Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/C9941972BFD111ECA4347934C4F9AE02.roa
File: C9941972BFD111ECA4347934C4F9AE02.roa (raw, json)
Hash identifier: uUixwZgAKJdAJfajFuzzCHBsqjvEPZ7XFnCGYF3iKmc=
Subject key identifier: C0:60:68:CB:BF:CD:53:E3:38:A0:E9:D8:51:CF:91:37:AA:B6:88:75
Certificate issuer: /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3
Certificate serial: 0272
Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/C9941972BFD111ECA4347934C4F9AE02.roa
Signing time: Fri 27 Jan 2023 04:13:26 +0000
ROA not before: Fri 27 Jan 2023 04:13:26 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 134382
IP address blocks: 103.178.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 626 (0x272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3
Validity
Not Before: Jan 27 04:13:26 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63d34f66-3182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:59:1f:73:69:d9:2c:fa:03:ef:67:8b:fd:
c4:92:27:a9:f7:dc:f8:7d:03:fd:2c:78:63:94:a7:
f9:de:3f:59:7c:a3:66:b3:7c:7c:d1:85:87:89:86:
88:6e:bf:e0:34:4f:6e:20:3c:1a:80:a7:db:bd:8a:
29:c2:9f:78:5d:62:f2:1b:cf:bd:6b:b1:0a:83:08:
21:96:ea:c5:3d:87:fe:32:90:a7:52:49:48:86:39:
e5:e0:21:71:2b:f3:79:8b:e3:fb:68:3e:61:f8:79:
94:0f:db:82:66:24:70:a3:95:af:e3:80:af:16:14:
e5:f0:dd:61:ba:84:ee:16:f2:fb:79:ca:b3:48:13:
21:bd:53:04:cf:52:9b:ef:50:c2:d5:44:34:33:b3:
69:e2:a2:a0:d6:95:cf:80:34:9a:d6:13:33:0f:66:
64:13:66:7d:94:19:29:0d:72:f0:ca:82:50:96:0c:
55:23:c0:9e:03:5f:8f:a6:ba:f0:33:fd:42:85:7a:
ef:84:b9:66:5f:bf:ab:96:fd:48:17:a7:10:47:3f:
22:c5:4f:94:8a:97:56:74:42:02:e6:51:65:c7:6d:
27:0f:0f:ce:ec:94:96:de:e2:0a:fc:77:90:40:a8:
a2:12:5d:d9:01:ba:2a:24:fb:72:77:8d:f7:74:f2:
9b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:60:68:CB:BF:CD:53:E3:38:A0:E9:D8:51:CF:91:37:AA:B6:88:75
X509v3 Authority Key Identifier:
keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/C9941972BFD111ECA4347934C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.221.0/24
Signature Algorithm: sha256WithRSAEncryption
10:c8:f2:11:10:cd:8d:dd:f3:97:43:1f:d1:37:36:23:ec:94:
aa:c2:6d:f6:9b:dc:11:55:92:88:50:74:c4:61:2e:10:f3:f5:
15:8a:36:0d:cc:98:e3:0f:05:d8:11:47:67:c1:39:28:cc:f7:
cc:67:6b:fe:7e:5f:3b:5d:b6:09:42:49:0b:d3:85:73:59:68:
97:08:e5:29:49:33:b3:a7:e6:96:48:fd:de:61:84:da:80:49:
83:a7:01:57:3c:18:f2:11:29:9b:3d:3a:e4:09:98:f9:05:08:
cf:37:de:15:3f:5a:a0:32:54:95:33:05:3b:55:db:b2:91:0a:
43:ba:0d:da:03:a5:b5:37:5a:a8:f0:1c:48:58:1f:5d:4f:23:
81:9e:f0:5d:0d:fd:47:ae:ca:a3:0b:03:66:2e:62:f9:e9:37:
9b:38:d2:bb:56:93:60:8a:c1:f9:66:43:96:61:05:6f:a0:ff:
f3:64:94:50:1e:c1:eb:8b:06:b1:67:08:90:f4:4f:18:9c:32:
ba:53:6c:8b:06:aa:29:0b:ac:63:20:c9:a6:fd:78:1c:64:cf:
a1:77:18:ec:4a:0b:b6:7a:dd:d5:65:c9:54:21:c7:dc:71:2e:
03:70:ab:40:80:ec:0b:d9:ac:65:37:15:80:92:8d:68:d6:38:
8d:64:6a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:36:17 2023 by rpki-client on console.sobornost.net