Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919853E/92F21C1CCF2611EB9D699C2AC4F9AE02/D3287854CF2A11EBA1562F33C4F9AE02.roa
File: D3287854CF2A11EBA1562F33C4F9AE02.roa (raw, json)
Hash identifier: kTOzgpN9Tt3xWuHKfpZEONPR4YElHPDpwNhLx7/sSDo=
Subject key identifier: 05:B7:E2:02:D5:6E:B7:FE:D7:17:46:77:4E:F2:9B:06:BD:1C:71:58
Certificate issuer: /CN=A919853E/serialNumber=980E15B61F789A5326581D04C2038192AA996B00
Certificate serial: 0459
Authority key identifier: 98:0E:15:B6:1F:78:9A:53:26:58:1D:04:C2:03:81:92:AA:99:6B:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mA4Vth94mlMmWB0EwgOBkqqZawA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919853E/92F21C1CCF2611EB9D699C2AC4F9AE02/D3287854CF2A11EBA1562F33C4F9AE02.roa
Signing time: Thu 31 Aug 2023 00:52:00 +0000
ROA not before: Thu 31 Aug 2023 00:52:00 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 138918
IP address blocks: 103.168.86.0/23 maxlen: 23
103.168.86.0/24 maxlen: 24
103.168.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1113 (0x459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919853E/serialNumber=980E15B61F789A5326581D04C2038192AA996B00
Validity
Not Before: Aug 31 00:52:00 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=64efe430-e981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:58:e2:ff:bb:af:66:70:d8:26:ff:65:ea:6c:
7f:33:8e:05:83:7f:48:81:f6:67:f2:87:21:63:79:
af:43:8d:cd:fb:42:d0:ff:cc:c9:3c:cf:6f:6a:85:
73:7c:ee:11:1f:9e:46:23:36:06:7e:cc:21:3d:3c:
4f:fd:77:61:8e:f3:8c:95:50:bf:5f:dc:dc:98:79:
9c:29:45:1b:ff:f7:2f:12:12:50:81:0a:8a:07:78:
47:ef:8c:00:ea:e7:97:d3:16:02:f5:5b:de:2b:3e:
c3:43:5e:71:83:8b:37:17:55:1f:6b:9a:81:c8:03:
e5:fc:39:40:a5:e9:4d:70:31:25:9a:a6:5a:66:a1:
d7:7c:0b:c0:0a:40:d3:88:e1:1e:02:0c:21:4e:a7:
c1:37:39:3f:a4:af:58:69:d1:3e:62:7c:c8:1d:e6:
a3:7f:da:3e:39:7f:b8:71:fe:5f:b0:63:33:56:85:
39:05:02:fa:20:0b:ba:e2:fc:b2:69:49:ff:ea:1e:
8c:61:e7:8f:b1:41:16:38:d8:3d:b4:b6:f3:41:ff:
bc:c1:4f:3a:fa:4e:32:76:e5:b4:f7:20:c4:db:dd:
bd:dd:fd:fe:9a:2e:3b:39:d3:c4:9c:5e:01:08:38:
29:a8:a5:8d:07:7d:cc:d3:ad:88:d0:08:99:52:48:
1d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B7:E2:02:D5:6E:B7:FE:D7:17:46:77:4E:F2:9B:06:BD:1C:71:58
X509v3 Authority Key Identifier:
keyid:98:0E:15:B6:1F:78:9A:53:26:58:1D:04:C2:03:81:92:AA:99:6B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919853E/92F21C1CCF2611EB9D699C2AC4F9AE02/mA4Vth94mlMmWB0EwgOBkqqZawA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mA4Vth94mlMmWB0EwgOBkqqZawA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919853E/92F21C1CCF2611EB9D699C2AC4F9AE02/D3287854CF2A11EBA1562F33C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.168.86.0/23
Signature Algorithm: sha256WithRSAEncryption
23:26:46:5f:01:46:a8:1d:a2:b0:97:90:4a:39:94:fd:a5:56:
ac:7a:7a:15:d0:9e:34:72:02:89:17:a2:9c:ca:70:35:df:c4:
ac:e5:b0:2e:22:98:d2:fa:3e:3f:67:15:d3:ce:95:ee:c4:c6:
cc:ac:e3:e2:b7:a7:f0:0f:6d:f0:ff:46:8f:ae:63:77:a7:2d:
bd:40:ce:b7:60:cf:3b:8f:55:6d:17:87:61:30:ed:d4:28:02:
b5:1a:fa:48:f5:60:c3:5a:88:be:c3:aa:30:ea:84:cd:ec:5c:
75:dd:28:9c:e3:fc:2e:ad:52:43:bc:35:5e:06:92:dc:15:42:
f7:31:c1:65:6e:b7:43:5f:15:be:d3:34:08:69:c3:8b:98:b9:
53:f8:b3:a2:3a:f9:ea:ad:7b:52:f0:66:73:4f:ac:e2:0a:ef:
6e:65:64:e3:70:a0:36:fe:85:22:2d:52:c6:50:f2:73:83:f5:
cd:bf:db:47:bb:35:55:b2:3e:9a:6b:a7:d4:a4:00:14:d9:be:
b5:de:96:23:6a:19:84:a0:99:82:1a:ba:3f:02:78:ea:43:0b:
87:4c:3e:b1:c3:da:78:92:10:c0:18:59:f3:62:83:f0:08:67:
75:0b:1f:97:3b:c4:2c:a0:79:c8:aa:fd:1b:87:3c:a3:ac:ad:
3c:5b:36:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 03:40:04 2023 by rpki-client on console-fra.rpki-client.org