Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/AB3E3B82BF8E11EA99010B14C4F9AE02.roa
File: AB3E3B82BF8E11EA99010B14C4F9AE02.roa (raw, json)
Hash identifier: UP5gplnVLebQOLZPlj03Z8TOPbsA/aaZIamBvHny+VY=
Subject key identifier: 6D:12:27:DF:22:99:C0:D4:53:DE:A7:04:7D:48:DD:B1:27:E7:BA:81
Certificate issuer: /CN=A912D5C1/serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394
Certificate serial: 0AFA
Authority key identifier: E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/AB3E3B82BF8E11EA99010B14C4F9AE02.roa
Signing time: Wed 24 May 2023 20:20:23 +0000
ROA not before: Wed 24 May 2023 20:20:23 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 139033
IP address blocks: 103.138.182.0/23 maxlen: 23
103.138.182.0/24 maxlen: 24
103.138.183.0/24 maxlen: 24
2404:d240::/32 maxlen: 36
2404:d240::/48 maxlen: 48
2404:d240:1::/48 maxlen: 48
2404:d240:2::/48 maxlen: 48
2404:d240:3::/48 maxlen: 48
2404:d240:4::/48 maxlen: 48
2404:d240:5::/48 maxlen: 48
2404:d240:6::/48 maxlen: 48
2404:d240:7::/48 maxlen: 48
2404:d240:8::/48 maxlen: 48
2404:d240:9::/48 maxlen: 48
2404:d240:a::/48 maxlen: 48
2404:d240:b::/48 maxlen: 48
2404:d240:c::/48 maxlen: 48
2404:d240:d::/48 maxlen: 48
2404:d240:e::/48 maxlen: 48
2404:d240:f::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Sep 2023 08:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2810 (0xafa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D5C1/serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394
Validity
Not Before: May 24 20:20:23 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=646e7187-61a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b8:bb:2a:3f:d3:23:be:01:dd:ac:a1:7b:76:
ad:94:76:47:4d:70:df:2b:bd:c9:6b:1a:4b:60:8e:
83:68:26:b0:09:d1:39:2d:52:17:93:be:ec:c2:62:
f1:8a:26:57:38:a2:82:fd:08:9e:79:ea:7b:60:ac:
4e:c9:a6:3b:15:e6:b1:92:cf:66:6c:da:b5:0c:c8:
c1:6a:75:27:e0:0f:eb:62:31:0f:38:dd:40:0d:39:
b7:4f:29:c1:d0:a5:2b:a4:e0:b3:57:65:15:92:cd:
44:68:e9:85:42:b7:42:14:c3:c1:29:5e:5e:e4:61:
b0:15:50:7d:4a:7a:09:ac:63:49:a6:b1:8c:b6:6f:
77:32:3d:49:32:01:b8:d9:a5:18:40:c9:fc:80:9a:
19:e4:08:48:10:76:e0:72:2f:6a:c3:14:d1:3c:4e:
a0:ff:bb:47:4a:ca:3e:20:5c:c9:4e:7f:23:05:e5:
b2:81:2b:e4:15:b9:4b:44:b6:3e:ce:ad:ba:75:b8:
c6:93:11:f9:4f:1b:e0:7b:b0:38:bf:af:14:3e:af:
91:c7:65:74:80:63:71:e3:dc:67:49:67:9c:2e:b2:
e3:8b:32:a4:ab:eb:36:6e:86:11:7a:73:05:46:c3:
0a:83:cc:d9:61:86:ff:70:fe:66:cb:1c:0b:20:e5:
9d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:12:27:DF:22:99:C0:D4:53:DE:A7:04:7D:48:DD:B1:27:E7:BA:81
X509v3 Authority Key Identifier:
keyid:E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/AB3E3B82BF8E11EA99010B14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.182.0/23
IPv6:
2404:d240::/32
Signature Algorithm: sha256WithRSAEncryption
2d:dd:bf:dc:6d:48:b8:00:d4:d6:61:da:f7:1e:47:24:44:1b:
65:41:64:78:77:fe:14:a4:40:77:6b:ce:24:34:03:f9:43:f7:
e6:3c:28:99:ff:a1:cc:31:b8:51:cd:d2:fb:1d:b7:15:bc:84:
9a:18:92:26:61:37:d5:3c:15:74:02:72:0e:b7:b8:06:ef:3d:
d6:44:a0:b8:cd:bf:99:5d:2e:02:d6:57:ca:a4:88:69:a7:80:
2d:3f:67:51:79:b6:ea:93:bb:0e:3a:31:8e:75:af:74:ca:b5:
5e:4e:d4:89:eb:7c:a3:10:70:21:7d:7d:dd:72:a4:26:7a:50:
fc:0e:7d:55:e7:71:c7:61:0e:2f:5c:15:d1:25:27:48:57:5b:
7a:e3:39:dc:7b:05:90:1e:68:e2:f3:5a:c6:f8:07:0c:2e:4d:
ab:38:f9:33:d4:3d:1f:5a:cb:54:94:9d:5e:bf:bd:88:81:1e:
07:c7:b0:08:14:35:56:b7:f7:4b:fb:68:51:c6:7c:ef:39:2b:
7a:a3:a5:bd:14:be:7d:a1:de:f9:6f:9c:f4:57:3e:9e:8c:cd:
d4:83:1f:d9:61:66:c3:c7:37:f3:cd:dd:a9:b8:18:85:13:1e:
37:9f:ba:fc:80:43:8e:e7:7d:62:20:88:97:d3:41:fc:b7:e2:
71:bf:a7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-ams.rpki-client.org