f1:6d:0e:
61:bb:be:ea:49:54:4e:ee:4b:1c:f1:5f:b4:d6:7f:
a2:4b:59:f1:31:79:7c:5b:27:c7:cb:c8:a0:a5:70:
e7:68:f3:91:a2:68:f3:75:7b:45:73:1b:f3:bd:16:
09:1e:ec:cc:3c:6b:e4:6a:94:c7:48:0d:7d:bf:6a:
50:83:03:30:b6:3a:c0:ef:a0:1e:c9:65:6b:29:ff:
0f:9a:cc:ef:9d:c4:9d:1a:94:42:74:d9:6f:c2:94:
57:82:38:1a:82:6a:79:51:65:8f:4b:bc:a0:8e:f8:
f0:22:17:c3:3c:f9:c1:40:9d:f3:4d:5e:17:6f:11:
d1:72:3d:19:73:f3:8b:09:bd:62:91:65:d9:20:d1:
12:a2:96:05:64:fb:8e:96:fe:d5:48:e9:cb:f3:b7:
f9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EB:F4:E7:BD:C1:15:D6:37:1C:45:CD:0B:CA:EA:3E:93:CC:23:10
X509v3 Authority Key Identifier:
keyid:30:E0:80:3D:EB:A6:00:AC:9A:92:64:4C:96:F7:8A:8E:88:5D:7C:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/MOCAPeumAKyakmRMlveKjohdfFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOCAPeumAKyakmRMlveKjohdfFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CEE3/9A77AA2A059411EC9F646854C4F9AE02/DD609E18629511EE90F97473C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.115.0/24
Signature Algorithm: sha256WithRSAEncryption
69:7f:8c:b2:43:52:1c:18:03:d4:7b:3c:41:2e:58:f4:11:7e:
da:cc:4a:a0:1d:f7:cc:b4:e5:64:3c:9d:f2:81:c0:2d:94:de:
8c:15:d7:47:cc:20:1e:52:02:3d:c0:18:5a:c3:3d:81:b0:d8:
96:a2:75:f1:7c:68:d5:37:8c:90:ed:9c:7c:74:e9:fb:e8:3b:
c7:05:d3:de:40:81:39:31:25:43:7c:31:fb:ef:b3:dc:63:9e:
15:79:44:df:ac:16:ee:dd:e7:18:2f:9d:f3:36:b5:c4:1e:63:
10:61:82:13:19:ed:df:30:a2:46:f6:5b:8e:44:6e:9c:c4:9d:
62:e6:56:6e:2d:42:8c:44:9f:2c:a6:ad:31:e0:91:64:bd:09:
96:a4:3f:a7:71:55:83:21:9b:00:14:6c:7d:80:28:6e:b8:98:
41:a7:f6:cc:30:14:18:11:1f:6d:35:78:3c:e6:7d:17:40:ee:
5f:10:aa:ea:ae:93:84:2d:35:25:0f:74:d1:b1:d0:0c:7c:70:
c2:bf:94:7e:fa:56:ee:6a:be:b0:f4:e9:8a:69:4c:71:df:9c:
28:1c:09:d3:58:49:3f:c6:24:93:e5:fd:0f:86:df:a8:99:d3:
ab:e1:68:86:fe:dd:33:90:ad:d9:96:b4:d1:eb:1b:27:4a:41:
da:ea:a3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 18:18:10 2023 by rpki-client on console-fra.rpki-client.org