Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/E13551C6A63B11ED9306165AC4F9AE02.roa
File: E13551C6A63B11ED9306165AC4F9AE02.roa (raw, json)
Hash identifier: fG2VI0gLlNL9j4RsRZce4msAVGPft0RIOeqnmDqleus=
Subject key identifier: E5:2C:DF:D6:E1:82:5D:AB:93:D2:3C:03:17:DE:BF:55:E9:EF:EC:F6
Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial: 0463
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/E13551C6A63B11ED9306165AC4F9AE02.roa
Signing time: Wed 03 May 2023 03:03:00 +0000
ROA not before: Wed 03 May 2023 03:03:00 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 134428
IP address blocks: 103.97.200.0/24 maxlen: 24
103.97.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 05:13:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1123 (0x463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Validity
Not Before: May 3 03:03:00 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6451cee3-dbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:78:12:d8:3d:fc:0e:71:13:7c:ab:d9:92:91:
ce:2a:ad:d0:3d:e6:ec:63:b0:c6:d2:34:99:42:3d:
b5:d9:16:bf:81:bc:de:7c:e5:62:d0:b2:82:5e:e4:
ce:0e:de:63:98:0c:e4:0f:cb:a2:cd:21:78:ba:72:
82:52:21:85:22:01:78:9d:22:eb:7c:51:ce:20:a3:
d8:70:c4:5e:66:b2:0f:34:74:de:d1:af:fd:f5:2e:
b5:99:30:76:cc:e4:2c:e3:35:a0:0a:f6:14:42:12:
8d:56:18:fc:08:07:e3:3f:8b:42:a4:ee:e9:6e:24:
78:3c:32:81:8b:94:9f:57:0b:c9:b3:87:f6:51:7c:
7c:a4:32:49:65:ca:1a:4d:65:21:a1:ef:d8:23:6c:
e6:bb:b6:20:4f:a6:66:a7:2e:91:b9:59:db:63:b9:
8b:27:ea:28:7e:1d:a7:dc:58:bb:b2:3e:8b:1e:60:
6b:3f:7c:e9:94:ca:34:bb:2b:2a:77:de:20:7a:1a:
5c:88:bf:2d:e7:c3:b3:b8:8e:a9:e3:34:57:45:7e:
94:20:e1:ec:6d:19:7b:1f:48:ac:23:fe:a4:a7:66:
4b:3d:a7:4f:07:d2:f4:c5:3d:84:8b:48:30:95:2c:
8f:4a:6c:64:2e:99:dd:d6:39:6b:62:fa:5f:bf:de:
7f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2C:DF:D6:E1:82:5D:AB:93:D2:3C:03:17:DE:BF:55:E9:EF:EC:F6
X509v3 Authority Key Identifier:
keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/E13551C6A63B11ED9306165AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.200.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:8f:51:33:82:54:f8:5d:b6:58:06:63:4b:0b:0c:ac:2c:ea:
ca:f1:59:5b:3f:3c:af:cf:95:b5:61:71:8b:54:3d:d6:2d:11:
1e:a6:2f:42:1e:a4:a0:77:87:44:5f:f4:08:a2:ad:78:56:2f:
d5:83:1c:98:a9:71:69:45:46:e4:94:e0:23:db:52:1d:9a:94:
fc:e9:13:4f:ab:95:d0:ab:eb:42:b9:f8:90:8c:87:58:e8:d5:
fd:9e:1c:d3:45:c2:04:96:74:01:01:3f:3b:ae:ea:cd:e3:6a:
a3:31:5a:96:ad:87:31:a5:f3:99:5a:eb:07:b5:0a:29:ea:c9:
1d:1a:dc:44:13:79:45:27:37:51:92:a9:8d:8d:7f:89:87:09:
db:98:47:03:27:c3:d4:fc:06:32:da:ac:a4:d5:4b:f7:78:31:
4b:ec:60:51:31:29:d7:bb:09:4f:f9:80:d1:a3:38:ee:64:0a:
98:c1:94:f5:80:8a:42:7e:b7:71:1a:b0:1b:89:00:18:c4:a3:
15:a3:fb:89:08:74:65:87:81:e0:97:6f:2f:a2:4a:22:50:7a:
e2:c8:23:6e:19:37:9f:b2:7d:30:37:ec:cd:6d:bc:5f:61:5e:
91:06:e0:2a:24:1e:d4:8d:a4:56:5a:d9:d0:0c:0d:f8:89:e3:
74:32:26:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 06:01:11 2024 by rpki-client on console-ams.rpki-client.org