Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/F474CE1CE69E11ED841AC682C4F9AE02.roa
File: F474CE1CE69E11ED841AC682C4F9AE02.roa (raw, json)
Hash identifier: 97J9i6KxKYaqlpvfqytpJX/yLhhD8Hj4XTmh7AeIiRs=
Subject key identifier: F0:B4:6C:8B:9B:56:6F:8D:D6:8F:1A:01:AA:54:3C:59:87:FB:56:03
Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial: 04B4
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/F474CE1CE69E11ED841AC682C4F9AE02.roa
Signing time: Tue 05 Sep 2023 00:51:31 +0000
ROA not before: Tue 05 Sep 2023 00:51:31 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 147186
IP address blocks: 103.240.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 21:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1204 (0x4b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Validity
Not Before: Sep 5 00:51:31 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=64f67b92-cede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:6b:85:5a:af:3a:25:c6:e5:7f:c3:81:99:
d3:92:b7:e4:c9:03:de:56:3b:7d:bf:fd:9a:dd:c5:
42:5a:1e:ac:fe:c0:77:03:77:06:58:03:ad:e4:75:
19:1b:ca:21:09:9b:e2:c3:14:0e:3c:db:6f:1e:7a:
17:b1:ba:c7:91:a3:c0:3a:60:90:0b:45:7c:ca:1b:
86:c0:95:2b:e1:d2:fe:7f:6a:dc:64:ac:cb:0d:34:
f9:71:12:fa:12:d8:d2:03:48:0c:74:b0:17:8a:f9:
32:97:0c:16:e9:07:c6:30:a5:38:36:ca:d9:ce:6d:
4f:26:54:4f:0f:78:85:7b:d2:6b:f4:94:b4:9f:4e:
c6:a6:bd:30:96:f0:96:09:11:d7:50:f4:48:c9:a1:
f0:81:fb:89:73:dc:c9:90:49:90:36:8b:64:4f:9f:
ec:08:b1:ef:47:6f:f0:5c:a9:95:62:56:1f:34:21:
29:e5:54:45:a3:00:b2:24:ea:28:ae:05:1b:5a:c1:
0d:ee:97:bc:14:fc:1e:1e:34:a1:b8:24:22:01:23:
6c:c6:16:17:5e:58:7f:01:d9:e9:40:15:72:ec:1a:
05:09:18:c7:21:c0:5d:9c:3c:8d:6c:bd:3f:10:6b:
db:88:46:61:09:85:28:ed:a8:ba:d1:f8:7c:41:3a:
5a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B4:6C:8B:9B:56:6F:8D:D6:8F:1A:01:AA:54:3C:59:87:FB:56:03
X509v3 Authority Key Identifier:
keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/F474CE1CE69E11ED841AC682C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.240.199.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:99:ab:47:7f:99:38:bc:13:ee:59:88:6d:6f:cc:d9:d6:b2:
92:ae:72:3e:74:e3:5e:b5:c2:f6:0d:24:32:3e:54:d9:94:bf:
1d:8f:63:f9:bd:28:66:0a:72:f7:31:75:55:40:32:19:43:f0:
12:8c:93:b6:3a:12:a0:bc:74:51:ff:4d:3e:14:a2:ff:06:2d:
ce:25:5a:13:25:9d:e7:d1:15:fd:4f:98:1c:69:96:6a:86:1a:
7f:a9:d7:0f:86:aa:06:ac:73:63:ca:c3:8c:6c:68:d0:b5:fd:
2d:71:0f:0e:18:4c:7d:13:14:49:3f:37:df:e4:f4:a1:b7:48:
35:8c:38:20:85:39:4b:cf:e1:79:ab:2f:ad:ba:6e:b6:8c:9d:
98:0d:db:c5:21:a3:c4:bc:68:dc:74:3d:84:6b:9b:ab:58:18:
59:93:01:d5:96:16:43:b1:c6:38:cc:d2:61:f0:cd:ee:cb:ca:
a4:ee:de:e7:43:40:2f:98:84:a3:ef:f6:a7:24:66:fd:3d:8d:
9a:db:df:d2:34:fd:00:0d:e4:93:5e:7b:c3:90:5a:f5:7d:fe:
b1:1e:4f:57:b3:8c:33:10:73:de:9f:d6:60:76:39:3a:d9:7e:
8b:9a:86:68:5b:e2:2d:ef:3e:c5:e0:03:15:51:eb:db:c3:fe:
ff:ef:bf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 01:54:28 2024 by rpki-client on console-ams.rpki-client.org