Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/FC34E95C18CC11EDA936C92AC4F9AE02.roa
File: FC34E95C18CC11EDA936C92AC4F9AE02.roa (raw, json)
Hash identifier: MWhp51DDNp/I1VmkNLPXzA5W+nyY8ptD1M61hdmM84M=
Subject key identifier: 8E:1B:BF:63:A6:DD:62:F9:8C:87:30:E2:2F:C3:6A:15:07:0E:A4:D3
Certificate issuer: /CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E
Certificate serial: 1C
Authority key identifier: C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/FC34E95C18CC11EDA936C92AC4F9AE02.roa
Signing time: Wed 10 Aug 2022 16:53:41 +0000
ROA not before: Wed 10 Aug 2022 16:53:41 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 9541
IP address blocks: 103.191.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E
Validity
Not Before: Aug 10 16:53:41 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62f3e294-237c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:d2:c1:a8:6a:61:d8:01:9e:5d:db:e4:87:
a0:41:05:5a:fe:55:97:5f:9b:99:c9:70:a4:45:72:
93:04:3f:ee:2e:54:c7:3e:4a:a0:4b:4a:f4:5e:f7:
f6:28:fa:67:49:ea:7f:6a:73:94:c2:31:27:25:af:
2e:d0:f8:08:80:e0:e5:07:90:96:28:4a:fe:9a:91:
f7:8f:73:b6:be:3a:2d:8d:ac:e2:bb:37:f4:82:cb:
00:de:55:59:ef:33:70:69:48:7f:d9:dc:c9:e2:95:
e8:b2:fa:15:fb:88:c3:97:ae:b1:ed:40:84:b1:18:
09:0f:cb:f5:eb:8f:f0:d3:c1:c5:de:1b:49:e0:e8:
e7:ab:b8:89:4e:49:17:65:c7:7a:e0:63:e3:fb:a7:
43:5f:59:77:c2:09:ee:8f:6c:db:a7:90:75:e2:d4:
48:bd:73:50:c5:1f:50:6a:19:24:46:b0:d4:33:d0:
b2:72:5b:f3:1b:c8:72:88:94:43:07:5d:12:25:24:
ce:fb:69:3e:3b:01:3c:2e:61:61:8b:4a:db:be:fd:
22:d0:10:09:c9:71:bb:08:f9:f9:60:ff:a6:81:56:
34:39:23:c3:7a:c3:ef:43:d0:e2:13:df:2e:47:2c:
b5:bb:ff:8b:72:c7:38:dc:33:1a:b3:67:18:da:94:
ec:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1B:BF:63:A6:DD:62:F9:8C:87:30:E2:2F:C3:6A:15:07:0E:A4:D3
X509v3 Authority Key Identifier:
keyid:C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/FC34E95C18CC11EDA936C92AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.191.18.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:4d:20:17:df:4e:dc:cd:d2:d9:4e:0a:89:8a:24:9b:7d:59:
fd:0f:29:c4:67:36:97:c4:29:6b:9b:61:1d:9f:b0:e4:12:6c:
b7:67:45:88:45:f9:1f:c4:13:04:74:12:4a:da:4e:7c:cb:24:
17:87:fa:a0:ff:48:3d:ad:bd:a9:ae:19:f4:15:e3:58:3f:d5:
57:64:ca:54:49:7c:d7:5d:15:f4:7d:24:84:75:7d:2d:da:58:
68:4a:48:e5:2d:6e:4b:29:58:9b:1a:8e:15:d1:7b:c8:c9:4c:
82:21:e4:12:71:44:5e:24:fd:b5:75:3c:33:46:db:a8:6a:46:
2b:a9:bd:32:53:39:8f:df:26:d7:ac:e2:61:8b:2f:da:87:67:
7e:e1:46:4d:eb:70:dc:45:63:1c:23:a5:1f:08:8f:67:8e:6b:
de:32:31:69:3b:57:fc:15:db:76:81:7d:7b:fb:18:bd:5f:90:
89:61:44:2d:b2:62:5b:0b:25:72:d1:be:a6:00:af:61:ef:56:
d7:a4:47:b0:88:8f:ef:e5:4d:8f:9b:26:57:69:ed:3f:5a:5a:
5c:b1:f0:b9:e2:60:c2:78:d9:4c:0e:db:f3:9f:d6:82:00:e8:
63:36:f5:d0:7d:79:a3:1f:54:60:1c:19:40:03:11:4e:10:97:
7e:e7:45:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:46 2023 by rpki-client on console-ams.rpki-client.org