Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/B2DBD12E43AE11ECB9D6C054C4F9AE02.roa
File: B2DBD12E43AE11ECB9D6C054C4F9AE02.roa (raw, json)
Hash identifier: A3JnYAyjPzxzo4PlQs2uKUkhznm08+6mlmdvnujeroA=
Subject key identifier: BB:95:A8:95:09:28:0A:C8:D0:B1:FE:8D:D0:A8:60:28:9C:FD:9D:C1
Certificate issuer: /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Certificate serial: 04AE
Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/B2DBD12E43AE11ECB9D6C054C4F9AE02.roa
Signing time: Wed 14 Sep 2022 12:41:07 +0000
ROA not before: Wed 14 Sep 2022 12:41:07 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 134176
IP address blocks: 103.68.192.0/24 maxlen: 24
103.68.193.0/24 maxlen: 24
121.54.188.0/24 maxlen: 24
121.54.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1198 (0x4ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Validity
Not Before: Sep 14 12:41:07 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=6321cbe2-069a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:34:80:e5:4e:1e:e7:4c:4f:2e:e3:ed:4a:19:
10:04:e3:dc:68:ea:3e:0f:2b:c6:89:e6:ce:46:0b:
70:3f:12:1f:42:91:f9:c1:8d:71:6a:c5:3d:a1:60:
4a:eb:bb:eb:57:5a:6b:3c:ef:df:00:81:b2:e2:c1:
9d:08:9e:c5:12:5c:42:ca:43:42:8d:59:07:47:e0:
3a:4e:1e:bb:e6:ae:8d:2a:98:dd:ed:08:d8:9b:69:
4d:74:ff:70:42:ad:18:b2:be:2a:bd:cf:d4:76:a0:
5b:99:29:09:c0:d5:04:2f:05:2e:ca:10:ba:d6:ff:
10:1c:21:dd:7b:1a:e4:75:f2:5a:3f:d6:0a:08:c0:
fa:56:98:1f:80:8b:4b:3a:65:dd:33:ef:39:31:be:
dd:12:3d:6c:ba:ce:3d:fb:77:09:d6:3c:b7:df:03:
b5:ed:03:8f:90:af:77:48:f1:0b:0e:08:23:53:46:
16:d2:ff:2e:3e:33:e4:af:d8:65:b1:0b:40:a2:f7:
9e:f5:ca:61:82:d9:9f:9e:27:01:8f:0a:ea:4b:d3:
85:64:f6:45:4e:7a:71:64:6a:3f:a5:4e:9f:36:79:
ba:c5:49:a2:0e:4e:51:cf:05:f6:36:8f:eb:4b:dc:
15:c3:10:14:f5:c9:9d:6c:06:f3:58:20:9e:5b:5a:
cc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:95:A8:95:09:28:0A:C8:D0:B1:FE:8D:D0:A8:60:28:9C:FD:9D:C1
X509v3 Authority Key Identifier:
keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/B2DBD12E43AE11ECB9D6C054C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.192.0/23
121.54.188.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:75:87:05:6a:2e:63:0c:60:08:93:cd:2e:8a:1e:02:48:c5:
2c:1c:99:7b:95:3a:2f:50:f2:22:cc:ef:05:59:e8:69:40:27:
84:46:87:75:b6:a2:1f:4f:b9:8a:b2:13:1b:1c:8d:6e:51:41:
6f:e9:e6:f0:da:25:73:20:8a:23:06:9b:24:24:e4:ec:d5:c0:
7a:10:9f:97:50:17:74:ad:dd:e5:f8:e5:db:63:26:31:da:5c:
4f:09:96:7c:26:f8:a7:0a:7b:54:15:c6:ac:0c:43:2d:04:fd:
c2:f3:df:cd:de:dd:23:7a:93:e8:eb:1a:8e:a2:c2:52:e4:ce:
2f:7e:c1:d5:ee:42:4b:56:73:2e:55:a3:0d:2d:d3:02:3c:af:
e8:6e:30:b7:b6:23:88:d8:42:f9:ec:a8:43:1d:24:01:7f:69:
85:52:9a:dd:f3:44:84:ee:93:e6:72:05:6f:e6:18:1c:94:f9:
bf:76:c6:44:d8:0a:8e:21:b4:d9:94:3a:f8:14:4f:9c:28:10:
60:c4:1e:b8:37:fe:57:af:cd:0f:56:01:87:6b:2f:7b:1a:bb:
da:49:46:1b:41:7b:00:eb:10:a1:c2:f1:33:cb:b5:a4:30:fd:
90:cf:cc:0a:0d:ac:af:8a:46:cb:5a:98:ab:67:ed:fa:ee:93:
ce:fc:a0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:06 2023 by rpki-client on console-fra.rpki-client.org