Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/F8762DC8C7C511EDA7A8CD39C4F9AE02.roa
File: F8762DC8C7C511EDA7A8CD39C4F9AE02.roa (raw, json)
Hash identifier: 5niZmBSw9Kqg+XBLcnzbjtGl8cj9dq7C8Ac14xfGF88=
Subject key identifier: 3C:91:99:28:4E:D7:A0:82:5E:CC:F9:CD:28:82:5D:0A:AE:9C:52:50
Certificate issuer: /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial: 01AB
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/F8762DC8C7C511EDA7A8CD39C4F9AE02.roa
Signing time: Sun 07 May 2023 05:45:23 +0000
ROA not before: Sun 07 May 2023 05:45:23 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 132422
IP address blocks: 103.215.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Validity
Not Before: May 7 05:45:23 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64573af3-b128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:99:a1:c5:dd:28:ba:3e:d8:3a:89:e6:2b:a9:
a4:d8:85:a2:a0:c6:47:c2:26:6e:d6:39:61:13:4c:
f3:a8:3a:b4:cd:91:c2:97:86:8c:e9:3d:e4:91:1a:
e9:1a:a4:1e:bb:53:a3:f2:70:eb:71:8a:c9:66:03:
95:c1:cc:cd:18:25:2c:77:64:46:30:36:e4:57:fd:
37:d6:34:16:e3:e7:19:07:be:50:d4:cd:0a:b8:0b:
b2:09:83:b9:87:fe:c9:50:87:bd:df:4c:54:65:19:
04:8f:d4:0c:24:af:8c:77:7a:91:38:69:d5:c9:9c:
70:15:87:4f:dd:da:3a:cd:73:7e:96:74:fe:f5:18:
12:d0:28:92:16:f6:58:b8:9c:3b:9b:7c:61:bb:07:
d4:e1:99:d6:36:7c:eb:3e:68:7b:b1:f1:00:f2:14:
ce:ae:36:2f:f2:8f:49:bf:02:33:63:ed:0b:e9:68:
35:ca:23:c5:52:11:c1:94:cb:23:2c:1f:5f:a0:44:
9c:77:22:ef:95:bf:1f:c6:dd:2a:8b:00:63:aa:22:
d2:86:33:34:a4:7a:c3:4a:6c:07:94:4f:a2:e4:82:
65:40:86:ac:1a:ce:7e:85:3a:85:d4:c5:a3:2c:38:
b9:3d:ac:e8:b4:d6:d4:b5:d5:82:7c:38:ce:bc:1c:
d9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:91:99:28:4E:D7:A0:82:5E:CC:F9:CD:28:82:5D:0A:AE:9C:52:50
X509v3 Authority Key Identifier:
keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/F8762DC8C7C511EDA7A8CD39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.215.127.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b8:59:1d:e5:87:46:59:ed:2a:20:d9:f5:61:ef:4d:6a:aa:
38:a4:f8:9d:84:7d:64:41:9a:de:d9:cb:5e:bd:3c:e5:88:b4:
51:6e:66:e5:05:64:8a:d9:8f:79:12:07:3c:5d:1f:01:8c:b9:
c9:15:21:3d:8e:21:70:d9:94:eb:27:f1:d2:92:2a:11:28:6b:
12:cd:13:cc:b7:c3:0e:01:67:e0:17:74:06:6e:e1:47:c9:3c:
19:57:fd:9a:54:49:5f:4a:0d:a8:87:18:74:7e:8a:5b:e2:0c:
4e:39:d8:d8:cc:dc:be:34:1e:d5:e9:73:f3:22:1e:d0:a8:01:
84:3c:1c:ba:bc:0a:fd:2c:5c:86:ca:40:76:d1:ea:44:1e:a5:
fe:b6:9d:57:63:01:ec:06:b0:1c:d0:af:6f:70:c9:e6:bd:e4:
24:ab:22:4a:94:c9:8b:8c:28:ad:50:65:00:3d:30:6e:c6:4a:
56:36:ed:cf:cf:25:91:9e:f2:8b:95:7e:5a:1b:0f:7a:a7:a3:
da:82:dd:a3:5b:12:8a:f6:f0:09:05:a2:bd:c3:fd:31:de:27:
4c:a5:a1:31:df:b8:31:ff:97:b6:4a:5d:0e:c2:02:03:88:91:
52:88:db:41:0a:fb:9a:eb:1b:74:01:91:1d:02:bd:74:ec:82:
91:79:2e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:53 2023 by rpki-client on console.sobornost.net