Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/E519895CC83411EAB0529429C4F9AE02.roa
File: E519895CC83411EAB0529429C4F9AE02.roa (raw, json)
Hash identifier: rKQbYEsCvG2MwF1wPyCC6qhdDW/FTmpTyCVoM45iPJM=
Subject key identifier: 33:4A:38:6A:62:2D:C5:02:84:86:D5:AA:34:C3:F4:5C:1E:D6:9B:6F
Certificate issuer: /CN=A912C2B1/serialNumber=CF3E7B742A4C52E0F8F7F8E7405FB2BBBCF4CAA3
Certificate serial: 0C13
Authority key identifier: CF:3E:7B:74:2A:4C:52:E0:F8:F7:F8:E7:40:5F:B2:BB:BC:F4:CA:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/E519895CC83411EAB0529429C4F9AE02.roa
Signing time: Fri 06 Oct 2023 18:56:33 +0000
ROA not before: Fri 06 Oct 2023 18:56:33 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 61317
IP address blocks: 103.143.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 10:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3091 (0xc13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2B1/serialNumber=CF3E7B742A4C52E0F8F7F8E7405FB2BBBCF4CAA3
Validity
Not Before: Oct 6 18:56:33 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65205861-f54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ba:eb:fb:b2:ce:69:d2:3a:9a:ba:ec:76:17:
7c:27:0b:ac:de:7e:47:e0:e4:d1:5f:ab:61:9d:21:
f3:2e:11:62:ca:65:b0:ae:96:f1:96:48:7e:78:9d:
fe:39:41:60:76:1f:6b:95:a8:9c:0f:83:72:1b:8e:
3f:6f:44:6a:0b:28:f5:50:89:8f:7e:ef:da:25:e7:
83:33:85:9e:2f:74:58:be:0c:f1:6f:0f:f0:90:f9:
11:7d:a2:67:66:b0:c6:a8:66:be:e0:b5:4e:54:15:
28:1d:b4:6a:e3:da:15:13:b4:2b:1d:c6:e2:6a:32:
8e:22:13:40:a3:bb:5f:c5:1d:5c:18:00:67:a5:0c:
72:49:a2:e9:6b:20:6f:b9:d1:5a:34:fe:bd:96:1d:
7e:1c:55:8b:de:68:d7:e1:6d:9d:89:fd:8a:43:d9:
12:40:ce:b2:45:b2:e1:c8:ed:44:ad:bc:1e:61:44:
dc:ca:38:41:e9:f6:eb:a6:69:8f:0d:0a:58:3a:43:
7b:b0:a4:76:68:c7:7a:37:be:a9:dd:d0:ff:2d:ee:
dd:aa:7d:a5:74:37:cc:4d:b2:ad:58:74:a2:18:bd:
d7:bb:3b:86:b3:ff:cf:65:63:2b:21:21:9e:b6:e7:
b1:34:e2:78:ed:c9:01:b2:63:10:d4:b2:49:5f:34:
43:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4A:38:6A:62:2D:C5:02:84:86:D5:AA:34:C3:F4:5C:1E:D6:9B:6F
X509v3 Authority Key Identifier:
keyid:CF:3E:7B:74:2A:4C:52:E0:F8:F7:F8:E7:40:5F:B2:BB:BC:F4:CA:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/E519895CC83411EAB0529429C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.143.77.0/24
Signature Algorithm: sha256WithRSAEncryption
08:6b:cd:9b:0e:9f:10:07:96:24:5f:0d:2d:4a:c4:b1:42:06:
c6:9e:33:cf:01:80:9c:33:91:23:5b:a4:27:55:9e:0e:4b:21:
5c:1e:1d:2f:fa:63:66:80:7d:2d:00:a3:81:52:f1:0e:ba:fb:
f3:d8:f2:fd:3c:68:8b:03:08:15:ea:42:bf:9f:73:64:f8:6b:
4d:d9:11:99:39:73:13:b6:1c:59:37:28:d7:ce:94:1f:a4:02:
72:5d:ee:32:c8:c3:3b:a9:c9:fd:d4:4f:74:ce:7b:ef:0e:2b:
40:8f:4b:1a:75:da:8e:9a:39:1a:19:b4:7a:16:cf:80:9a:c2:
e0:4b:95:86:30:fb:f0:7d:f7:8f:84:0f:e3:11:64:a7:e2:39:
01:c3:41:46:d9:e0:83:a1:00:5f:11:8e:68:22:25:3d:b7:0b:
10:93:dd:cc:a0:3d:d5:4b:0b:25:db:22:30:3f:da:0f:58:c4:
9a:33:2c:7a:3a:93:65:08:52:40:75:1f:40:5f:41:61:bb:26:
1e:58:3e:5e:8e:16:5a:c4:f0:04:c2:28:40:d6:cf:c5:bd:19:
f0:19:9e:f7:1a:e0:a8:da:22:1e:da:9d:8c:43:de:0b:92:79:
f3:35:e4:78:05:a0:24:eb:8a:02:bd:41:c7:7a:e0:6b:42:86:
84:36:8f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 15:17:06 2024 by rpki-client on console-ams.rpki-client.org