Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/C86BC12E4D8011EE972A6F42C4F9AE02.roa
File: C86BC12E4D8011EE972A6F42C4F9AE02.roa (raw, json)
Hash identifier: +6vn5lS0B/B+F7/pj3pLi35Hb114w+SSlqsg+HjZndA=
Subject key identifier: ED:68:0F:3D:3F:BC:38:2F:81:29:CA:2B:23:CF:16:C9:43:A7:C8:56
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 266E
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/C86BC12E4D8011EE972A6F42C4F9AE02.roa
Signing time: Thu 07 Sep 2023 13:16:41 +0000
ROA not before: Thu 07 Sep 2023 13:16:41 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 35913
IP address blocks: 103.192.179.0/24 maxlen: 24
103.196.20.0/24 maxlen: 24
103.196.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jul 2024 15:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9838 (0x266e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Sep 7 13:16:41 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64f9cd39-7301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:dd:a8:7e:81:d0:a4:65:39:eb:84:92:93:
4e:6a:0f:23:b1:df:8a:05:3c:4c:24:f7:ef:f8:fd:
41:f2:25:00:6d:55:7d:ea:1c:59:20:f1:fd:0d:43:
5e:b1:bc:3a:3a:a6:80:37:83:c7:2f:4e:f7:ce:25:
71:43:d5:63:21:57:86:63:e3:78:e2:67:2c:34:ab:
e6:34:13:3b:b2:bd:12:f7:66:34:a7:34:54:c5:ad:
f5:e1:fd:14:0e:17:a2:e5:e4:6b:33:28:72:14:f0:
3c:fe:53:5f:15:c7:23:02:35:de:e3:5d:d9:ad:da:
29:26:97:f2:a7:24:6d:f5:28:1e:4e:1b:ba:7d:f1:
8a:c5:81:ad:e2:d1:5e:9c:fc:0a:0f:24:21:b6:db:
34:50:81:59:4e:8c:61:21:b7:70:ab:ba:f1:20:35:
9d:94:8e:68:78:b1:50:bb:95:38:a6:42:0f:19:ee:
cd:fd:ed:ee:64:7e:c5:44:c7:06:f0:1f:55:91:d4:
89:d4:0e:86:e1:95:eb:7d:ea:a6:c2:45:e7:3e:f9:
e0:d6:81:05:f3:00:bc:b6:80:39:95:57:cb:3b:8e:
1e:8a:05:b3:4e:84:b6:ae:c8:e8:b9:6b:5a:0a:78:
25:2a:10:0f:40:98:fd:be:dc:f0:34:e4:a6:c1:ad:
b5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:68:0F:3D:3F:BC:38:2F:81:29:CA:2B:23:CF:16:C9:43:A7:C8:56
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/C86BC12E4D8011EE972A6F42C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.192.179.0/24
103.196.20.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:7f:54:97:16:45:22:a9:fc:64:ff:3a:39:8d:2f:65:52:97:
90:4b:1d:67:da:7c:23:af:94:ce:32:b1:8c:41:00:9f:69:d8:
a7:32:7c:6b:34:4e:f6:c3:a8:c1:5c:ed:54:87:cf:b6:5e:e5:
d0:f5:ef:1a:bf:71:4e:6d:83:27:f0:e7:9b:16:ca:77:c5:50:
ce:2f:96:78:38:4b:30:6e:21:39:dd:fc:fd:d4:9d:33:cc:05:
7a:b5:e3:6a:f5:fe:59:7f:bb:9f:f6:3f:33:41:63:54:6b:5a:
42:e6:36:7b:a7:80:32:42:07:24:49:b0:03:05:ae:e2:dc:5f:
a3:6f:a8:4d:e2:77:bf:aa:5f:72:6d:6b:32:25:a2:4e:93:dc:
ac:a0:44:78:24:ca:75:28:73:7b:98:a6:be:d8:f3:ef:26:48:
05:e0:56:cd:6e:15:b8:ba:09:57:ed:26:b4:10:e0:72:f1:19:
b2:46:fb:b1:59:de:3d:85:f9:a8:3e:3b:26:69:ed:9e:8a:3b:
6e:c8:e3:e5:8d:45:b6:06:a7:50:ed:cf:13:b6:4b:b4:ec:ab:
2c:6b:f0:3a:e7:35:95:1f:af:19:ae:a1:55:eb:09:f4:17:bb:
a1:8a:a5:13:fd:50:1b:c9:ed:98:54:54:08:45:f2:ec:e6:a5:
09:b6:5b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 17:39:17 2024 by rpki-client on console-ams.rpki-client.org