Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/EEE4D84272E111EDBF1C7C81C4F9AE02.roa
File: EEE4D84272E111EDBF1C7C81C4F9AE02.roa (raw, json)
Hash identifier: yJmFM6NFhU7VOOvlPwZXhWj81YWLcTu4yglRMQwsXGM=
Subject key identifier: 5E:EF:BF:66:B0:8C:BD:EF:2F:7C:EF:77:8E:E2:94:58:70:31:C5:49
Certificate issuer: /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Certificate serial: 04F5
Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/EEE4D84272E111EDBF1C7C81C4F9AE02.roa
Signing time: Sat 03 Dec 2022 08:10:22 +0000
ROA not before: Sat 03 Dec 2022 08:10:22 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 140224
IP address blocks: 103.68.193.0/24 maxlen: 24
121.54.188.0/24 maxlen: 24
121.54.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1269 (0x4f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Validity
Not Before: Dec 3 08:10:22 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=638b046e-320d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:10:43:fe:c0:0a:7e:a2:b5:3f:ab:33:ac:e9:
d7:49:aa:42:a9:ef:dc:9d:6e:89:c9:c1:0e:f9:5c:
12:25:d6:71:0a:ec:56:c2:42:87:4d:ec:bf:0b:5c:
2a:e3:45:e0:dd:3a:25:34:68:57:59:7c:95:b4:f9:
7d:cc:a0:66:a2:6d:a1:ef:a7:75:67:ef:4c:64:cb:
a4:81:56:a7:1a:7e:37:1f:0c:13:3c:a8:6a:97:8c:
94:a8:55:17:de:b8:18:dc:54:d1:44:15:bb:6b:45:
e9:44:13:90:70:ce:92:58:2c:2f:d5:70:e7:5b:23:
43:a6:07:1b:bd:c0:16:ff:c0:72:41:f3:25:a2:83:
c5:c5:c2:fa:fd:33:11:6a:94:6c:db:31:98:66:b4:
95:7b:30:8c:20:2b:94:3e:7e:83:b7:0b:31:c8:71:
8d:a8:86:a0:70:4b:54:35:32:47:fa:d2:97:61:f5:
2e:68:98:ef:e1:0d:d5:6f:5d:7b:27:e6:0a:7e:66:
8c:4c:a9:a5:66:1c:c5:a5:1c:62:12:07:f8:3f:fd:
78:47:d0:c0:d0:0a:21:c5:23:58:41:dc:72:b7:dc:
5d:de:d8:e0:d5:62:fe:9d:7c:4d:71:0f:ca:28:73:
84:8e:e7:28:7e:19:86:d8:e7:9f:da:b9:99:91:e7:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EF:BF:66:B0:8C:BD:EF:2F:7C:EF:77:8E:E2:94:58:70:31:C5:49
X509v3 Authority Key Identifier:
keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/EEE4D84272E111EDBF1C7C81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.193.0/24
121.54.188.0/23
Signature Algorithm: sha256WithRSAEncryption
17:50:30:84:6b:e8:85:0f:54:58:3a:1b:f7:cf:7a:c8:3e:8f:
29:1f:03:2b:0f:43:5d:b2:7c:cf:92:a3:95:c2:93:b1:f7:7f:
c9:71:d4:4a:c1:ee:1b:8f:66:d0:a6:6c:30:29:6d:45:15:1f:
a5:d5:43:9f:bf:3e:14:82:0e:31:85:06:47:a3:20:69:08:dd:
90:01:8a:77:1c:55:4b:e9:fa:31:ba:cd:22:fe:18:9d:35:72:
bb:ee:c9:03:57:c2:7c:cb:8f:70:86:79:eb:9b:e8:02:e2:ec:
05:89:be:45:17:69:ec:13:03:5f:77:8e:13:a7:04:e7:f1:7f:
50:00:34:f0:f0:6c:9e:92:a7:55:31:08:98:d6:07:72:9a:dd:
3d:4e:eb:23:73:b0:b5:73:d8:bf:06:eb:3d:52:0e:12:43:4c:
7d:9e:5d:2b:ea:fe:73:6b:25:62:6e:8b:a4:e6:f2:6e:9f:3f:
cb:17:14:d8:64:e9:66:13:4c:61:4e:65:3b:6d:9a:ee:c4:df:
d9:3e:ea:36:8e:f8:4e:08:c7:57:32:ca:71:f5:30:f0:e5:60:
53:9c:3e:73:c3:67:aa:de:fb:9c:8a:f6:39:23:59:92:1f:f3:
36:ff:1a:ac:01:a2:bc:90:25:77:ff:7b:fa:e7:21:ad:d9:7b:
fd:93:6a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:04 2023 by rpki-client on console-ams.rpki-client.org