Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/39866D560A5511EEBCBC9A6CC4F9AE02.roa
File: 39866D560A5511EEBCBC9A6CC4F9AE02.roa (raw, json)
Hash identifier: J/HOSb2Q9+I6uaKGqTB3/VXWmMP16uo/LgE23KV2WNk=
Subject key identifier: D9:EF:4D:4B:C1:FD:B0:D7:52:2A:5F:1B:CD:79:AB:70:AE:8B:B8:96
Certificate issuer: /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial: 0E
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/39866D560A5511EEBCBC9A6CC4F9AE02.roa
Signing time: Sat 01 Jul 2023 05:13:51 +0000
ROA not before: Sat 01 Jul 2023 05:13:51 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 211256
IP address blocks: 103.92.145.0/24 maxlen: 24
103.92.146.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Validity
Not Before: Jul 1 05:13:51 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=649fb60f-9fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:ee:d0:9e:0b:c6:33:1d:ad:5c:b7:9b:4e:
c7:d3:aa:7b:6f:46:4c:de:07:69:1b:40:41:1b:80:
81:9a:b7:7c:8a:8a:36:e3:bc:aa:4c:76:62:7d:9b:
b6:5b:67:8d:2a:69:c7:25:91:ab:7b:db:4d:ac:c3:
da:6f:4e:54:4e:5c:21:21:dd:a1:e5:a4:b5:88:18:
a7:af:75:2d:18:9e:80:aa:69:a0:cc:e0:24:82:20:
70:2f:94:e6:00:64:4e:c9:8c:5e:d3:ff:8c:2e:c3:
e4:d8:73:f7:b2:a4:e6:da:cb:f7:22:6c:e8:09:6f:
27:c5:69:51:6f:a6:e2:66:7b:7c:00:77:81:fb:9a:
be:db:a4:73:83:51:ad:91:6d:eb:12:3b:6d:d8:89:
94:9a:44:eb:db:1e:18:e4:0c:88:45:2d:e2:c2:c7:
ed:85:cc:c7:f2:4f:1f:28:f1:ff:01:71:02:fc:59:
a5:36:76:c4:56:18:23:ce:28:d8:f1:b4:8b:02:90:
82:1b:f3:87:88:ca:27:d5:87:b3:35:fe:c8:db:85:
81:71:c9:4f:81:a9:f2:1f:71:30:b1:6d:97:e9:ea:
ba:79:e1:f4:12:8a:4d:82:e8:90:60:5b:11:51:65:
0e:4b:7c:0e:18:34:64:d0:b6:9e:78:7c:39:97:b4:
b8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EF:4D:4B:C1:FD:B0:D7:52:2A:5F:1B:CD:79:AB:70:AE:8B:B8:96
X509v3 Authority Key Identifier:
keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/39866D560A5511EEBCBC9A6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.92.145.0-103.92.146.255
Signature Algorithm: sha256WithRSAEncryption
85:f2:9e:e6:ec:17:73:a4:64:52:3c:d4:55:cd:cd:19:9d:4a:
4f:57:38:bd:bf:7b:c0:27:ec:33:64:f7:a4:80:69:76:06:a1:
c4:7a:d1:e0:4b:10:ab:b8:06:ba:13:26:33:5a:66:cd:14:e5:
6c:e6:73:fe:01:79:62:ea:93:80:5a:74:2d:15:3f:bc:cc:77:
9a:da:a6:ca:59:fe:83:80:89:95:7d:ce:69:ea:d7:66:f2:2f:
ce:4b:6c:53:a7:64:51:af:a0:e5:b0:8a:68:bd:3c:c7:d7:15:
77:07:36:fd:00:20:91:66:f9:30:55:c0:19:9e:1e:b0:ce:be:
54:10:a8:78:69:a3:f1:b6:ad:34:8c:ee:f6:d3:9f:a0:53:38:
dc:57:fd:28:6c:20:07:83:f0:68:89:4d:f2:48:50:c2:98:6d:
70:d2:68:9b:ef:83:0d:06:ca:ed:9a:0c:4e:c5:cb:0e:7f:f9:
03:94:fb:41:e1:c0:06:0c:71:8e:c8:ee:89:a5:1e:76:55:96:
ea:34:94:1e:38:28:c6:30:1c:1d:78:28:c9:4c:cb:99:4d:05:
07:e3:e7:6a:d9:0d:0a:74:05:99:9c:01:1b:5d:69:9b:d7:20:
aa:3b:de:b5:6d:f3:71:c7:24:12:6a:d7:cc:7f:57:d3:81:5e:
d2:b0:7a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:26 2023 by rpki-client on console.sobornost.net