Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DED22/5A229A3639BC11EDA1DF223DC4F9AE02/9E9D7D2A39C111EDA8838D3AC4F9AE02.roa
File: 9E9D7D2A39C111EDA8838D3AC4F9AE02.roa (raw, json)
Hash identifier: WsdVEBMPupIylTiIi8vd0gBK4GIVCcvn2MvUhiZDaaM=
Subject key identifier: 52:E4:BB:CD:81:8C:23:5D:92:9A:A3:7A:DB:56:06:31:2D:0B:87:3C
Certificate issuer: /CN=A91DED22/serialNumber=968153C882BE5B34BED1C8F13D3B21C5C368C42B
Certificate serial: A3
Authority key identifier: 96:81:53:C8:82:BE:5B:34:BE:D1:C8:F1:3D:3B:21:C5:C3:68:C4:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loFTyIK-WzS-0cjxPTshxcNoxCs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DED22/5A229A3639BC11EDA1DF223DC4F9AE02/9E9D7D2A39C111EDA8838D3AC4F9AE02.roa
Signing time: Sat 01 Jul 2023 03:52:38 +0000
ROA not before: Sat 01 Jul 2023 03:52:38 +0000
ROA not after: Mon 30 Oct 2023 00:00:00 +0000
asID: 150320
IP address blocks: 103.9.142.0/23 maxlen: 23
103.9.142.0/24 maxlen: 24
103.9.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DED22/serialNumber=968153C882BE5B34BED1C8F13D3B21C5C368C42B
Validity
Not Before: Jul 1 03:52:38 2023 GMT
Not After : Oct 30 00:00:00 2023 GMT
Subject: CN=649fa306-72d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:c5:da:5d:20:84:f8:bf:a8:ab:7b:11:39:
d0:27:fa:10:51:aa:70:11:26:bd:22:58:9e:74:61:
78:7f:1a:2d:64:14:7a:03:74:c4:29:95:c1:10:f1:
0f:6d:67:a7:0a:df:c2:6f:6b:8c:7a:f1:f9:59:f1:
9b:98:41:78:da:06:9f:14:eb:cf:82:53:af:c9:28:
45:ab:2a:2a:9f:34:bb:f0:16:fb:9f:86:ce:27:90:
12:ee:bf:60:8f:92:7f:ac:8c:d4:f6:16:41:e5:7d:
6b:28:6b:9f:b2:86:f7:05:c2:a8:c7:a3:c3:90:55:
33:ec:7e:63:9e:f8:ca:fc:3d:2c:9c:1a:78:05:91:
38:47:28:64:41:34:e3:18:b3:1f:c2:e1:e8:32:81:
a1:07:b0:27:2d:08:bd:c0:1c:ff:5b:bb:94:20:17:
8b:b7:9f:19:49:51:53:75:61:c6:00:0f:08:00:d1:
fe:e3:04:49:3a:53:a8:fe:d1:94:cd:9d:98:17:0c:
30:72:6e:b6:8b:d7:d6:2e:82:11:ab:b5:7f:09:9a:
48:82:9e:33:bd:27:23:70:b3:5d:1e:55:2d:f4:60:
28:1b:3e:3b:3e:f5:62:ff:b0:99:cf:72:4d:5d:c1:
1d:90:17:a5:57:9d:a2:23:c5:fd:e0:da:4a:3c:15:
7e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E4:BB:CD:81:8C:23:5D:92:9A:A3:7A:DB:56:06:31:2D:0B:87:3C
X509v3 Authority Key Identifier:
keyid:96:81:53:C8:82:BE:5B:34:BE:D1:C8:F1:3D:3B:21:C5:C3:68:C4:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DED22/5A229A3639BC11EDA1DF223DC4F9AE02/loFTyIK-WzS-0cjxPTshxcNoxCs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loFTyIK-WzS-0cjxPTshxcNoxCs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DED22/5A229A3639BC11EDA1DF223DC4F9AE02/9E9D7D2A39C111EDA8838D3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.9.142.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:c3:2e:8a:b7:4e:85:06:ae:47:a8:44:c0:25:95:8c:36:5e:
c8:c8:eb:6b:90:e5:30:1c:80:62:fa:00:17:0f:ae:d9:cf:1a:
3d:0c:e7:7b:6b:c9:ad:04:d0:b2:09:ee:14:21:4a:2f:cf:7d:
05:67:d4:72:f1:92:82:d5:ea:88:da:63:03:28:0d:03:4c:6b:
a7:fe:b1:ea:4d:71:d6:bd:09:56:63:f7:6a:d8:ca:6b:ff:99:
66:7e:47:29:b7:dc:24:9e:d4:dd:eb:5a:92:70:fe:c4:3a:bb:
65:87:ba:8b:e1:43:34:97:8d:b0:59:6b:7c:c1:c3:25:b5:e5:
32:04:19:f6:df:38:e9:5d:49:b9:ab:52:ab:3f:7b:a6:89:87:
3b:66:e4:23:88:1d:0c:3e:74:00:cc:f5:f8:fc:60:83:91:65:
82:af:3a:97:92:8d:f9:33:64:d9:0a:b1:45:53:b8:a3:e7:e0:
d8:c9:9e:69:16:11:e5:bf:ce:3d:c6:fd:44:14:e0:43:36:e6:
0a:9c:09:f7:a5:35:50:96:f8:33:0a:75:7c:33:25:d6:5d:b3:
0b:74:f2:d9:b9:4d:7e:8c:20:44:f3:45:df:13:29:18:26:56:
44:64:95:a3:c7:f9:63:73:90:ad:14:97:a0:ef:25:af:3b:ed:
e7:fa:c2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 03:46:43 2023 by rpki-client on console-fra.rpki-client.org