Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/0050B284F78D11ECB5C08063C4F9AE02.roa
File: 0050B284F78D11ECB5C08063C4F9AE02.roa (raw, json)
Hash identifier: oHQJOmVjifFuMFijMjxSfYyoUZxjOyq+b3dICpjCiME=
Subject key identifier: 51:A9:5F:E7:5E:4D:38:B1:74:44:49:2E:D0:B1:72:33:1F:EA:31:A1
Certificate issuer: /CN=A9197202/serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B
Certificate serial: 09
Authority key identifier: E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/0050B284F78D11ECB5C08063C4F9AE02.roa
Signing time: Wed 29 Jun 2022 09:22:31 +0000
ROA not before: Wed 29 Jun 2022 09:22:31 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 142405
IP address blocks: 103.189.68.0/23 maxlen: 23
103.189.69.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197202/serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B
Validity
Not Before: Jun 29 09:22:31 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62bc19d7-a914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4a:62:51:6a:58:ef:07:b7:9c:78:26:46:26:
c2:a9:83:d6:52:f3:0f:61:c1:68:5a:c8:ad:f0:d1:
2a:bc:fd:e2:ea:a4:3e:8b:ba:2f:01:4c:c0:fe:93:
93:10:31:fd:88:99:bb:23:b6:14:01:76:c4:a0:e6:
9d:73:1d:69:e5:a6:b9:0f:fa:90:19:5e:88:bb:34:
fd:dc:18:61:0c:d6:22:24:a1:84:c8:cd:14:dd:d6:
38:f0:83:fb:ee:e9:3f:0a:ef:68:74:0f:f7:f5:6c:
55:99:0a:d2:52:28:16:55:7d:1c:de:dc:25:06:94:
4d:da:c5:c6:8a:18:89:b9:2c:6f:50:bc:25:a9:85:
10:1d:08:1b:6d:71:bb:cb:b3:de:7b:ef:66:be:e2:
c6:82:42:ab:01:c1:31:87:71:d5:aa:63:9d:e9:92:
b3:8a:6c:0a:2b:00:1e:bc:52:1e:ca:aa:c2:cb:42:
00:e7:b3:0e:bb:51:98:e5:b4:02:34:57:14:25:36:
68:3b:c8:ae:e8:f5:e2:d8:76:d2:39:c0:f8:23:98:
b4:98:bc:eb:13:dc:e0:8d:c8:a7:31:c1:f0:59:b7:
16:d0:bf:dd:e2:db:0e:37:a4:e3:da:90:9b:74:a4:
a6:88:e4:74:df:cf:53:8e:a3:b7:df:64:83:8f:bd:
d5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A9:5F:E7:5E:4D:38:B1:74:44:49:2E:D0:B1:72:33:1F:EA:31:A1
X509v3 Authority Key Identifier:
keyid:E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/0050B284F78D11ECB5C08063C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.68.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:50:20:ff:d6:8f:05:b5:11:ff:2c:e5:c0:62:32:aa:d6:9c:
b2:e4:ac:0a:d8:b5:33:a7:6b:3c:a7:ad:c4:30:64:70:f7:09:
8a:02:66:aa:01:7e:9e:f1:53:8f:a7:34:5e:de:90:c8:8e:af:
00:77:a0:c5:73:46:22:fc:17:d8:aa:60:73:95:fb:ac:18:2c:
e0:75:7f:27:93:ef:06:bb:55:c0:3d:b9:31:81:40:16:01:33:
f5:29:cb:06:f2:15:aa:c4:9b:12:c7:37:ea:5d:62:7b:84:00:
5c:13:fb:92:c8:63:50:77:c1:c8:0e:a5:ed:7d:4f:57:90:d0:
f3:4a:dc:7b:67:75:d9:fc:06:26:f4:05:95:db:8b:4d:98:a4:
bf:5e:b8:d7:a2:00:7b:6e:95:c8:75:25:f4:28:09:1a:5c:fc:
0f:01:f7:76:6b:39:1f:75:12:0d:41:77:e1:d3:9f:8b:b5:4d:
3f:cd:61:b1:52:de:79:b1:0d:91:07:b4:93:47:f1:3e:93:c2:
f7:14:b8:f6:37:23:c9:ad:6e:a4:5b:18:8a:4f:db:7d:f4:66:
92:6e:4f:35:e6:76:4f:25:96:45:a2:42:2f:e6:4e:88:14:41:
8a:20:bb:02:89:7a:68:f1:5f:dc:07:de:af:e7:c7:0a:8d:f7:
65:84:ac:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:00 2023 by rpki-client on console-fra.rpki-client.org