Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/FBDB89C68F5D11EEA2412687C4F9AE02.roa
File: FBDB89C68F5D11EEA2412687C4F9AE02.roa (raw, json)
Hash identifier: 1wmFQOf8Hb2wUb9mwR4FlDnZ31j+L9YmJHenU5HCi4c=
Subject key identifier: 91:BF:EB:B3:A9:6E:DD:48:1F:63:22:A0:41:3D:CA:FC:6B:AA:72:3E
Certificate issuer: /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Certificate serial: 67
Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/FBDB89C68F5D11EEA2412687C4F9AE02.roa
Signing time: Thu 30 Nov 2023 08:53:52 +0000
ROA not before: Thu 30 Nov 2023 08:53:52 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 147287
IP address blocks: 103.120.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 13:59:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Validity
Not Before: Nov 30 08:53:52 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=65684d9f-5aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cb:bd:86:1c:84:13:74:4c:9d:51:b8:2b:07:
12:31:3e:e2:04:c5:b2:ba:62:dd:1c:22:76:db:ba:
16:63:63:1a:2a:f1:4f:97:b9:c4:65:8c:ae:b8:8a:
af:f2:51:71:d0:be:64:65:f5:de:36:79:7c:17:31:
6e:b9:20:e0:88:b9:1c:15:0c:e0:9a:73:f3:3e:3b:
99:64:5e:ca:b1:71:ea:d8:7b:cb:80:df:19:df:ff:
bd:9d:81:dc:f0:55:9b:4e:cd:74:05:28:b8:d1:90:
e3:4d:0e:b4:d5:af:57:24:bb:50:d3:c7:c5:15:4a:
5a:cb:ac:3d:ca:04:82:4d:e6:e9:b6:61:cd:79:0d:
1d:64:2b:bf:3a:d6:f8:ac:0d:0e:e1:e7:28:e5:0a:
00:4a:f7:b4:27:76:6d:dc:cd:4a:b6:d9:41:d0:d5:
21:e5:25:44:ed:df:94:b3:af:43:33:2b:aa:09:5d:
06:f5:a4:4d:57:d5:1b:05:37:a4:7f:af:a4:2e:d7:
9b:a3:a0:5a:d8:1c:80:36:63:bb:98:eb:08:23:a5:
20:60:33:fe:31:dd:98:ca:9b:aa:49:ea:8d:c9:45:
20:d2:6d:ce:42:b0:67:28:0e:1f:98:71:27:35:56:
16:8a:47:35:56:80:84:19:eb:18:8a:2d:f0:28:4b:
d7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BF:EB:B3:A9:6E:DD:48:1F:63:22:A0:41:3D:CA:FC:6B:AA:72:3E
X509v3 Authority Key Identifier:
keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/FBDB89C68F5D11EEA2412687C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.120.14.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:eb:17:bf:53:7a:ee:29:f9:d0:85:cb:cb:cd:a2:42:c7:7c:
40:54:de:aa:ec:ad:b0:c2:59:2a:e5:fd:39:0d:5a:91:d3:f9:
41:03:65:02:c5:10:15:16:70:fa:ed:62:fe:1d:ae:16:a8:d9:
98:5d:81:53:8c:04:49:a1:ab:b2:6f:93:ad:d2:35:f8:42:3b:
85:72:43:e9:49:7f:a9:12:b0:89:01:08:7f:d0:c4:40:18:56:
ab:8d:04:01:6f:28:9e:a6:4c:72:1f:17:e0:60:d5:90:2a:ca:
68:e9:0a:e5:a2:31:d8:d6:6b:ad:3f:d6:43:a1:a3:fd:f2:5b:
6d:b7:3f:7d:9e:71:c2:c7:99:1f:d4:15:36:69:ab:6d:e1:16:
8d:96:f1:55:44:98:ff:99:bb:91:6d:e2:2c:34:88:4b:ee:71:
d5:c1:0a:30:7f:68:7b:53:0f:91:0e:a1:53:70:e0:a4:41:4a:
99:d9:ec:b3:86:bd:dc:14:f7:57:62:e9:f3:7c:55:4e:af:a7:
5f:5f:d0:9a:66:e8:89:1d:d9:25:54:b5:1b:c3:76:61:8c:da:
d9:b4:e3:78:17:24:5b:fe:a1:79:b1:f8:1b:d5:1d:13:e1:a7:
47:08:37:bf:9d:67:25:af:cf:41:39:ed:38:1b:09:1d:66:5c:
5c:c3:19:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 17:51:11 2024 by rpki-client on console-fra.rpki-client.org