Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CF1642DCF29A11E98F388E35C4F9AE02.roa
File: CF1642DCF29A11E98F388E35C4F9AE02.roa (raw, json)
Hash identifier: eX2z8/0NH9meBFWt6c5e2Vb0ah923eUPB6ciGnHMdY8=
Subject key identifier: 96:87:37:5F:65:E2:56:A2:A7:47:5F:3E:16:2E:03:0B:59:06:C4:5D
Certificate issuer: /CN=A91FFE9F/serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F
Certificate serial: 0DE8
Authority key identifier: 0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CF1642DCF29A11E98F388E35C4F9AE02.roa
Signing time: Sat 04 Nov 2023 18:26:08 +0000
ROA not before: Sat 04 Nov 2023 18:26:08 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 23750
IP address blocks: 103.130.156.0/24 maxlen: 24
103.130.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3560 (0xde8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFE9F/serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F
Validity
Not Before: Nov 4 18:26:08 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65468cbf-fff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c4:cb:30:2c:f7:dd:aa:7e:1f:be:de:3a:b8:
a4:80:49:4b:a1:7a:46:02:bb:bc:cc:1f:22:07:f1:
2c:22:0e:c7:a8:b6:27:4d:ac:2b:b7:9f:92:cb:0d:
c2:0b:cf:15:fe:9a:9c:25:ea:5b:72:30:92:5f:b3:
fa:c5:23:13:db:a4:cb:75:22:39:f7:01:d8:8a:84:
91:4e:24:da:25:7e:b3:68:fb:67:b1:fd:fd:6c:8d:
5c:f7:c1:92:9a:08:b0:4a:1f:6c:9b:76:68:f4:95:
6c:58:ec:d9:1e:87:70:11:6a:07:27:0b:32:6f:3e:
ee:e4:f8:ba:59:0b:fd:39:38:61:1e:7f:39:1c:6c:
bf:68:36:4a:4e:80:75:a0:bd:e3:03:88:7c:1b:81:
e3:ea:15:ad:0d:84:c6:88:1f:33:e2:46:7e:43:76:
09:f9:4d:7d:52:2f:ef:c2:b1:03:f6:f7:87:5e:7f:
31:01:df:85:b8:3e:cd:58:2a:02:38:d3:4d:e1:4a:
5b:1a:ca:bb:64:83:4b:35:c9:a3:ef:92:de:88:6c:
c8:04:e1:6a:3b:10:64:2f:62:43:4f:12:be:17:0a:
5f:c9:bd:af:3d:7f:e5:1c:0e:9e:f8:64:cd:42:7c:
70:1a:99:6e:f5:03:c5:bf:be:b5:52:25:84:70:56:
d2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:87:37:5F:65:E2:56:A2:A7:47:5F:3E:16:2E:03:0B:59:06:C4:5D
X509v3 Authority Key Identifier:
keyid:0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CF1642DCF29A11E98F388E35C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.156.0/24
103.130.158.0/24
Signature Algorithm: sha256WithRSAEncryption
06:03:f9:81:dc:53:60:b6:ae:2b:30:38:27:42:47:2b:5d:d4:
97:a0:a2:30:a9:5d:9f:08:9c:55:bf:fa:43:f1:e5:6b:8d:cc:
da:66:e7:7c:99:6b:67:60:77:af:17:e9:f1:40:86:6b:40:61:
ac:4e:d8:f3:5f:9d:76:ae:21:90:98:79:1d:69:72:c9:18:6e:
8a:20:1e:d2:f9:f2:9d:b1:8f:d1:93:2b:fb:c8:dc:da:ed:b5:
1c:7b:60:9f:03:7a:d6:76:b8:0c:d0:3f:2c:76:21:39:e7:d2:
98:53:e4:ab:2a:ec:10:9d:ee:a5:5a:63:13:a7:f1:97:39:0e:
44:1f:09:48:d2:04:c3:81:d9:44:15:f2:f2:74:3b:09:9d:0c:
3b:35:ad:f6:32:47:ba:3c:25:0a:a6:4d:64:28:a3:bc:53:61:
b5:22:2b:56:2b:d8:28:0d:9a:1a:27:0a:69:d6:15:8d:2a:4c:
c3:52:d3:c6:4d:68:0d:86:6b:e2:d7:fa:94:7c:7e:12:1c:a4:
04:81:c7:c2:e3:e8:b4:92:71:a2:28:f2:24:60:83:32:52:13:
f0:7a:b4:13:5e:4d:cd:a1:61:e8:85:b3:33:34:55:7d:ad:29:
22:b9:ef:f1:3c:93:65:7a:a2:f3:f1:7b:21:1c:81:b0:ca:d9:
6b:ab:76:7d
-----BEGIN CERTIFICATE-----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Generated at Fri Dec 29 15:36:24 2023 by rpki-client on console.sobornost.net