Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/B3075A2A1F1611EE8854A321C4F9AE02.roa
File: B3075A2A1F1611EE8854A321C4F9AE02.roa (raw, json)
Hash identifier: As6iIAmxkhXdDh/t6tci2dt95KPoTtSksVjNIVlRY5g=
Subject key identifier: 3A:86:E0:4E:67:93:39:9B:CB:DA:62:BD:12:91:80:7A:97:71:6D:C8
Certificate issuer: /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Certificate serial: 03F2
Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/B3075A2A1F1611EE8854A321C4F9AE02.roa
Signing time: Mon 10 Jul 2023 11:41:25 +0000
ROA not before: Mon 10 Jul 2023 11:41:25 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 35913
IP address blocks: 103.31.208.0/24 maxlen: 24
103.31.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1010 (0x3f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Validity
Not Before: Jul 10 11:41:25 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=64abee65-041b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:a3:73:bb:04:2a:99:47:56:fc:7e:e5:d4:
89:b3:42:78:06:a7:95:06:50:06:e3:ec:7f:9f:3b:
49:93:69:99:da:8d:72:cd:47:0b:4e:45:09:4a:c5:
c5:4a:35:93:d0:8f:ea:da:44:75:ef:5b:79:22:f1:
50:ed:ad:94:cd:48:87:5f:a4:4e:fe:59:bb:c6:09:
0e:06:d4:a8:a2:9f:0f:f1:ab:fb:50:a8:e3:43:fa:
9c:9d:e3:66:6c:f6:49:b7:64:82:e7:44:83:2e:06:
8c:1e:16:3e:d4:c1:71:fb:1c:91:fb:2d:c1:b5:2f:
94:7b:4d:4f:d1:58:c3:cd:c9:4d:53:18:32:a2:dc:
c0:f8:22:3b:b2:82:3d:6d:3b:85:39:04:04:96:74:
80:60:fc:d5:9d:61:a3:74:32:d3:4c:e6:20:3e:b2:
2c:4b:b9:c4:f0:c5:9c:c1:80:9f:fe:5c:8b:8c:7c:
71:b8:35:c3:42:99:ce:75:97:b2:71:59:bd:af:0f:
d8:2d:07:ba:fe:73:1c:0e:e0:47:3c:f3:6a:5c:26:
a5:5f:dc:56:d6:8c:bb:94:2d:17:e3:79:a3:4b:dd:
8b:1a:49:77:1b:78:5e:f5:20:42:72:80:17:68:7b:
68:0e:1a:b1:65:c4:ca:a9:d5:8b:1d:ac:06:a6:66:
3f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:86:E0:4E:67:93:39:9B:CB:DA:62:BD:12:91:80:7A:97:71:6D:C8
X509v3 Authority Key Identifier:
keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/B3075A2A1F1611EE8854A321C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.31.208.0/23
Signature Algorithm: sha256WithRSAEncryption
82:e9:54:ac:0f:35:ce:e7:6e:f0:9c:04:a9:e2:77:f1:b4:f1:
2f:4e:ce:5a:7d:58:c5:31:6b:cf:31:55:05:bb:84:7a:bf:aa:
70:53:75:be:a9:0c:06:70:75:47:72:61:a3:9d:80:0d:cc:6a:
b8:5f:be:83:dc:fb:df:9f:07:27:a3:4e:f3:7b:2e:9a:56:b7:
49:58:47:31:b2:0e:bc:a7:d6:f5:e2:d8:e4:54:25:32:3e:5f:
21:a8:d9:5a:74:b6:96:ff:2b:50:05:7e:35:95:13:f4:1c:05:
72:80:9e:7a:83:1a:c7:0c:ea:28:42:43:1e:05:85:43:42:e2:
01:10:76:d5:85:0b:cf:30:69:27:15:98:63:19:2c:60:76:de:
da:57:d1:26:c0:dd:58:ac:cf:3d:77:70:4b:76:5e:1a:49:c5:
40:c9:dc:52:a8:63:19:7d:f0:d7:d1:3d:36:fa:b0:07:3c:e8:
d5:27:05:85:86:a3:1b:e0:12:f6:00:58:22:bd:e9:76:5a:bb:
4d:13:d7:df:40:41:b2:b4:d4:96:7c:c5:e9:93:40:83:e4:0f:
fd:a6:80:11:dc:f9:89:87:2f:bf:f6:2a:29:4d:cf:b5:a8:2e:
62:40:13:e4:b4:fe:7b:d3:f0:74:d9:1f:5e:b0:f0:02:e4:38:
86:07:09:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 12:40:28 2023 by rpki-client on console-ams.rpki-client.org