Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/F34294322BD911EDADF00A6CC4F9AE02.roa
File: F34294322BD911EDADF00A6CC4F9AE02.roa (raw, json)
Hash identifier: SbKfCWQt76n39SpD8nBNaovNiQuAgUzveeP90oPxYyU=
Subject key identifier: 67:D5:14:D1:E0:68:99:D4:A6:C5:87:B6:F5:C9:6C:6A:8C:62:DA:79
Certificate issuer: /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Certificate serial: 47
Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/F34294322BD911EDADF00A6CC4F9AE02.roa
Signing time: Sat 03 Sep 2022 22:44:21 +0000
ROA not before: Sat 03 Sep 2022 22:44:21 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 400384
IP address blocks: 103.69.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Validity
Not Before: Sep 3 22:44:21 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=6313d8c5-bf33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:21:90:fe:3b:5e:9a:04:8f:8f:d1:c5:0f:
e3:f2:86:8e:cf:b6:85:00:de:07:db:8b:f2:52:99:
2e:be:98:4e:65:2e:58:1d:f7:8e:4a:f9:58:92:c1:
1a:3b:06:48:3b:06:16:11:83:a1:0e:f4:ba:f8:7b:
74:2b:e5:14:4b:44:75:84:6e:0c:e9:22:46:bf:56:
33:d4:03:fc:4f:fd:93:09:23:93:23:11:e7:53:f0:
e5:05:a9:cd:aa:dc:6c:74:48:c8:4b:b4:01:a2:32:
6c:44:42:75:d7:b0:be:5b:d5:05:61:60:84:c8:49:
ac:d9:27:b6:bd:f9:36:37:d3:8a:a2:27:2a:99:0b:
1d:de:7f:e5:d8:23:34:b9:c2:41:fc:fc:1a:bc:c0:
49:81:76:1d:69:8f:b4:f2:a8:89:6a:cb:25:3c:6b:
28:d2:e4:51:06:d5:f4:05:38:46:97:ab:3c:9d:ec:
6c:97:70:95:81:ed:63:b3:4e:ea:b3:78:43:43:8d:
87:ba:1d:59:e1:24:f7:d4:d3:7b:8a:f2:4a:eb:4a:
42:1b:fb:07:3a:b1:47:64:b0:00:6f:95:9d:19:72:
92:88:19:03:1b:90:13:f1:c0:95:08:ee:b8:16:be:
83:f5:07:07:7b:d1:3d:23:b5:4b:a9:58:ef:69:1f:
34:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D5:14:D1:E0:68:99:D4:A6:C5:87:B6:F5:C9:6C:6A:8C:62:DA:79
X509v3 Authority Key Identifier:
keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/F34294322BD911EDADF00A6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.3.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:1d:25:91:bc:95:5f:cb:79:36:8a:f1:82:8a:da:e2:d8:e5:
f3:ef:8e:4a:a8:59:12:a6:de:1d:11:79:bc:27:3d:15:7e:3b:
82:50:e1:c1:59:dc:8f:5a:c4:4f:57:b3:cf:79:ba:1f:32:ca:
77:42:95:a5:ef:1c:4c:95:ea:2d:74:25:5c:f3:b4:7e:cf:34:
7e:50:75:2e:f8:28:07:dd:c4:18:cc:00:85:1d:98:72:e8:48:
8a:37:2b:a2:7f:cd:79:77:b6:25:d2:58:e6:7c:29:d5:91:2f:
ef:29:b7:99:7f:70:33:9d:fc:37:81:a1:85:f1:8e:b0:9e:bb:
0d:b5:16:e6:58:2b:3a:47:3b:41:a1:5a:da:31:25:e9:15:78:
7f:65:a3:6e:e1:cb:97:d3:f4:74:e7:a2:c7:fa:a7:7d:9d:77:
5a:22:f6:ef:57:1d:1a:4b:0d:dd:b0:c0:82:15:2b:0c:e7:9a:
d6:4b:19:95:ab:1a:4e:6b:9a:c4:26:2a:e6:50:a0:cc:d6:59:
5f:40:a1:4c:8c:97:8f:60:cd:06:b2:af:90:f2:c7:26:e3:49:
4f:b3:00:f5:bd:b4:00:b5:2c:0c:7b:02:46:24:ec:67:16:3d:
89:7c:d0:f4:d4:b0:aa:53:25:2f:18:9f:a3:a3:b9:ca:21:03:
91:d5:b6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:49 2023 by rpki-client on console-fra.rpki-client.org