Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/2DFB60980E8A11EE92309575C4F9AE02.roa
File: 2DFB60980E8A11EE92309575C4F9AE02.roa (raw, json)
Hash identifier: WlkxDmZ7AsKsFaXaLbFAbNrpAbUoNWXsHcsLrYTyplQ=
Subject key identifier: 83:C3:5F:32:06:65:95:B0:52:A3:0F:73:A3:67:AC:AA:B1:5B:1B:C9
Certificate issuer: /CN=A919AC27/serialNumber=F62FCB3A08DE55C897B1EA080FF1CC9D8B9BD8D5
Certificate serial: 0177
Authority key identifier: F6:2F:CB:3A:08:DE:55:C8:97:B1:EA:08:0F:F1:CC:9D:8B:9B:D8:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i_LOgjeVciXseoID_HMnYub2NU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/2DFB60980E8A11EE92309575C4F9AE02.roa
Signing time: Mon 19 Jun 2023 10:45:27 +0000
ROA not before: Mon 19 Jun 2023 10:45:27 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 134721
IP address blocks: 103.181.228.0/23 maxlen: 23
103.181.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AC27/serialNumber=F62FCB3A08DE55C897B1EA080FF1CC9D8B9BD8D5
Validity
Not Before: Jun 19 10:45:27 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=649031c7-20dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a0:7f:80:c6:25:ab:36:1e:d2:d7:1c:67:00:
f3:fc:8a:b7:28:60:ac:5a:58:4b:ad:a6:bb:02:6f:
5b:98:bf:0e:49:13:de:0f:b9:74:49:e7:67:7d:79:
56:30:e6:c0:da:4d:fb:a6:89:a2:ca:4d:42:e7:e8:
8a:82:3d:64:4c:bc:13:5a:f2:a0:84:3f:f3:6b:f5:
89:bd:4e:84:9a:3a:d6:83:11:7b:ec:59:72:6a:8f:
14:29:ee:f5:62:cb:9c:9d:39:68:a6:46:b8:83:90:
a6:79:e8:54:b9:1e:18:06:12:68:81:09:c4:0b:52:
6b:64:72:4f:30:63:04:3f:4c:0a:8a:1a:3f:2d:5c:
e8:a8:78:4d:c2:ba:00:e1:4f:4b:dc:46:cd:33:86:
ea:7b:fb:fa:ea:2b:92:df:0f:54:72:92:66:9a:d4:
74:c1:4e:b0:4b:1e:8e:99:b8:97:6f:ed:9f:4b:27:
ee:46:f6:ca:04:e6:a4:1e:0b:f1:bc:20:8e:b7:bf:
33:8b:20:cb:48:15:87:b9:09:91:2e:46:2c:82:c3:
3d:7e:c9:9f:f0:31:b5:81:22:67:c9:ba:1f:18:9a:
a6:4e:da:73:67:34:17:dc:dd:f6:f0:b3:f2:8b:d0:
17:60:15:5c:23:3c:44:08:c5:cb:66:ab:fc:9a:bf:
77:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C3:5F:32:06:65:95:B0:52:A3:0F:73:A3:67:AC:AA:B1:5B:1B:C9
X509v3 Authority Key Identifier:
keyid:F6:2F:CB:3A:08:DE:55:C8:97:B1:EA:08:0F:F1:CC:9D:8B:9B:D8:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i_LOgjeVciXseoID_HMnYub2NU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/2DFB60980E8A11EE92309575C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.228.0/23
Signature Algorithm: sha256WithRSAEncryption
65:fe:d4:ae:38:bd:2b:d4:36:a4:21:b3:16:11:38:46:bd:73:
d3:29:c5:8b:0f:aa:f5:0d:1c:90:fe:2b:13:4c:23:c4:1f:6d:
f1:c4:bf:c9:76:54:64:0c:75:db:17:0e:32:2b:12:be:03:5d:
81:e2:3d:f0:cc:b2:56:d2:f9:f8:6d:50:d6:9a:0e:fd:26:19:
fd:ed:26:22:9c:22:f8:3d:a3:22:9f:d9:f8:da:a2:65:22:6f:
cb:4a:30:4c:4f:b2:89:e6:cc:18:0c:96:a9:ae:01:51:3b:26:
38:8b:10:69:85:66:76:49:c2:a1:59:dd:43:5b:37:da:70:7f:
1b:ca:5e:b8:34:b8:ab:c7:3e:2f:ca:57:e5:b1:19:33:b9:5b:
0b:e8:38:32:b4:78:6b:17:c9:70:f5:47:40:5b:43:32:0f:70:
5d:2a:06:26:03:b4:6e:90:f6:dd:d4:36:10:8e:6f:9e:59:4e:
00:99:8c:bd:5f:ea:0d:a6:98:4b:a1:25:ee:8b:ec:16:17:4e:
d8:1b:ca:4f:57:5b:4d:6b:2c:03:23:7e:7e:5a:12:10:a9:36:
9f:c7:a5:a5:ee:38:95:68:5a:70:c4:06:eb:bd:90:f2:b5:b8:
60:4e:37:15:8a:3d:57:33:ba:ac:cf:c9:3e:6e:5d:45:07:10:
b4:a7:e9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:57 2023 by rpki-client on console-ams.rpki-client.org