Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/9DBC8944A5C011ED8079B030C4F9AE02.roa
File: 9DBC8944A5C011ED8079B030C4F9AE02.roa (raw, json)
Hash identifier: 4JoIQSeRyKGGiexBHZCXXDL/LcQk4c7ekfSGwaJpz98=
Subject key identifier: 00:45:CA:80:1C:88:86:B8:F3:78:84:02:A0:7D:FE:99:A5:C8:D0:86
Certificate issuer: /CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Certificate serial: 05F6
Authority key identifier: 7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/9DBC8944A5C011ED8079B030C4F9AE02.roa
Signing time: Mon 06 Feb 2023 01:50:22 +0000
ROA not before: Mon 06 Feb 2023 01:50:22 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 51765
IP address blocks: 103.238.129.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1526 (0x5f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Validity
Not Before: Feb 6 01:50:22 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=63e05cde-cca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:ea:af:ee:9e:72:5a:e3:2d:bc:ab:ef:0d:
7b:4e:49:4d:54:b4:c5:c7:fb:37:f3:65:09:5c:2d:
8d:34:06:89:c8:36:24:84:01:0b:dc:74:34:1b:f1:
7c:53:91:f7:6c:55:74:c3:27:8a:d9:06:67:8e:42:
0f:ee:23:b0:07:3a:f3:42:88:71:23:72:c0:cd:53:
02:87:dd:7b:cf:33:8e:2b:7a:81:5e:7d:05:2e:62:
d5:8a:6a:1d:4e:d9:f9:f3:d5:52:42:5b:ad:c7:d1:
4d:76:f2:88:e4:ad:34:9b:21:2c:b3:26:13:95:a1:
f5:f2:4f:41:5a:ee:bb:40:3c:5b:fd:81:c0:e4:ad:
d7:53:31:eb:79:7c:69:45:78:97:29:d5:11:db:26:
ad:25:8d:bb:cd:9c:87:30:3b:b3:03:aa:bb:7a:ca:
43:77:2e:57:98:10:69:b0:d1:e0:1d:22:d1:d7:f9:
39:f5:94:9c:84:47:a0:13:a3:b2:16:41:c2:0d:6c:
e1:3d:c1:2f:ba:ad:90:6b:ef:43:e5:dd:bf:72:f5:
b3:1c:89:95:03:5e:1e:ea:80:01:d5:0c:0a:8c:13:
d0:55:75:6a:8b:6b:25:4b:41:43:b8:7b:f2:1c:4c:
b6:31:8c:76:b1:12:8e:5b:a6:2d:af:cc:ca:86:40:
6e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:45:CA:80:1C:88:86:B8:F3:78:84:02:A0:7D:FE:99:A5:C8:D0:86
X509v3 Authority Key Identifier:
keyid:7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/9DBC8944A5C011ED8079B030C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.238.129.0/24
Signature Algorithm: sha256WithRSAEncryption
17:26:f3:7d:7b:a8:65:fd:18:3a:63:00:ea:13:97:e9:a2:b8:
69:80:55:e1:f7:c4:2b:d2:64:30:21:03:41:e5:35:7a:fa:d5:
b8:02:b5:6c:ac:e4:ea:eb:2e:b3:dd:f2:3d:7a:e7:b7:3c:fd:
29:3f:b5:4c:0c:ef:cc:5e:df:17:4b:6b:96:d9:83:e7:12:bb:
9a:ef:4f:93:cd:7c:a0:e2:99:e3:e7:34:ff:8f:48:3a:c9:97:
f2:ef:80:25:18:eb:c0:39:b5:3f:29:52:51:e1:87:bc:41:61:
36:ae:5d:85:11:c4:13:5f:1d:10:f0:b7:e6:c1:2f:0d:88:5a:
a4:c5:04:32:36:d2:3f:99:04:05:c2:45:db:ce:92:4f:a3:15:
de:05:4b:3c:01:06:af:aa:73:df:14:f7:63:e5:7f:bd:29:96:
21:79:fe:70:d7:a3:41:5d:cf:db:23:18:86:2b:1a:56:b3:8e:
47:f4:11:17:1b:e2:ea:bd:45:56:e9:00:41:8d:b8:69:7f:90:
d5:d3:7c:f3:c8:44:3f:46:13:20:98:65:87:a6:29:1f:66:1b:
27:13:f1:89:99:bd:0a:36:03:12:ad:f7:60:74:c6:a7:82:6c:
ad:aa:e4:b3:b3:d8:4c:da:86:91:c5:81:a4:2f:5d:99:e4:f7:
bb:ac:73:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:00 2023 by rpki-client on console-ams.rpki-client.org