Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/A75E10CEA0F011ECBAB8E063C4F9AE02.roa
File: A75E10CEA0F011ECBAB8E063C4F9AE02.roa (raw, json)
Hash identifier: asSJ5houZ5Hkszw+x71nKdVCHOZQTYoupj6om+Z4DJs=
Subject key identifier: F3:CF:71:1D:86:A1:81:76:74:9F:0C:A0:2A:48:FE:0C:C7:96:DE:03
Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Certificate serial: 0B04
Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/A75E10CEA0F011ECBAB8E063C4F9AE02.roa
Signing time: Tue 28 Mar 2023 19:46:44 +0000
ROA not before: Tue 28 Mar 2023 19:46:44 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 59239
IP address blocks: 103.135.138.0/24 maxlen: 24
103.135.139.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2820 (0xb04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Validity
Not Before: Mar 28 19:46:44 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=64234424-ce8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:24:b8:a5:ef:69:75:3b:06:57:2e:7f:d4:
67:93:3b:de:e1:5a:60:1c:3f:40:43:c3:24:0a:6a:
f2:10:c9:2e:f7:e6:61:7d:a6:f7:8b:75:de:36:0c:
35:34:7b:07:82:2b:0f:59:96:6f:4a:47:03:cb:a3:
88:84:1d:72:28:03:e9:67:53:82:57:e7:71:d5:c7:
60:d3:17:57:73:7f:6f:5e:86:9f:09:a2:bb:cc:4f:
94:fb:6d:af:e0:25:0f:5e:64:aa:c6:82:e0:c6:4b:
90:61:c4:6b:9b:6f:75:a8:45:17:0c:06:83:48:5c:
17:c2:63:88:d1:2e:ab:f4:79:cb:0e:4e:17:e3:8d:
7a:96:ca:7a:97:c9:cc:ad:05:6b:a6:54:f0:25:d1:
99:d1:1d:04:94:f6:60:a2:59:d1:cb:c6:b5:33:74:
d3:69:f9:0c:0d:8e:e2:1d:6d:ad:55:14:ca:e7:8c:
b5:a4:17:c4:5e:67:e2:e2:a9:3d:29:a0:e9:df:07:
7d:3e:ec:a2:08:4e:5e:9c:e8:21:d3:ea:bb:a3:f6:
93:a3:f9:33:0b:bd:29:fe:15:3e:0d:d0:b3:34:09:
a2:ee:eb:31:33:da:85:f9:f7:b6:c5:8d:24:fe:4f:
dd:22:3e:89:35:9d:20:e2:7e:00:b1:a7:d0:99:cc:
36:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CF:71:1D:86:A1:81:76:74:9F:0C:A0:2A:48:FE:0C:C7:96:DE:03
X509v3 Authority Key Identifier:
keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/A75E10CEA0F011ECBAB8E063C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.138.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:b1:45:d1:da:4f:36:a4:a9:fb:52:34:90:a8:ab:06:29:04:
59:90:a6:80:07:56:18:30:d8:e3:7d:f9:4a:5e:78:58:93:fb:
2c:a2:ee:30:3d:37:8e:96:be:82:40:3a:8e:af:59:4c:dc:60:
f2:4f:fe:d7:32:c4:85:7c:59:61:ab:ef:12:ff:3e:60:e5:6d:
03:81:93:96:c3:ff:f8:b6:4d:dc:a9:97:fc:fb:94:3a:18:51:
0f:ef:09:af:38:52:99:67:0b:7e:87:e4:a6:b1:8c:98:3d:4a:
fd:1b:1c:bf:11:b0:93:0b:b7:8e:54:df:5e:ca:e6:d0:b5:f1:
cd:82:a0:65:38:ec:a7:ca:49:de:b2:ef:6d:ef:80:42:d7:97:
06:c2:b1:fd:d5:db:b4:3e:58:c8:e8:1f:51:97:82:c1:21:af:
37:79:f7:a0:a1:53:6c:c5:30:3d:cd:ea:ed:02:cb:09:44:32:
d3:a2:4f:56:ff:fb:35:66:5c:2e:64:ad:e6:a5:34:8a:0c:6d:
45:65:03:ce:47:18:9b:db:3a:b0:55:e2:0a:72:e5:1d:3c:bc:
b0:ec:c8:55:c0:be:66:75:79:a1:2e:8e:89:6a:48:7c:4f:72:
26:80:96:92:cb:69:0a:a9:44:b1:b1:c7:45:31:73:f4:a9:ba:
ee:22:09:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:58 2023 by rpki-client on console.sobornost.net