Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/C1E7447CAC1811EDA8A31B61C4F9AE02.roa
File: C1E7447CAC1811EDA8A31B61C4F9AE02.roa (raw, json)
Hash identifier: 98+iZebrw7jfDpHpe2Oijdj9V13HnwTaUJ2Zxc/Ozus=
Subject key identifier: BA:F5:78:06:35:DD:DD:33:D7:22:CD:09:A6:50:D1:A9:E7:5D:02:EA
Certificate issuer: /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Certificate serial: BB
Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/C1E7447CAC1811EDA8A31B61C4F9AE02.roa
Signing time: Wed 07 Feb 2024 05:16:48 +0000
ROA not before: Wed 07 Feb 2024 05:16:48 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 135345
IP address blocks: 103.179.144.0/24 maxlen: 24
103.179.145.0/24 maxlen: 24
2400:4ce0::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 May 2024 05:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Validity
Not Before: Feb 7 05:16:48 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65c3123f-8200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:b4:af:96:0f:10:e4:de:97:0c:12:87:06:
c5:54:52:d0:bf:b3:36:66:db:2e:ac:30:a5:86:60:
8c:d1:d4:22:17:e1:18:6c:bc:7e:0f:b5:a1:7c:07:
53:1b:06:41:0d:e6:3e:0b:c0:25:7c:69:83:4a:c0:
a1:5c:f2:a8:44:bb:57:c4:60:d9:97:1f:0a:28:46:
0a:62:bb:19:f9:a0:5d:bf:8b:0b:38:d7:c7:3f:2b:
4e:34:70:af:15:9d:6f:aa:2d:a3:a0:85:a2:9e:85:
c3:bf:70:3b:81:da:c3:f7:af:bb:28:ab:ac:30:f3:
18:3e:b8:20:32:0e:d9:30:0e:5a:b5:26:8f:c6:d5:
82:9a:7e:dd:c5:b9:66:41:b8:89:6d:08:15:52:5b:
9f:7f:9e:d5:04:e8:85:33:ef:00:05:77:9f:15:01:
0d:1b:e5:f6:57:20:ff:ef:96:98:78:bd:f5:cf:b7:
b8:1b:17:6b:ca:e7:d7:18:30:7d:39:b4:3a:68:43:
fd:0a:84:12:a6:96:83:c2:0f:16:53:c8:5f:0c:bb:
d8:c0:9f:0e:d1:ba:37:da:ec:cb:e4:6a:ec:25:ac:
dc:0e:8e:25:15:31:98:c8:6a:06:07:77:1d:83:bf:
f3:8e:bb:d4:92:17:bc:34:f2:60:e6:00:63:36:6f:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F5:78:06:35:DD:DD:33:D7:22:CD:09:A6:50:D1:A9:E7:5D:02:EA
X509v3 Authority Key Identifier:
keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/C1E7447CAC1811EDA8A31B61C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.144.0/23
IPv6:
2400:4ce0::/32
Signature Algorithm: sha256WithRSAEncryption
76:bf:80:1b:7c:11:2a:7b:b1:e2:c1:36:4a:a3:b5:9d:9c:00:
14:01:38:01:d5:7a:ba:d3:2a:81:45:61:6b:02:8d:9e:a9:cc:
6b:80:2f:d6:ee:63:ab:7d:38:94:f8:91:d4:cc:14:00:87:d3:
8c:b4:dc:5d:47:ae:5a:50:2b:a2:b0:da:43:23:3a:72:28:e3:
4c:70:62:03:f2:27:03:0a:16:33:b8:17:9f:f4:1b:e0:97:9a:
98:16:58:1c:8c:b7:e3:b1:41:3a:ee:45:1e:19:6e:d1:4c:be:
92:1f:08:d3:24:96:f5:2a:89:26:10:2a:9c:56:01:e0:2a:51:
c1:a2:ad:f4:1c:6f:71:d0:ee:fa:87:3e:7a:48:7f:2d:d1:36:
b1:f9:d5:b3:26:8d:d5:92:74:b5:bd:7b:53:c3:4b:7b:20:c2:
5b:81:f6:fa:2b:a2:13:ac:aa:75:99:a4:b0:f1:0f:2a:d9:ad:
fe:58:c5:b5:31:b2:4c:c3:c8:83:49:59:d4:de:f4:42:c7:e5:
ad:be:1d:81:e3:2b:57:c8:e2:b9:8b:c9:71:47:1a:3f:3d:7b:
80:19:ff:06:95:94:b9:86:19:45:75:75:ce:1f:24:e1:06:6f:
d5:6e:86:e4:7c:a7:51:66:9c:dd:87:98:06:1d:78:5a:26:61:
74:da:61:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:58 2024 by rpki-client on console-fra.rpki-client.org