Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/F48EB0CC5C2711EDAB91A60AC4F9AE02.roa
File: F48EB0CC5C2711EDAB91A60AC4F9AE02.roa (raw, json)
Hash identifier: EeXmatVHFGG9R5OQKW7gZPjjXUoiPCs+kUD27ydbHh0=
Subject key identifier: 5E:65:73:82:1B:CA:5F:E6:B7:53:9F:09:74:6C:E8:D2:4C:88:EB:E9
Certificate issuer: /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Certificate serial: 18FB
Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/F48EB0CC5C2711EDAB91A60AC4F9AE02.roa
Signing time: Sun 02 Apr 2023 17:23:54 +0000
ROA not before: Sun 02 Apr 2023 17:23:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 997
IP address blocks: 103.19.8.0/23 maxlen: 24
103.93.252.0/24 maxlen: 24
103.93.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6395 (0x18fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Validity
Not Before: Apr 2 17:23:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6429ba2a-31a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:fe:43:c3:49:74:d2:c2:65:e2:4d:1d:0f:
4e:81:7a:46:fd:4b:94:98:f2:bc:48:5f:a7:5b:c9:
35:41:0a:51:f8:76:34:2b:8d:e7:74:fe:ac:ff:00:
35:06:79:60:46:aa:88:42:0a:99:f4:19:84:d7:d5:
84:c2:5b:31:25:9d:6f:85:18:b6:c1:ab:eb:22:39:
86:15:a7:fd:e7:d4:9e:e2:f1:79:66:05:db:5e:4f:
53:c7:85:d2:2a:b5:57:ea:5a:90:bc:d3:9d:a1:00:
f6:e4:d3:18:ac:35:09:95:b8:5e:08:32:2f:84:de:
ab:53:ff:f1:7d:94:0a:18:b8:3a:dc:3a:ab:16:6f:
13:e7:01:57:43:1e:a7:04:6b:bc:c3:24:81:83:31:
bc:12:5a:6b:a8:e1:c8:b3:4d:af:85:26:53:34:be:
82:4a:a5:d5:a4:b1:a9:ea:53:15:f2:32:73:cd:cc:
78:83:c1:ca:74:31:c0:52:d9:16:4a:3b:9d:e9:b0:
f3:18:83:e1:28:f8:db:1d:1c:a6:dc:2e:6c:40:70:
e5:c0:2d:d1:f6:de:1c:8f:47:83:ca:25:ee:0f:51:
c4:a5:48:3c:23:42:5e:58:14:36:c0:db:45:6b:43:
33:93:48:d3:82:a0:ef:58:91:c5:e3:21:de:fc:90:
34:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:65:73:82:1B:CA:5F:E6:B7:53:9F:09:74:6C:E8:D2:4C:88:EB:E9
X509v3 Authority Key Identifier:
keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/F48EB0CC5C2711EDAB91A60AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.19.8.0/23
103.93.252.0/23
Signature Algorithm: sha256WithRSAEncryption
12:da:14:f2:fa:0c:4c:8d:f0:28:fb:8d:57:5c:cc:4b:3d:e3:
c6:86:b7:28:c6:90:24:4a:36:bb:05:8a:f1:47:f6:46:cd:37:
6b:a8:4f:be:f6:18:7b:74:4d:c9:e0:39:d4:4e:53:16:fb:fc:
e6:91:93:83:18:d3:fe:f1:1f:16:ae:3b:b0:c0:b5:9e:35:13:
41:13:47:84:81:0f:28:80:49:d0:58:b9:96:cb:9b:e2:e9:c5:
bd:0e:33:be:2f:4e:67:08:5d:a4:48:65:9c:1d:b8:7d:33:84:
97:e7:9c:32:ba:b3:36:b0:48:c1:b4:8a:fb:8f:79:a1:d1:83:
7b:81:7b:34:ca:14:b3:c1:40:25:81:b3:7b:3c:95:3e:ce:0e:
16:9a:18:bd:26:24:e5:49:6a:88:92:df:3f:de:34:c1:80:f9:
a6:a2:f5:5e:60:f2:9f:81:5b:12:0b:43:59:c2:8f:55:69:99:
3b:d4:25:dd:65:78:fa:4b:63:54:bb:01:14:44:f5:90:c9:0f:
50:1a:66:71:e5:c9:ff:71:db:54:ee:22:90:4b:d9:4b:1b:5d:
1d:9c:2d:c5:52:d6:04:b6:a9:50:3b:b6:e7:a5:72:28:05:db:
17:63:1a:45:28:d5:f7:2f:8e:7b:48:9a:02:b4:30:15:17:db:
b8:bf:73:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:50 2023 by rpki-client on console.sobornost.net