Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/C1B60BD4CC8811EC85E73563C4F9AE02.roa
File: C1B60BD4CC8811EC85E73563C4F9AE02.roa (raw, json)
Hash identifier: Zlq/JygsxOFuBZx7wcdumzjjsXaLnY6LUY+2qJBrsRA=
Subject key identifier: B2:03:F3:77:41:7B:F3:25:C9:D7:2D:8E:AD:ED:3D:8E:94:62:4E:C5
Certificate issuer: /CN=A91A4179/serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17
Certificate serial: 0496
Authority key identifier: 16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/C1B60BD4CC8811EC85E73563C4F9AE02.roa
Signing time: Wed 09 Aug 2023 00:21:33 +0000
ROA not before: Wed 09 Aug 2023 00:21:33 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 136933
IP address blocks: 103.153.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1174 (0x496)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4179/serialNumber=1641D13FAD8A20AB0A94F625AEDA106BE2A66E17
Validity
Not Before: Aug 9 00:21:33 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64d2dc0c-44d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:05:07:32:48:d6:07:7b:b6:72:1c:d9:89:
cd:ad:eb:ac:a7:26:68:6e:d2:50:54:75:ee:aa:2b:
60:11:f2:24:09:a4:28:d1:0c:6e:c5:d0:a2:a1:50:
ab:44:f9:c2:e4:4a:13:a3:9d:68:f3:ec:c4:45:02:
bb:29:42:0f:f6:b9:44:6d:08:03:1a:eb:b7:2c:19:
41:0f:ad:d1:f2:fd:c7:3b:77:65:39:7b:0b:44:70:
e3:e6:0a:0c:24:54:36:7b:a7:f5:8e:bc:e0:16:44:
b9:12:b4:d4:1a:ac:d8:8b:5c:41:00:f2:14:46:ee:
29:3f:bf:ec:5f:2d:06:e9:3d:d1:51:40:da:07:1f:
6e:00:14:e8:b4:af:93:8c:7b:9b:9c:08:cd:94:74:
fe:1c:b2:75:aa:48:90:8d:71:3c:d0:56:17:c5:d5:
c7:dc:63:07:4e:88:80:4c:d1:69:ec:55:d7:57:f3:
1d:77:ce:45:30:12:33:d4:8f:7b:bb:a0:18:1f:2c:
3b:cb:45:fc:20:f5:53:60:bf:39:b5:ea:e2:3b:af:
13:3e:26:8e:64:2c:d9:c2:77:49:3f:31:7a:73:7a:
a3:2b:75:5d:a0:9c:1d:d8:f6:58:28:ca:22:cb:c5:
ae:56:bb:03:19:78:9d:f4:d0:80:1f:db:ea:10:53:
76:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:03:F3:77:41:7B:F3:25:C9:D7:2D:8E:AD:ED:3D:8E:94:62:4E:C5
X509v3 Authority Key Identifier:
keyid:16:41:D1:3F:AD:8A:20:AB:0A:94:F6:25:AE:DA:10:6B:E2:A6:6E:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/FkHRP62KIKsKlPYlrtoQa-Kmbhc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FkHRP62KIKsKlPYlrtoQa-Kmbhc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4179/43E4AF26B95111EBAA60CD3CC4F9AE02/C1B60BD4CC8811EC85E73563C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.4.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d2:1f:67:59:97:e3:3e:b3:3a:34:3c:d3:c1:df:db:b3:5c:
65:6a:a2:e9:78:96:93:a2:0d:a3:46:c7:ea:ec:6c:a4:61:7c:
45:a7:94:de:1e:d6:21:24:35:2e:0b:9e:3d:73:e2:32:1a:ea:
3b:22:01:72:92:02:8a:1d:c0:81:55:cb:51:e6:9f:79:c2:dc:
5e:8f:6d:70:b8:e8:01:14:2c:e2:bb:70:94:5e:d6:94:f9:85:
95:17:95:6b:a2:70:f5:df:47:81:81:b3:56:da:8d:15:35:00:
fc:e4:0f:98:85:7e:9d:23:d8:a5:2c:ea:8d:0a:e7:01:24:99:
2a:28:50:39:e0:e5:f4:3f:cd:91:16:b5:2c:84:97:18:c9:76:
fc:26:68:4a:1f:19:3d:f6:17:0b:c1:5a:61:16:e6:e2:f2:01:
53:77:e6:e6:1d:bc:b1:47:28:03:d5:73:ee:c4:aa:f3:9f:71:
d0:79:cc:3d:0c:33:34:a8:a4:2c:23:b8:0e:43:3d:a7:75:9b:
6f:5e:03:aa:67:1f:3f:28:7c:b7:5b:c4:54:9e:29:36:20:65:
e3:d1:12:28:d7:08:f9:5d:86:bf:fa:2b:f3:24:63:3f:f0:d1:
2c:f5:3d:50:f0:40:d2:98:c6:e9:89:ee:69:95:31:b4:a7:16:
7f:d2:7e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 07:26:31 2023 by rpki-client on console-fra.rpki-client.org