Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/A9CDF31886B411EF9654E36DC4F9AE02.roa
File: A9CDF31886B411EF9654E36DC4F9AE02.roa (raw, json)
Hash identifier: vKCT5aqGS/zVz74NXjJ2jofLs53pCDa+UvqaSl3+rR0=
Subject key identifier: 67:4C:BB:36:6B:A0:DF:BC:F3:66:7E:59:38:5F:A6:29:10:C0:7F:87
Certificate issuer: /CN=A913F547/serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF
Certificate serial: 13AF
Authority key identifier: 0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/A9CDF31886B411EF9654E36DC4F9AE02.roa
Signing time: Thu 10 Oct 2024 03:06:37 +0000
ROA not before: Thu 10 Oct 2024 03:06:37 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 137561
IP address blocks: 103.113.100.0/24 maxlen: 24
103.113.101.0/24 maxlen: 24
103.113.102.0/24 maxlen: 24
103.113.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 03:34:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5039 (0x13af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F547/serialNumber=0EE3EA222C398CD760C767561D582FC0FC5D23FF
Validity
Not Before: Oct 10 03:06:37 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=670744bd-4704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0a:28:58:3a:e8:11:9e:d6:db:80:2d:39:88:
8c:1b:13:70:ff:77:8f:46:71:b6:ec:e4:bf:63:9c:
ee:16:e0:6e:ec:93:9d:eb:81:19:ba:65:6d:6c:23:
5e:57:2c:9a:ec:d3:cc:8e:5b:30:3d:a8:2d:0f:16:
ea:14:e6:df:24:ec:fc:e9:93:c9:bb:4d:42:0f:09:
c5:a1:fa:b8:8e:5f:fa:64:aa:e5:7b:5e:b3:51:00:
c5:ca:cd:19:cd:58:c3:35:e6:e8:18:89:9e:a6:71:
57:46:8d:ad:31:57:9c:62:d8:8a:cf:c2:d7:d6:88:
0e:ed:96:0c:0e:75:d1:b0:60:c8:18:ff:8f:24:ef:
65:13:9b:10:b6:07:a9:11:8c:1d:0f:ed:15:e7:f5:
14:16:1f:05:6b:c3:ca:39:36:33:0e:4b:67:32:3a:
33:17:0e:16:2c:26:a4:68:29:0d:50:c5:73:75:36:
57:23:50:36:12:7f:a6:6a:66:5a:12:eb:99:69:c2:
7b:7e:f4:99:a3:09:a6:dc:53:e1:77:57:0c:ed:56:
35:ac:2d:8c:cc:56:3e:c3:76:14:d4:e5:81:07:85:
89:79:83:63:5d:57:35:09:fb:c7:6b:56:7f:cd:71:
03:84:14:f9:ac:58:3d:dc:a4:9a:95:42:7d:29:c2:
e7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4C:BB:36:6B:A0:DF:BC:F3:66:7E:59:38:5F:A6:29:10:C0:7F:87
X509v3 Authority Key Identifier:
keyid:0E:E3:EA:22:2C:39:8C:D7:60:C7:67:56:1D:58:2F:C0:FC:5D:23:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/DuPqIiw5jNdgx2dWHVgvwPxdI_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DuPqIiw5jNdgx2dWHVgvwPxdI_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F547/4A82F124805311E8B727F156C4F9AE02/A9CDF31886B411EF9654E36DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.113.100.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:7e:38:29:af:89:a3:f0:46:ce:59:37:37:ab:54:5b:08:86:
cd:e3:44:c6:ce:f4:40:93:4d:20:dd:79:16:61:69:16:31:9d:
12:7d:f1:31:86:53:95:c0:1a:c3:c7:db:86:7d:71:09:e1:6d:
d4:19:79:cb:be:a6:84:5c:06:25:0f:34:c7:38:a7:fd:9f:d9:
13:bc:f0:ad:f5:c4:0b:6b:88:54:0d:f5:66:c9:42:a2:91:6d:
ec:bb:d1:42:d2:1f:57:09:b1:88:a4:e6:d7:d3:dd:db:7d:8f:
25:82:7b:44:d5:52:1c:50:da:ac:e5:6d:be:42:44:fc:04:9b:
9b:e3:87:50:56:5b:82:55:4b:29:cf:80:9b:d7:e7:1c:90:6e:
07:3e:4a:53:a4:38:27:a0:d3:00:25:5e:bf:3b:8c:bc:03:fe:
d4:7d:a9:ba:08:bb:74:d8:e1:56:88:94:34:84:50:66:82:e6:
e8:69:32:38:38:92:a5:60:ef:16:ca:2f:f6:95:cb:7e:22:5f:
fb:bc:7d:cf:60:d8:e5:be:47:ca:bd:39:cd:37:c8:b7:f4:9c:
ed:d9:5d:94:7c:7f:d0:be:93:43:68:5a:40:1c:83:64:a8:36:
3d:97:ed:14:40:22:65:a1:5f:f4:c9:3f:b9:7d:16:6a:0c:c7:
0a:72:8d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 08:31:18 2024 by rpki-client on console-ams.rpki-client.org