Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/204D3FCE8BF911EE901BF02FC4F9AE02.roa
File: 204D3FCE8BF911EE901BF02FC4F9AE02.roa (raw, json)
Hash identifier: FFHEyyrTZzWBfwZK8wl2UQ/RGnfgHWpwdvXfkN4obwg=
Subject key identifier: 52:66:87:40:CF:01:21:10:A5:25:E4:EA:17:7A:E4:D8:5F:89:0A:EE
Certificate issuer: /CN=A91C9025/serialNumber=06DF1B524BD0DDDDA179B0450627EAF7F8D94C00
Certificate serial: 08E9
Authority key identifier: 06:DF:1B:52:4B:D0:DD:DD:A1:79:B0:45:06:27:EA:F7:F8:D9:4C:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bt8bUkvQ3d2hebBFBifq9_jZTAA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/204D3FCE8BF911EE901BF02FC4F9AE02.roa
Signing time: Sun 26 Nov 2023 01:14:20 +0000
ROA not before: Sun 26 Nov 2023 01:14:20 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 212517
IP address blocks: 103.82.216.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2281 (0x8e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9025/serialNumber=06DF1B524BD0DDDDA179B0450627EAF7F8D94C00
Validity
Not Before: Nov 26 01:14:20 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=65629bec-4ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:75:bc:ae:68:ba:f1:07:e4:c7:c4:22:09:e4:
13:27:3c:93:94:39:db:c9:82:bf:d7:69:ee:79:03:
f6:61:25:a3:8e:87:5e:7b:4f:f8:4d:b3:77:ba:3d:
5e:00:5a:4d:f3:3e:26:d5:86:b0:d2:b9:fa:d4:c9:
d7:ad:ca:b9:54:ce:6d:71:78:28:1d:18:37:d7:10:
88:f2:f2:e3:2c:26:ae:9d:d2:6b:e5:56:b7:05:54:
ec:2f:6c:3d:eb:d4:e4:9d:1b:2e:6d:99:55:9f:6b:
73:9f:f7:fd:9a:81:32:af:32:b0:f3:af:37:b2:02:
9c:47:49:82:f8:cf:25:1a:75:57:fd:1b:96:de:77:
cc:29:10:d7:a6:f2:64:f4:59:1a:bc:c1:19:71:5e:
3d:af:5a:bf:51:0a:bd:af:c8:e9:8b:74:2d:48:cb:
78:be:0c:43:b8:9b:a6:44:04:5e:fe:f5:22:1e:57:
63:90:50:8e:bb:6f:b8:7b:53:54:f0:27:85:96:3a:
17:aa:9e:6b:9e:71:7a:6c:2e:97:4a:99:ce:1e:f7:
96:99:cc:dd:46:6f:8b:9f:fe:48:22:26:de:fa:59:
52:7c:5a:79:5e:34:ae:1a:01:e6:e3:60:83:ad:25:
99:46:16:4d:39:85:dc:b7:8e:de:24:3a:bb:5e:fd:
a2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:66:87:40:CF:01:21:10:A5:25:E4:EA:17:7A:E4:D8:5F:89:0A:EE
X509v3 Authority Key Identifier:
keyid:06:DF:1B:52:4B:D0:DD:DD:A1:79:B0:45:06:27:EA:F7:F8:D9:4C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/Bt8bUkvQ3d2hebBFBifq9_jZTAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bt8bUkvQ3d2hebBFBifq9_jZTAA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/204D3FCE8BF911EE901BF02FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.216.0/23
Signature Algorithm: sha256WithRSAEncryption
26:7b:d1:f5:2e:30:0f:4c:10:85:36:fa:52:e4:fb:f0:9d:32:
60:5b:c6:85:17:cc:0e:f5:48:ef:08:b4:4a:d2:d8:b6:e1:b6:
ac:22:d6:de:41:aa:36:d0:5d:23:07:1e:e5:7c:2e:38:93:14:
c7:4b:7c:df:af:ea:e0:4e:6f:8a:78:3b:a9:3b:07:11:c1:35:
fe:38:cd:99:16:0d:13:0c:6f:2a:3e:b5:e8:9b:07:bd:80:f8:
68:52:0a:98:e2:03:a5:7e:a9:77:5e:34:99:94:b3:a5:ad:0e:
21:88:1e:7c:ad:b5:9a:a0:b8:f2:e5:44:c2:7b:58:14:86:1c:
e8:d1:79:4d:76:e4:4e:54:bb:b2:ad:29:f5:86:65:5e:ac:72:
8d:33:92:5f:b5:78:51:5f:d4:f5:57:ac:5f:aa:c3:0c:67:05:
d8:7e:18:27:a3:2d:76:b9:5b:1e:9b:2d:d2:07:d8:be:09:58:
f6:28:9c:98:fb:36:e8:58:84:c5:2b:38:c0:ed:00:42:14:8f:
71:20:e7:6c:02:5d:e4:ef:e6:a6:fc:fa:4c:2d:c0:77:43:a8:
1c:fd:75:f9:61:85:4c:f2:1f:d8:4c:0d:68:83:97:de:40:c7:
40:b2:dc:63:65:0e:e3:21:39:08:b3:99:90:e9:c2:50:d0:e4:
1c:c7:66:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:46:15 2023 by rpki-client on console-fra.rpki-client.org