Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/A44706423BB111ECAA6DEF26C4F9AE02.roa
File: A44706423BB111ECAA6DEF26C4F9AE02.roa (raw, json)
Hash identifier: 9D4N1G5/rwMbOkwzKuMcg12JaB5qmMaEzFk3v1Nmx0I=
Subject key identifier: 1D:33:08:D9:92:16:8D:B9:DB:B3:B9:87:04:AB:C2:B5:0C:2C:3E:B5
Certificate issuer: /CN=A91160E4/serialNumber=0A8F947E9CA0FFA45478EC62A7EBAD927B041930
Certificate serial: 0322
Authority key identifier: 0A:8F:94:7E:9C:A0:FF:A4:54:78:EC:62:A7:EB:AD:92:7B:04:19:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/A44706423BB111ECAA6DEF26C4F9AE02.roa
Signing time: Fri 09 Jun 2023 03:41:07 +0000
ROA not before: Fri 09 Jun 2023 03:41:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141990
IP address blocks: 103.164.8.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 13 Mar 2024 05:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 802 (0x322)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91160E4/serialNumber=0A8F947E9CA0FFA45478EC62A7EBAD927B041930
Validity
Not Before: Jun 9 03:41:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64829f52-4634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9e:5f:8a:39:99:0d:ad:87:a0:0c:9b:51:97:
40:ce:ff:ce:3a:51:12:e0:f0:47:1a:57:7d:b7:03:
08:40:00:22:05:cc:37:74:5f:b9:2a:73:71:58:37:
be:8d:5c:8f:52:de:17:cb:53:10:82:78:74:b7:68:
a5:80:9b:45:5d:66:39:5c:ba:42:c0:b1:ca:fd:f7:
90:a4:78:ac:c0:8d:17:5b:c2:26:7d:a7:a2:cf:5f:
8b:7e:a6:44:e9:35:50:03:d8:c3:9b:3f:de:6f:8b:
8f:a7:1a:68:05:07:17:d5:12:93:0b:13:90:12:4e:
ef:16:1e:6f:7e:ed:eb:4e:f9:12:20:26:19:68:68:
c8:f5:c2:51:4b:7f:c8:9d:0a:15:79:35:bb:39:cc:
d8:dd:f1:b6:49:4b:0f:ad:75:c9:f0:8c:65:2f:fb:
56:a8:21:58:e2:12:b7:fc:66:2b:d8:32:08:19:6a:
27:39:bd:5a:c4:70:b0:b6:57:11:2e:2d:a0:44:ea:
63:65:94:88:81:0f:61:43:e1:96:bf:d5:65:6d:ba:
fc:18:d0:23:24:b5:20:1b:1a:6a:b1:08:b2:bd:7d:
0e:5d:0e:95:74:3e:04:16:cb:20:50:db:a9:89:60:
75:9a:a1:b1:e3:b1:b7:3e:1b:58:fa:61:54:2b:b6:
87:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:33:08:D9:92:16:8D:B9:DB:B3:B9:87:04:AB:C2:B5:0C:2C:3E:B5
X509v3 Authority Key Identifier:
keyid:0A:8F:94:7E:9C:A0:FF:A4:54:78:EC:62:A7:EB:AD:92:7B:04:19:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/A44706423BB111ECAA6DEF26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.164.8.0/23
Signature Algorithm: sha256WithRSAEncryption
78:de:5d:93:27:ef:6b:0d:7b:97:59:b1:01:26:dc:aa:95:85:
ba:bf:9e:03:f6:e6:29:17:aa:aa:ab:72:e7:44:7a:a6:fe:28:
eb:32:e6:7e:7c:a5:01:56:2d:43:e6:de:62:dd:38:6f:e3:fb:
fc:60:43:4c:38:c0:0b:a3:61:c7:e2:d0:e2:1c:78:30:05:92:
a6:da:72:29:f6:45:7c:85:c4:0e:5c:2c:33:d5:4c:d4:53:3e:
44:a6:ea:78:14:41:fb:08:2a:8a:9d:ef:c7:a5:3e:16:a1:15:
72:81:1e:4b:ef:0d:05:3c:9a:fd:30:92:7f:31:34:7b:49:3c:
06:3b:35:3a:32:19:f0:d9:fa:06:4d:57:f3:4e:ac:1d:17:d9:
27:90:77:9d:49:fa:c9:46:a4:23:78:65:1a:f1:4a:9c:71:5b:
0f:c4:d0:76:e9:2a:ba:9a:69:58:03:05:82:b4:2d:af:80:94:
55:f6:28:ca:e1:6e:8f:15:4e:57:73:df:a2:4a:14:50:f5:a5:
11:6b:b1:e8:cd:a4:8f:de:95:05:11:75:91:67:4f:60:3e:48:
57:f8:53:d7:63:ab:55:80:30:70:00:36:8c:d2:a3:10:7e:6d:
1e:91:d5:59:c3:67:67:ee:f3:16:c4:09:5a:14:05:d0:1f:a3:
8e:c5:ac:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:55 2024 by rpki-client on console-fra.rpki-client.org