Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/60143ED8958611EDA12D8A18C4F9AE02.roa
File: 60143ED8958611EDA12D8A18C4F9AE02.roa (raw, json)
Hash identifier: rUh8SIhDYLcCCBZE5fSSf7J26mxmPl7NNhTqhaCw0F8=
Subject key identifier: 43:95:C3:15:5E:BC:D3:9F:60:E4:D0:98:C8:9B:6D:B0:44:43:5B:62
Certificate issuer: /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Certificate serial: 038F
Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/60143ED8958611EDA12D8A18C4F9AE02.roa
Signing time: Mon 16 Jan 2023 10:13:09 +0000
ROA not before: Mon 16 Jan 2023 10:13:09 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 132502
IP address blocks: 103.31.208.0/24 maxlen: 24
103.31.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 911 (0x38f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Validity
Not Before: Jan 16 10:13:09 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=63c52335-f539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:47:92:b1:64:4c:40:71:95:90:6e:f6:55:
a7:cc:26:a3:3d:f6:fd:f3:07:04:0d:94:3d:a6:27:
de:59:32:45:14:28:dc:37:21:92:57:47:3b:60:6f:
9c:ec:76:a4:67:f5:db:53:c7:7c:3f:4c:e0:14:e4:
3d:67:2f:f4:53:f5:9b:a7:a1:98:ea:0e:13:84:f1:
a7:43:e5:8e:0f:11:41:6f:fa:91:8a:2e:4a:b9:fd:
a7:ec:ee:c5:8c:a4:75:6d:62:a1:77:69:b8:87:01:
9a:86:ae:06:47:58:59:ee:fa:a9:58:7a:fb:fc:e3:
9a:b6:a7:44:78:27:59:a2:75:8f:eb:0e:b5:d7:2a:
6b:86:0b:db:e9:36:46:99:f3:66:e6:12:d9:53:73:
3b:52:8f:4e:5f:5c:fb:1c:2a:15:89:cf:65:a4:d6:
67:dc:22:af:1a:99:8e:c0:04:39:d9:91:ed:44:b9:
95:d2:10:69:d9:da:f7:99:d0:41:31:60:3f:0e:78:
23:5f:b1:f4:2a:44:44:e3:bf:bc:db:fc:dd:da:94:
8b:4d:5d:45:60:98:0d:94:48:2f:80:6b:5f:2f:ec:
bd:f8:14:68:9b:3d:7a:42:1f:a7:52:3c:f1:38:98:
82:0d:d5:a3:72:12:f4:d6:80:f9:da:19:d6:af:98:
c6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:95:C3:15:5E:BC:D3:9F:60:E4:D0:98:C8:9B:6D:B0:44:43:5B:62
X509v3 Authority Key Identifier:
keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/60143ED8958611EDA12D8A18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.31.208.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:a2:56:b4:a1:43:5b:08:6f:2f:10:68:c2:46:4a:a6:37:80:
2d:14:0e:27:ff:90:b8:37:c2:77:92:d8:08:10:80:bd:e5:bc:
d1:a7:80:6d:60:de:13:bc:8d:f2:21:3d:e0:69:ae:e1:7f:df:
a3:94:e4:06:34:ce:6b:f1:d1:1a:91:95:ed:ea:3f:ca:5e:e6:
ff:9a:a8:e0:0d:e5:f6:5d:68:8a:31:df:5e:54:3c:e0:5b:83:
4c:92:59:ef:8f:a0:a1:16:aa:74:c3:a5:f8:e4:d8:c3:2c:e6:
ae:90:df:9f:e7:05:bb:ac:d8:c5:2a:72:8a:04:3e:18:af:bb:
dd:82:38:73:11:e3:69:fa:97:00:58:46:4f:bd:0b:b3:26:1d:
fd:1b:c3:44:28:53:8e:21:ca:98:1a:97:85:04:19:90:2c:3f:
e1:62:89:a5:08:a7:1f:55:28:6b:59:b4:ec:fb:af:97:35:74:
cf:08:16:ee:b2:a4:31:5f:35:08:fa:f1:b8:ed:14:fb:21:66:
1a:6c:95:b6:65:49:c1:14:38:6a:1f:08:46:b5:f3:f8:f4:6f:
8c:14:e1:af:1b:5f:17:20:b9:91:60:08:6c:09:df:34:7c:20:
4a:18:1d:d4:49:30:8c:bb:ba:f7:08:6a:34:e1:b8:12:29:e0:
b7:5b:64:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:48 2023 by rpki-client on console-fra.rpki-client.org