Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/4560E8E2165611EEB24C6E57C4F9AE02.roa
File: 4560E8E2165611EEB24C6E57C4F9AE02.roa (raw, json)
Hash identifier: ZdPAekfvoOG2TrnfJVJd4MsTSgq8PVviuCxu3ISM+wM=
Subject key identifier: 36:0D:ED:F8:7B:18:49:E6:9E:D4:23:F4:EF:E5:24:BA:8B:6B:A2:49
Certificate issuer: /CN=A91D200F/serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B
Certificate serial: 02
Authority key identifier: 4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/4560E8E2165611EEB24C6E57C4F9AE02.roa
Signing time: Thu 29 Jun 2023 08:23:48 +0000
ROA not before: Thu 29 Jun 2023 08:23:48 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 23673
IP address blocks: 103.225.118.0/24 maxlen: 24
103.225.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D200F/serialNumber=4D909087BDDFA1505E2BBA03F206112EAEFFB11B
Validity
Not Before: Jun 29 08:23:48 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=649d3f94-3ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ae:c0:58:14:e2:56:93:31:e0:1f:61:e4:aa:
ea:62:e6:d4:9a:a3:0f:15:ff:b4:e2:0c:74:56:bb:
ee:37:9b:1b:2f:42:6d:b3:5c:f3:0e:43:d5:82:08:
bf:fe:52:76:5f:2d:09:2f:ef:1d:1e:20:fc:64:55:
f0:34:85:47:50:f8:df:20:40:99:99:bb:6f:6d:fa:
80:d8:2a:3c:b8:fb:81:5f:e4:ac:89:cd:52:f9:06:
f6:30:df:37:e6:0c:cd:6e:42:a1:fa:aa:65:a0:19:
9f:f8:b5:55:8c:70:9c:8e:88:38:43:72:08:6f:18:
2a:72:d2:86:0b:ce:56:34:6b:f8:48:86:dc:55:67:
b4:99:dc:00:76:b9:65:42:0c:41:98:f1:38:56:a3:
38:ab:b3:85:35:a6:05:cb:58:57:19:b2:fb:fe:9e:
16:e0:fc:2a:e5:ba:f4:f7:1e:c0:ce:0c:94:33:49:
fd:02:5a:10:cc:88:c9:4d:19:39:40:69:0a:07:c1:
87:8e:b1:a7:e6:7b:7f:b6:b2:e1:62:54:84:ea:e3:
5c:03:84:81:12:cb:27:e5:26:66:78:ff:ce:ce:76:
f1:cc:94:8d:fa:a3:e8:b6:83:a1:74:af:6b:e3:e6:
9a:1b:47:9a:3f:2f:ee:17:9f:0e:9c:21:bb:d1:68:
5a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0D:ED:F8:7B:18:49:E6:9E:D4:23:F4:EF:E5:24:BA:8B:6B:A2:49
X509v3 Authority Key Identifier:
keyid:4D:90:90:87:BD:DF:A1:50:5E:2B:BA:03:F2:06:11:2E:AE:FF:B1:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/TZCQh73foVBeK7oD8gYRLq7_sRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZCQh73foVBeK7oD8gYRLq7_sRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D200F/25787402164F11EE9E73404EC4F9AE02/4560E8E2165611EEB24C6E57C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.225.118.0/23
Signature Algorithm: sha256WithRSAEncryption
50:d3:9a:18:9a:d3:17:6e:72:f2:ef:7f:27:b5:52:1c:b2:c4:
45:5e:04:eb:bc:4f:dd:f1:ba:1e:4c:0b:67:ba:3b:f5:24:7f:
11:77:35:15:58:7b:95:1b:a2:ee:68:ba:6c:5d:40:68:c6:e7:
19:86:fa:b2:ba:aa:83:b5:64:d6:fd:38:53:12:b5:48:17:87:
22:4f:58:01:2d:96:ce:44:cc:25:39:a9:8d:0c:9b:6a:5c:0f:
6f:57:4c:db:ed:db:a0:f9:80:08:9b:4d:d8:f2:30:b1:f9:bb:
ff:d8:ef:bc:be:6d:ce:63:c3:2f:82:fe:66:60:cb:c5:ff:03:
f4:e7:f0:24:94:d0:19:7c:ea:0a:81:6d:fb:df:a5:bb:cf:0b:
76:93:47:f6:36:a5:41:ab:ba:bb:c6:8e:78:d4:66:de:07:d1:
2a:b5:33:c0:29:43:c9:98:b6:ce:95:38:a7:33:7a:81:32:e9:
ee:69:68:e9:d4:65:59:8a:4b:bb:dc:24:8b:73:3d:fd:71:7b:
ee:5c:f3:a8:69:4c:ab:b0:e3:06:a8:7d:70:35:83:5c:27:1a:
18:33:4d:d1:46:8c:9a:6c:33:ce:8b:9d:5a:0d:2b:b4:78:4e:
05:70:3c:eb:b4:58:f4:ee:48:16:04:1a:45:aa:cf:fb:fa:81:
50:b3:ed:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 02:51:05 2023 by rpki-client on console-fra.rpki-client.org