Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/7187331643B411EC942B1F55C4F9AE02.roa
File: 7187331643B411EC942B1F55C4F9AE02.roa (raw, json)
Hash identifier: oVIZzXxGiiVgtL24oAQCfwpvKDcCoXGN2jFp2ySTcBc=
Subject key identifier: 9D:A1:BC:1F:F8:A7:A5:2C:C0:C7:7A:5C:24:D3:85:E4:78:55:79:EF
Certificate issuer: /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541
Certificate serial: 02BE
Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/7187331643B411EC942B1F55C4F9AE02.roa
Signing time: Fri 13 Jan 2023 03:43:03 +0000
ROA not before: Fri 13 Jan 2023 03:43:03 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 136997
IP address blocks: 103.175.244.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 702 (0x2be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541
Validity
Not Before: Jan 13 03:43:03 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63c0d346-01e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c7:ce:5b:16:c7:c7:4a:17:6c:45:67:69:d6:
ae:04:18:b3:bb:9e:82:e2:4d:be:f0:d2:d6:0d:23:
cc:9b:e6:44:52:db:9c:43:c0:d7:ca:1a:90:04:4f:
1d:5a:7b:6f:4c:16:54:30:fc:48:cb:20:f0:5c:cc:
02:a3:22:8d:8e:d0:2e:fd:20:86:ab:5d:bb:d2:39:
35:59:f6:90:66:5b:a4:fe:e4:31:0b:ac:b9:45:91:
d1:a2:f0:e6:34:dc:0b:4d:dc:78:b5:ea:63:7f:52:
2b:ce:4c:52:50:b3:bb:82:0e:23:fe:5c:11:63:56:
64:11:f0:1a:fd:34:b4:88:df:28:e0:f1:35:15:8c:
36:83:bb:d1:95:b3:72:1a:3b:6a:22:77:e8:51:2e:
7b:52:a9:37:ad:42:aa:6b:e7:cb:5d:3e:fa:d7:ba:
f9:6a:07:ee:9a:02:35:a5:72:e4:4b:00:5d:9e:45:
7a:1b:d4:d7:39:de:7b:93:bb:1e:3b:69:b6:30:62:
cd:02:57:1c:fb:d8:e5:bf:16:c0:7c:1f:40:31:44:
cb:7d:d9:2c:3b:fe:79:41:a6:b6:3d:66:16:75:1c:
97:fe:64:ad:85:51:db:d6:00:a6:f0:c4:33:3c:be:
7b:fd:d6:17:ac:e3:18:77:ce:c1:db:7e:45:0b:b7:
5a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A1:BC:1F:F8:A7:A5:2C:C0:C7:7A:5C:24:D3:85:E4:78:55:79:EF
X509v3 Authority Key Identifier:
keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/7187331643B411EC942B1F55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.244.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:dc:5c:66:24:49:cb:1c:11:39:c6:a9:0e:09:4d:35:34:53:
27:4f:c3:c3:fc:16:a7:17:02:6e:99:13:89:f0:7b:05:e4:e9:
a5:e5:8c:1e:30:fb:26:c7:9d:e2:ad:0a:2c:55:96:f0:52:5e:
f0:4d:a5:b5:a8:b7:f0:db:29:1b:7c:47:52:86:c9:d5:d5:e5:
b6:57:a3:9a:7d:23:27:8b:4e:87:38:96:d7:8e:ea:37:fb:b2:
d6:85:99:7e:c8:00:2c:76:4e:8d:41:16:a8:ec:32:84:95:c7:
99:76:21:db:3d:93:73:5f:e9:0e:00:29:5f:5e:68:36:1a:d7:
d7:c1:b8:de:ab:13:a4:65:1b:3d:09:58:3c:86:5d:14:98:45:
29:e0:cc:55:a0:35:88:34:43:3d:95:79:c0:f1:9b:7b:ff:be:
4d:1d:01:77:f3:94:fb:75:51:a5:40:38:f9:1a:8c:ff:22:c3:
57:34:ad:5c:33:f7:8d:28:d4:63:3e:49:f6:58:be:54:bc:a7:
8d:82:8f:00:e6:27:76:d8:57:d2:1e:d5:cc:83:6c:ef:5c:2b:
f1:9c:3a:ef:f5:96:ea:df:9b:c8:0d:3f:b9:4e:a6:3a:54:8c:
ab:83:4c:bf:49:7f:08:7f:84:90:09:44:77:8a:39:3e:22:c9:
5e:fa:4e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 15 11:44:46 2023 by rpki-client on console-ams.rpki-client.org