Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/A1EA03BA69E811EE85542E67C4F9AE02.roa
File: A1EA03BA69E811EE85542E67C4F9AE02.roa (raw, json)
Hash identifier: 1Dl4dFKf8SdWTA8Qg/vf3LFt4phdZZWZDfygZITP/z4=
Subject key identifier: 0A:0C:0F:DA:56:6C:3C:A3:55:17:4E:34:56:EA:F9:62:7C:CE:9E:FD
Certificate issuer: /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
Certificate serial: 0675
Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/A1EA03BA69E811EE85542E67C4F9AE02.roa
Signing time: Fri 13 Oct 2023 16:54:10 +0000
ROA not before: Fri 13 Oct 2023 16:54:10 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 23750
IP address blocks: 103.156.152.0/23 maxlen: 23
103.156.152.0/24 maxlen: 24
103.156.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1653 (0x675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
Validity
Not Before: Oct 13 16:54:10 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=65297631-f811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:52:52:fb:8c:4b:ca:43:fc:47:4b:63:f6:3e:
cd:93:a1:32:d2:64:2b:31:e3:93:da:f8:05:cb:70:
25:bf:36:cf:34:f7:be:19:86:08:bf:1b:a5:4f:39:
64:66:dc:b3:2e:6e:d7:96:40:58:21:53:31:f6:3e:
99:56:82:45:4a:da:38:02:45:a2:42:47:c5:a6:d4:
72:05:f0:18:78:54:de:44:6c:be:fa:7d:27:f0:64:
0a:f0:2e:dd:0d:95:1d:b8:e6:9d:f0:62:19:a5:94:
ec:b9:7e:11:ee:07:07:5e:68:d6:b4:18:40:7c:90:
c1:38:45:b4:7e:b5:de:e1:0a:02:3c:93:7b:74:8f:
76:ac:52:ef:74:06:46:35:01:9f:8b:6d:c2:c1:51:
d2:b9:a8:c4:8e:d0:3b:23:64:cd:a2:4e:ff:57:e7:
af:57:25:53:d5:80:97:b8:27:30:58:ad:45:89:16:
fd:6f:16:69:59:a1:f0:a9:4d:ac:01:bb:8c:31:8e:
a7:d6:0a:de:8d:d3:13:9b:1c:28:dd:4e:fd:ba:29:
5c:f3:ae:0f:8f:8b:2f:8a:2f:e0:1d:85:0e:f2:55:
7c:fb:f9:a4:63:e9:b4:cf:5b:08:28:f2:5c:5a:e8:
3a:a6:4f:39:2a:8e:4f:ff:2a:9b:f0:67:6b:5c:32:
d3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0C:0F:DA:56:6C:3C:A3:55:17:4E:34:56:EA:F9:62:7C:CE:9E:FD
X509v3 Authority Key Identifier:
keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/A1EA03BA69E811EE85542E67C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.152.0/23
Signature Algorithm: sha256WithRSAEncryption
13:3c:a1:04:2b:1b:e9:87:ec:29:75:c5:2c:ad:87:7a:0d:29:
37:09:8a:fb:56:69:27:95:21:cf:32:f8:4c:b6:c1:21:60:5e:
84:40:d3:68:8b:89:ad:0d:f4:a6:0e:0e:48:3e:93:8c:57:87:
25:13:d8:9f:41:8d:5b:4f:14:e6:4a:40:ec:4e:ac:b9:72:1d:
31:65:f8:75:12:31:7d:94:c3:d9:78:57:15:17:95:36:3a:20:
44:a6:e4:c2:df:2d:55:b7:10:fe:46:16:05:b8:84:8d:77:ac:
b4:2e:19:0c:14:6d:2b:f7:64:fc:f3:8e:f5:fb:3c:28:fe:95:
1a:c5:7f:77:4f:94:ec:b6:e4:6c:ba:ac:c5:44:98:69:f1:bb:
d3:56:f6:58:a9:8d:e1:ad:bc:b4:28:b3:d1:22:75:01:27:ea:
36:55:f0:ff:f3:4a:41:97:26:72:33:fd:be:2b:91:62:b5:f9:
f6:79:61:c4:4b:2f:f6:6c:06:31:90:12:1c:76:a1:74:28:f9:
03:ed:28:03:5e:8c:f2:3e:49:d8:99:36:73:89:9e:54:8e:e4:
a2:f8:bf:88:52:20:b8:50:4a:d5:43:5a:4a:1b:e6:f2:b3:50:
9d:c4:f3:7d:e8:67:f6:df:50:2b:3a:e2:55:f0:e7:59:3c:da:
bc:3e:3a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:29 2023 by rpki-client on console.sobornost.net