Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/F13D4570313611EE8DCF315BC4F9AE02.roa
File: F13D4570313611EE8DCF315BC4F9AE02.roa (raw, json)
Hash identifier: vBbpPtEIsNOB95HspZ9eVljHCNLUnQbyYCJpWgcELKI=
Subject key identifier: A2:41:96:9D:C5:91:C8:FB:70:34:CA:16:C4:E5:74:09:6D:FF:C6:D2
Certificate issuer: /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Certificate serial: 08D1
Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/F13D4570313611EE8DCF315BC4F9AE02.roa
Signing time: Thu 03 Aug 2023 10:11:18 +0000
ROA not before: Thu 03 Aug 2023 10:11:18 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 149456
IP address blocks: 103.203.46.0/24 maxlen: 24
103.203.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2257 (0x8d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD
Validity
Not Before: Aug 3 10:11:18 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64cb7d46-aeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c2:07:45:72:15:31:7e:7d:4e:90:6e:ec:f6:
f2:fa:75:ea:ea:f5:36:d2:1c:3e:5b:ca:6a:62:b4:
38:fb:3c:92:1f:40:97:68:d3:7b:05:1f:c1:7d:ad:
43:85:08:cc:9a:ac:90:51:c1:22:1d:af:e3:6d:9b:
7b:bc:86:87:4f:36:d4:dc:c0:e9:d5:28:2d:f1:5f:
58:84:85:be:9b:fc:86:33:ee:f4:23:55:76:a9:a4:
36:26:d2:60:89:77:2e:cf:c7:86:55:aa:36:ca:06:
74:6d:db:c3:80:28:09:b9:ea:20:84:75:f3:9e:b8:
c5:57:04:10:ea:83:3d:16:67:d5:59:14:bb:5a:d6:
ec:f3:a2:e1:eb:85:f7:d6:81:db:bb:86:bd:5d:f6:
63:d4:ae:c7:1d:ec:39:b8:04:da:2c:c4:ee:5d:d0:
8f:fc:01:b1:5c:c1:a9:ee:be:9b:f4:fd:65:29:dd:
8b:aa:c8:85:57:0f:6c:9b:ac:66:02:95:ce:b8:42:
30:9a:e5:f2:e3:fd:54:34:fa:66:3a:13:0b:e1:4b:
a6:15:8c:ad:22:30:7f:95:80:19:d4:b5:2d:92:84:
5b:40:5d:34:fd:1a:a4:ac:9f:1d:98:3c:d7:aa:37:
15:2d:1a:fd:86:a1:d1:f1:4e:95:e6:8e:b1:df:51:
70:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:41:96:9D:C5:91:C8:FB:70:34:CA:16:C4:E5:74:09:6D:FF:C6:D2
X509v3 Authority Key Identifier:
keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/F13D4570313611EE8DCF315BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.203.46.0/23
Signature Algorithm: sha256WithRSAEncryption
03:bb:7f:51:95:85:55:c2:83:a5:18:a8:dd:ba:75:b9:0e:8e:
88:6f:1a:d6:fd:96:ac:c3:4c:1f:88:b7:96:e3:67:eb:3b:8b:
e8:a9:f0:01:2f:7f:92:37:68:18:15:af:5c:f4:6e:6f:21:9b:
6d:27:b3:d9:c1:a6:a2:bb:6e:36:0c:64:35:24:f5:00:9a:bf:
2b:b8:75:b5:55:4e:8f:c1:94:dd:dd:cd:71:cd:b3:c6:29:35:
cf:ec:44:5b:f3:37:40:3b:40:0c:8e:b8:73:8d:71:bb:53:fd:
bf:07:79:f3:ea:19:ee:fe:6c:a5:51:f4:0b:4d:40:f4:fa:12:
7a:ac:d0:5d:48:fd:51:92:8e:b1:b0:1c:27:79:ab:0b:e2:71:
cf:8a:53:77:99:66:7e:5a:ec:9f:00:02:1f:8a:0f:35:cc:9d:
e5:e5:2b:47:f1:f5:5e:cb:c3:33:f1:45:33:1f:35:2a:01:4c:
41:84:49:df:df:f4:58:85:24:eb:18:15:aa:9e:fa:5a:7f:8a:
4d:72:06:1e:0d:aa:06:24:06:3a:72:62:1a:bf:de:d0:03:37:
a1:af:4e:42:1c:6d:93:49:6c:94:e8:75:a0:35:16:a7:ca:27:
60:59:95:32:ac:11:d8:1a:98:d5:93:13:9f:25:b1:b2:34:c7:
cf:00:43:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 3 13:24:12 2023 by rpki-client on console-ams.rpki-client.org