Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/EA57C144181E11EEB310AA51C4F9AE02.roa
File: EA57C144181E11EEB310AA51C4F9AE02.roa (raw, json)
Hash identifier: eHbLJaiDxodZBDXJtapUgOsqgSkbSJyeUbfsdCxFzUE=
Subject key identifier: 6B:AB:CC:25:EA:DD:58:BA:08:24:77:8F:51:41:EF:6B:FE:FB:64:67
Certificate issuer: /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Certificate serial: 0114
Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/EA57C144181E11EEB310AA51C4F9AE02.roa
Signing time: Sat 01 Jul 2023 14:52:36 +0000
ROA not before: Sat 01 Jul 2023 14:52:36 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 204843
IP address blocks: 103.69.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276 (0x114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Validity
Not Before: Jul 1 14:52:36 2023 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=64a03db3-1c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a3:ff:6c:ee:bd:1c:e2:e6:62:24:16:0d:b4:
f7:a4:41:7d:e5:74:d2:a9:9d:9d:d6:46:1a:fc:0e:
0e:f4:65:f4:33:5e:8e:3f:57:3b:f7:db:6e:c3:cf:
d5:ea:5b:72:b5:a2:bb:13:aa:33:03:8d:de:7b:e5:
a1:ba:54:1e:1c:8a:19:4f:02:9a:a0:db:90:45:13:
61:0b:0a:a3:7b:56:21:96:8f:e9:c7:83:00:1c:09:
5a:a1:d3:11:b0:54:58:94:ed:f3:61:61:f3:a0:5d:
81:c7:e4:9d:56:0e:0b:3d:f9:47:6b:80:85:5f:e3:
56:e8:9e:0b:4b:1e:c8:61:95:f4:86:9b:4a:df:85:
63:23:1f:33:de:9f:66:e7:00:9a:08:a9:4b:00:ec:
73:86:a1:fc:11:8c:59:d4:13:a8:07:12:1c:c7:ce:
ca:11:94:ea:be:cb:a9:94:6a:c4:f3:c9:df:21:bf:
89:67:59:f4:fe:2d:42:57:f3:9a:e4:99:61:30:9c:
ff:14:05:f9:cc:34:c1:41:ec:da:ce:f1:82:45:cc:
19:0a:69:9b:57:c2:6c:be:74:0d:ae:04:e7:58:68:
f7:0d:28:6a:f8:64:5c:78:3f:d3:fb:75:3d:16:d6:
94:ef:3c:2e:e1:0d:03:25:96:40:41:5a:d2:82:c9:
da:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AB:CC:25:EA:DD:58:BA:08:24:77:8F:51:41:EF:6B:FE:FB:64:67
X509v3 Authority Key Identifier:
keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/EA57C144181E11EEB310AA51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.2.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:2f:32:93:83:46:32:90:d8:6e:61:01:f3:29:f6:11:1e:15:
67:fa:80:7d:4b:80:59:20:0e:8c:10:f6:89:b7:1e:6e:6e:3a:
3f:ff:5f:70:21:e4:94:71:6c:0f:cd:c0:b0:b1:23:75:98:9f:
69:30:c5:44:e9:d7:63:cf:5d:39:04:c0:12:d8:d0:97:ab:7e:
5a:11:96:a5:66:eb:eb:38:9a:47:cd:df:f4:63:0f:0b:a6:3c:
53:d8:e8:16:76:3e:28:f7:da:ed:a3:b5:cd:a3:b3:51:18:b9:
5c:b6:c7:90:e2:6a:d2:13:8b:e1:a2:ce:2c:f7:4a:ae:ac:00:
5d:e8:ac:6b:3b:eb:11:74:b8:56:70:dc:c4:10:a4:fe:72:86:
af:18:00:97:90:a7:eb:bb:5d:a0:4c:27:74:c6:6d:c7:7f:df:
90:39:b7:7b:89:b8:98:f1:b0:70:2a:ae:fc:45:ee:a3:30:13:
04:95:92:ab:90:9c:c4:0a:d3:b6:13:7a:b6:6e:a7:74:ac:cf:
bf:bc:90:2d:cd:41:a5:cf:27:03:78:21:4e:e2:a7:07:72:28:
54:7d:11:0d:ec:0e:68:5c:70:d7:f2:81:fc:1a:cf:5e:6f:c6:
d7:e8:fa:e5:a8:6e:9d:cd:0f:4e:95:3c:62:88:25:3b:fb:07:
a7:a9:f7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 11:54:05 2023 by rpki-client on console-ams.rpki-client.org