Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/FBEA88D46CCD11EE918CC50AC4F9AE02.roa
File: FBEA88D46CCD11EE918CC50AC4F9AE02.roa (raw, json)
Hash identifier: 4E1YEyogdWm8RdcaSMKjwFWFaT4d7X0GC5Kw/AZWxDA=
Subject key identifier: E2:2A:52:39:70:8E:94:8A:1D:7C:C5:58:20:8E:02:4A:C4:E3:BF:54
Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
Certificate serial: 0C20
Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/FBEA88D46CCD11EE918CC50AC4F9AE02.roa
Signing time: Tue 17 Oct 2023 09:19:30 +0000
ROA not before: Tue 17 Oct 2023 09:19:30 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 151080
IP address blocks: 103.109.57.0/24 maxlen: 24
103.109.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3104 (0xc20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
Validity
Not Before: Oct 17 09:19:30 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=652e51a2-7d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b8:09:62:05:b5:db:aa:7f:03:52:5d:af:9d:
a5:c9:62:f6:9e:62:93:d6:1e:e6:da:a3:b6:9d:29:
b1:9c:e1:67:93:0c:50:b8:20:88:de:6a:4a:07:6b:
2a:85:24:eb:2e:9d:f4:69:e0:2a:d2:87:24:60:cc:
30:8d:51:f6:13:43:54:b4:33:29:0b:18:8c:cd:c5:
e8:fe:f4:33:b0:f3:37:24:81:25:df:a7:94:e1:4f:
f7:a9:9d:1e:7a:63:30:66:c1:49:e9:92:0d:d5:1e:
c3:9e:38:20:2b:e3:e3:ef:ce:92:1b:8a:bb:0e:42:
24:ad:97:93:16:07:71:0c:fd:ad:15:a6:d9:2d:99:
2b:9c:3d:28:09:8d:e9:42:40:a0:b5:d8:10:0a:55:
25:f4:bc:85:2b:a4:27:d2:e5:62:11:99:49:59:ec:
1c:92:e5:23:72:47:65:09:37:e7:63:27:91:a0:de:
87:0d:a5:ba:f8:07:f4:71:3b:40:0d:74:e8:48:db:
a6:bc:c2:ab:23:41:82:63:41:59:b0:21:c4:a6:d0:
f4:4c:b8:98:49:dd:99:c2:61:4d:f0:cd:c1:56:b5:
e5:8e:a9:2d:09:b3:ca:4d:d8:66:8e:c7:bf:14:28:
31:89:9d:96:fd:3c:0d:61:ca:eb:c3:ea:da:aa:b7:
50:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2A:52:39:70:8E:94:8A:1D:7C:C5:58:20:8E:02:4A:C4:E3:BF:54
X509v3 Authority Key Identifier:
keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/FBEA88D46CCD11EE918CC50AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.109.57.0/24
103.109.59.0/24
Signature Algorithm: sha256WithRSAEncryption
85:54:93:06:71:ae:92:7c:9a:4b:88:11:41:5b:69:df:b3:73:
07:d4:b4:49:eb:64:06:0a:56:a3:27:0f:84:18:5c:75:79:cb:
8b:17:64:03:e0:d8:f5:96:1f:b0:20:93:ca:57:94:df:ea:50:
96:2e:ff:c3:01:5f:8f:96:d0:63:48:cd:4d:11:6b:c8:31:98:
b1:f5:ab:6d:52:e5:97:39:01:09:27:5e:ce:5a:af:a8:8f:8e:
41:12:03:50:3b:96:0f:2a:36:42:d0:69:a0:fb:de:85:8c:ab:
5c:d8:ec:04:51:4e:b8:7f:18:5e:3b:4d:5e:91:7e:79:53:22:
3f:b0:18:5f:4f:12:fa:91:d0:fd:f3:81:52:7e:f7:5f:83:0d:
47:24:0b:17:86:af:b7:8b:4e:12:a8:36:83:73:fa:18:c0:4e:
59:1e:20:aa:62:3c:d1:98:35:e1:97:bd:5a:f8:62:e0:2c:18:
eb:56:d8:53:5c:27:b1:a8:80:d9:87:a9:9e:1b:54:ef:57:d8:
f9:5b:bc:f9:9b:ac:b5:8b:b8:23:6b:e0:82:b9:69:a8:66:63:
ce:3a:5c:93:79:13:7c:10:6c:65:24:51:67:cb:d6:0d:16:52:
38:73:e3:12:ba:c4:5b:98:27:20:0a:6e:2d:6b:16:61:ab:19:
56:71:51:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 07:13:55 2023 by rpki-client on console-fra.rpki-client.org