Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/48D427FA0A1C11EEA415BE0CC4F9AE02.roa
File: 48D427FA0A1C11EEA415BE0CC4F9AE02.roa (raw, json)
Hash identifier: wFDVi5bdpyC9nW0/BOjO8j3RnQ3W55d2iIghfgmCK3M=
Subject key identifier: CF:58:4D:AE:AE:89:1B:25:C6:2A:4E:72:89:0E:26:FC:FE:03:95:F9
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 0F18
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/48D427FA0A1C11EEA415BE0CC4F9AE02.roa
Signing time: Tue 13 Jun 2023 18:58:29 +0000
ROA not before: Tue 13 Jun 2023 18:58:29 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 61368
IP address blocks: 103.140.8.0/24 maxlen: 24
103.140.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3864 (0xf18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Jun 13 18:58:29 2023 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=6488bc55-f7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:39:9b:e0:8e:9e:56:d2:61:16:93:70:98:
a0:5a:f1:b3:f7:ff:73:ad:ce:30:ec:18:a2:cc:eb:
e1:36:6b:af:73:45:e6:96:43:82:93:2c:50:f6:f5:
fb:4e:05:d7:65:99:7b:e5:ff:78:7f:2f:49:1d:57:
76:49:27:45:18:f3:31:c5:3d:3e:c9:11:73:d2:17:
f5:13:97:27:57:b9:82:d9:22:36:14:df:bf:f0:42:
bd:70:5c:70:5e:b2:c6:32:ce:31:50:da:75:32:3c:
bd:37:28:84:08:f5:a7:93:c4:2c:87:e9:45:d7:e4:
fa:e8:f7:3c:95:3d:ec:de:e8:27:27:6c:9e:35:f2:
c8:23:b7:da:9a:82:6a:c4:c4:8c:e1:d1:7d:fc:30:
ad:e0:5f:27:7b:d4:59:2a:f7:33:7b:8e:a7:fb:45:
c1:69:73:50:4a:90:ee:9e:84:3e:58:f6:77:52:30:
cb:b6:72:54:f0:9c:f0:22:c4:62:0e:f8:79:d2:1f:
de:e3:dc:a9:90:e7:b6:9e:86:25:f7:a4:c9:e8:37:
96:a7:2d:a0:46:2c:5b:71:ec:56:6d:e8:a8:1d:e0:
f6:a3:9b:d7:6b:96:30:fb:3f:13:cc:2c:6d:3c:73:
19:5f:4b:ed:50:da:94:29:db:c3:84:84:08:32:17:
73:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:58:4D:AE:AE:89:1B:25:C6:2A:4E:72:89:0E:26:FC:FE:03:95:F9
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/48D427FA0A1C11EEA415BE0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.8.0/23
Signature Algorithm: sha256WithRSAEncryption
75:71:54:17:ca:6d:b1:78:b2:6c:c7:d4:a6:3d:d5:dd:ce:52:
cc:21:db:39:4c:de:b6:fc:6c:d3:83:4d:26:01:dc:65:ec:5c:
69:6d:a3:72:9c:0b:33:39:a4:04:68:cb:31:d6:de:f0:44:ac:
89:08:ae:5d:89:00:73:ca:b0:7a:ba:35:41:72:85:f8:ae:52:
60:fa:2a:c0:49:f9:f3:07:a9:6f:e8:1f:18:9e:a8:9d:1d:ae:
23:f1:84:98:08:1f:76:df:79:b3:0a:b3:d4:ec:b2:e7:87:a1:
0e:1a:75:a0:23:46:21:9d:c0:a3:62:aa:78:26:68:e4:65:c2:
35:2a:3d:4c:46:95:b5:35:d4:ff:ee:16:a7:07:e0:40:00:0b:
48:0a:59:cc:8d:62:77:0b:1d:f4:6a:67:04:a5:fd:5d:4f:af:
ec:ac:d4:e9:70:14:ac:d0:34:ea:2d:4b:f5:d1:6c:9a:a8:54:
73:1b:a2:d9:17:29:7b:55:14:e6:40:9a:2e:d0:0f:3a:7c:e6:
f8:90:e2:3e:61:ce:1b:0e:02:21:c0:d7:04:8c:37:a1:ce:62:
1e:d8:3b:5c:8e:1e:c8:5f:79:26:c2:cf:3b:17:a4:65:bd:65:
94:5d:e0:2d:66:39:5f:55:1f:cf:f8:b7:2e:d1:d2:1f:84:7c:
4a:0a:b9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:48 2023 by rpki-client on console-fra.rpki-client.org