Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/C4E52774DCA311ECACAEC50BC4F9AE02.roa
File: C4E52774DCA311ECACAEC50BC4F9AE02.roa (raw, json)
Hash identifier: 52YMTXgJE2zoLifuOb2dTCW7mV+xIpDkqUbJdhgTEE8=
Subject key identifier: 40:12:D9:BA:FB:46:E0:D7:19:76:7C:CA:A5:8B:41:66:E7:C5:82:37
Certificate issuer: /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Certificate serial: 04AF
Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/C4E52774DCA311ECACAEC50BC4F9AE02.roa
Signing time: Wed 14 Sep 2022 12:41:08 +0000
ROA not before: Wed 14 Sep 2022 12:41:08 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 140224
IP address blocks: 103.68.192.0/24 maxlen: 24
103.68.193.0/24 maxlen: 24
121.54.188.0/24 maxlen: 24
121.54.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1199 (0x4af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Validity
Not Before: Sep 14 12:41:08 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=6321cbe3-66e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1b:b6:55:9b:5d:61:2f:17:c5:90:fe:ee:71:
94:7f:e7:ef:70:57:a0:47:36:57:6c:88:80:c8:03:
a7:ad:12:1e:7c:c5:e5:b7:e5:8c:f0:67:7e:d9:a0:
d5:3f:85:0e:2f:d8:0f:fe:a4:70:49:27:76:2c:52:
7e:2a:28:db:fa:e1:5e:f9:58:0b:10:70:70:75:ad:
9c:dd:3f:da:2a:9f:dc:67:0c:a6:4a:e5:6c:2d:7c:
66:80:5a:f1:00:55:7d:b1:4c:63:9c:7e:13:1b:71:
f3:33:81:7b:89:67:f8:a4:dc:69:3a:7a:f7:fb:f2:
ab:f7:6f:90:53:dd:48:f7:a0:5c:07:ae:f8:f5:99:
34:79:f9:66:12:9c:ce:37:d5:51:eb:d5:13:88:99:
20:35:7e:29:2c:7e:bf:ee:b4:b1:45:e4:e5:0e:66:
19:e5:4e:1e:6b:98:6a:72:ff:12:51:01:42:e4:9a:
5e:8b:42:80:3e:61:66:7e:f8:0f:ac:d8:3f:e4:da:
aa:16:c1:02:23:1e:1a:57:2d:ca:e5:7f:12:7b:1e:
43:6b:4a:1e:5d:47:e8:2b:04:9a:1f:48:3f:dc:a0:
76:b0:95:b3:2d:de:b5:32:c0:0e:d8:10:83:98:90:
27:ff:a2:3f:e1:ad:03:f2:6f:c0:4a:75:46:26:44:
a6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:12:D9:BA:FB:46:E0:D7:19:76:7C:CA:A5:8B:41:66:E7:C5:82:37
X509v3 Authority Key Identifier:
keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/C4E52774DCA311ECACAEC50BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.192.0/23
121.54.188.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:25:c2:ce:f1:5a:e7:83:04:e1:95:a1:30:cc:db:19:58:b5:
70:2a:07:3a:ab:60:30:9c:ca:41:39:41:1d:9a:71:ff:03:f6:
43:5d:54:2f:ab:a2:03:6c:b1:a2:99:57:72:9c:af:27:82:b9:
89:27:c9:d4:fc:23:61:20:21:cc:86:ad:5b:1b:1d:20:eb:c3:
31:7b:aa:e1:4c:3c:77:c2:b3:d9:de:d3:0e:0a:f6:3f:c5:ef:
64:8d:91:16:35:12:27:58:6a:dc:c1:45:a8:e2:03:df:f0:b4:
40:b1:78:8e:c2:48:f7:07:ea:cf:ac:59:03:f1:77:4d:f9:6b:
3b:34:71:03:be:84:d8:cd:44:e3:8d:ad:59:84:b6:0f:cb:33:
d9:a1:0e:87:be:d3:12:fc:96:cc:b2:51:58:c2:24:9e:2b:e5:
c5:4f:2d:c7:26:31:53:e8:b5:43:88:75:14:9b:1e:cd:83:17:
d4:fe:1f:f0:7d:d2:9c:01:11:d3:62:84:8b:9e:6a:02:ff:6c:
c5:7a:80:3d:eb:91:ff:25:e9:aa:4b:c5:b7:08:a3:94:34:c6:
89:6a:80:07:59:9a:2e:8d:8f:d9:9c:57:c0:64:25:7f:90:ca:
e0:ca:6a:e4:af:cb:bd:7f:e0:97:fc:7b:c9:f4:7c:10:80:0d:
92:75:3c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:04 2023 by rpki-client on console-ams.rpki-client.org