Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E7130C7641C511E8BEC06D36C4F9AE02.roa
File: E7130C7641C511E8BEC06D36C4F9AE02.roa (raw, json)
Hash identifier: RZXiOtmT87OuRDXD3B9Xlx6tXtjGMCGBpxSyPlnbx4w=
Subject key identifier: 4C:DE:8C:83:CB:98:FE:1A:9F:50:03:52:96:F6:37:31:0A:83:79:AA
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 264F
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E7130C7641C511E8BEC06D36C4F9AE02.roa
Signing time: Sun 06 Aug 2023 16:13:27 +0000
ROA not before: Sun 06 Aug 2023 16:13:27 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 58940
IP address blocks: 103.217.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 12:53:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9807 (0x264f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 6 16:13:27 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64cfc6a7-9ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:de:75:db:e8:38:fa:ed:6a:1b:8f:7f:04:60:
99:f0:83:f0:2d:df:bb:e4:0c:0e:d4:3e:a3:65:1d:
47:0c:ad:07:16:38:42:26:81:19:9a:5a:13:3e:26:
1e:18:86:66:85:2a:30:4f:02:78:92:48:f6:0a:88:
b9:f8:f9:24:80:fd:10:a6:6e:f4:8a:1b:01:0b:5a:
86:c8:6b:53:4a:74:54:68:0d:78:5a:27:cc:f1:ac:
ea:3c:e9:25:cf:69:ea:51:27:b3:40:48:76:ad:75:
31:6d:8a:92:25:8a:72:06:08:2f:72:d8:16:ff:fe:
26:d9:8f:c0:a7:41:bf:0e:ad:3a:fb:d0:6f:e3:53:
3d:f8:42:5f:40:1e:c6:d0:2f:ff:f1:35:06:f1:18:
16:b2:a7:08:2e:3a:48:74:e8:36:24:e4:e3:62:60:
bb:c2:54:58:63:f9:2e:fc:be:c0:54:f7:0c:83:e3:
47:2c:19:34:19:00:2b:5d:59:4b:30:d0:50:cf:f3:
1d:73:4a:6c:c0:83:36:8d:24:68:53:cc:a0:65:f6:
bd:b5:f6:72:f9:a9:fd:13:b9:8f:25:8b:9f:25:ab:
e3:20:38:c8:5d:1c:5d:ca:b7:f2:06:dc:85:96:10:
44:b7:c0:bb:3f:e8:4e:8c:2b:3d:31:0d:43:22:ac:
d8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DE:8C:83:CB:98:FE:1A:9F:50:03:52:96:F6:37:31:0A:83:79:AA
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E7130C7641C511E8BEC06D36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.217.254.0/24
Signature Algorithm: sha256WithRSAEncryption
24:b4:96:db:a6:04:e0:14:dc:1a:b4:b2:55:60:96:fb:12:e7:
f0:a7:79:af:e9:88:f8:25:ee:66:15:52:a5:96:94:6b:54:d4:
c7:ce:63:f1:2e:0c:3f:7f:0b:b3:27:fe:dd:f0:17:2d:ac:45:
12:fa:2c:fb:bc:cb:07:50:34:f2:91:4b:04:50:64:80:0e:10:
c3:f0:c3:1e:05:c8:3a:af:89:96:d4:3a:6e:26:8f:63:00:89:
fd:53:ea:60:96:ba:ed:f9:d5:a2:1d:72:96:ec:ed:39:2d:12:
4b:94:39:05:4c:3b:da:35:fa:3a:71:d6:80:54:c8:c2:59:39:
77:df:63:2c:7e:42:04:3b:1d:fb:0f:1d:9e:a2:8e:97:e0:47:
9f:65:57:d6:bf:46:83:7f:8f:2d:cd:67:50:03:a7:79:77:5c:
ba:1b:ec:50:c6:b5:16:a8:51:38:91:bb:4a:8c:50:93:fb:09:
c0:65:f3:bb:bc:81:69:fa:f3:ea:f7:04:cb:2e:b6:a2:7e:03:
59:5f:6c:ba:03:88:1f:e0:e2:3e:bb:15:ad:86:78:6b:4c:0a:
56:3d:4a:5b:a6:15:b4:37:51:09:c2:70:12:96:6d:d0:e7:85:
49:3a:bc:85:32:0d:a7:82:a7:24:12:b4:aa:60:58:6a:91:bc:
0d:41:96:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 18:05:47 2024 by rpki-client on console-fra.rpki-client.org