Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/C7308154526811EEAF2FDE84C4F9AE02.roa
File: C7308154526811EEAF2FDE84C4F9AE02.roa (raw, json)
Hash identifier: BmWttvWSqLvyZXmSxqYAqBFau3f56p9VB43k9dYuQCQ=
Subject key identifier: DE:A0:D3:BD:B2:8C:D4:EA:15:E5:97:63:4A:C3:27:14:14:2E:89:67
Certificate issuer: /CN=A9186392/serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002
Certificate serial: 57
Authority key identifier: 6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/C7308154526811EEAF2FDE84C4F9AE02.roa
Signing time: Wed 13 Sep 2023 19:08:25 +0000
ROA not before: Wed 13 Sep 2023 19:08:25 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 64074
IP address blocks: 103.131.58.0/23 maxlen: 23
103.131.58.0/24 maxlen: 24
103.131.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186392/serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002
Validity
Not Before: Sep 13 19:08:25 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=650208a8-02c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:76:95:c3:63:4a:ed:57:f4:6c:87:83:f9:
f6:9f:0a:93:ba:68:f4:e5:af:ab:1c:30:ef:8f:6f:
f3:bd:73:17:7a:ac:f3:25:cf:44:9c:0d:d0:0a:92:
96:58:7a:de:ae:3b:80:28:85:21:54:99:de:11:13:
97:cd:4c:8b:2d:dc:ec:9c:d2:81:c4:bc:b0:b2:45:
df:4e:d0:38:e5:47:52:32:c8:c9:2e:58:01:aa:b5:
ec:2f:f1:13:8c:88:86:a8:22:88:28:a6:20:cd:de:
39:14:7d:f2:9f:63:db:b7:10:3e:02:44:24:6c:a4:
35:49:91:f7:bc:2e:3d:d8:08:5a:42:ac:6b:9c:ce:
fe:dc:15:72:d1:e0:ba:de:dd:ea:6f:f6:4e:d0:88:
74:c1:a0:8e:4e:3b:9e:73:94:5f:43:34:74:c6:fd:
d1:2e:9e:22:c7:2f:5b:40:42:3e:8a:0b:44:d3:ef:
fc:79:68:ac:8f:08:83:58:7e:c1:fe:3a:9a:ce:35:
96:cb:04:34:cb:b5:30:35:5c:1f:bd:34:69:64:d2:
8c:55:29:21:42:23:e6:8d:31:a8:b8:f2:68:2b:6f:
30:5f:24:a6:ae:d7:bf:67:87:29:78:6a:02:a2:a4:
d9:87:7e:62:13:ec:cd:59:1e:c4:8d:3d:a2:ac:3a:
ab:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A0:D3:BD:B2:8C:D4:EA:15:E5:97:63:4A:C3:27:14:14:2E:89:67
X509v3 Authority Key Identifier:
keyid:6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/C7308154526811EEAF2FDE84C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.58.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:4e:b2:29:3d:b6:0b:e2:6e:50:16:4f:ff:6d:b2:d1:2c:41:
c1:87:60:53:c2:45:c1:5d:92:21:c0:9e:15:2d:ac:0d:5b:d4:
55:a3:65:74:28:38:62:9c:8d:cc:90:3e:15:85:ed:18:dc:56:
03:8f:e3:df:e9:04:03:41:63:e5:bc:78:14:46:09:2f:8a:78:
8a:12:dc:a8:2d:0a:69:68:a2:2f:b3:90:66:94:16:ae:c5:e0:
cf:7e:ac:2b:bf:a6:9e:e6:60:16:ed:91:a3:6a:5d:c4:aa:6e:
78:c5:50:3e:db:4f:cb:fb:40:b7:ed:08:82:96:06:72:fc:88:
b5:5f:73:2f:a9:53:58:70:42:db:c6:78:a5:64:d2:2d:d9:5e:
7e:e8:76:28:46:c7:f2:56:64:00:c6:70:07:e0:76:e8:58:f6:
d0:7a:ed:0d:46:ca:e1:1a:13:0d:0d:d8:04:4e:53:37:7c:71:
3d:b8:c9:05:63:9b:af:7d:6f:3c:69:58:55:0e:39:7c:5b:24:
08:06:91:4f:8c:ad:3d:73:ff:da:2d:31:7e:4a:ab:53:eb:45:
b7:38:e4:96:03:a0:ce:5f:87:b9:0a:2a:28:0a:ab:a8:c1:4a:
9d:a5:a9:26:f6:82:9e:6d:3a:e5:ef:9f:6a:9e:39:26:16:f4:
0d:f6:4c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 12 19:37:21 2023 by rpki-client on console-ams.rpki-client.org