Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/96B4C7C405D311EEA4EFFD5BC4F9AE02.roa
File: 96B4C7C405D311EEA4EFFD5BC4F9AE02.roa (raw, json)
Hash identifier: UVj0S6GD0FSaxG7KUn+QRfkKgnF8e6xuCjofSM3j71g=
Subject key identifier: CB:4E:31:45:E7:AF:D0:07:2A:9A:53:68:F4:8F:C1:4D:D1:C3:8C:C1
Certificate issuer: /CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Certificate serial: 25
Authority key identifier: 28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/96B4C7C405D311EEA4EFFD5BC4F9AE02.roa
Signing time: Thu 08 Jun 2023 08:08:02 +0000
ROA not before: Thu 08 Jun 2023 08:08:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 103.112.48.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 06 Sep 2023 07:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Validity
Not Before: Jun 8 08:08:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64818c62-a736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3d:77:9b:61:7d:55:c5:9d:3c:9e:c0:20:bd:
44:31:d1:51:31:58:ab:3a:69:b8:24:d2:35:61:08:
05:65:19:2c:b3:1c:46:0e:54:6c:62:84:ed:1a:9e:
cd:e4:43:9d:4d:f1:8b:86:9f:e8:62:12:fa:0d:54:
cc:a9:56:61:a1:54:08:f3:ec:75:d8:30:a0:8a:e1:
da:7d:29:d5:31:dc:b5:20:f2:9a:1c:02:ec:27:b7:
f7:cb:71:84:b1:95:04:ab:71:60:64:68:c3:e4:a8:
39:86:18:34:4a:18:2a:e5:03:0f:c4:e3:e7:26:86:
79:5a:95:1b:6f:2c:45:fd:bd:70:24:a2:36:fd:5a:
e9:65:ce:b6:0a:d8:2a:56:8e:86:97:c6:0f:f3:b5:
55:4e:a1:95:a2:29:fc:76:24:b9:f8:49:1c:8e:0a:
3f:1b:af:a0:c6:a0:6f:d9:a7:65:2e:ac:7e:8b:c8:
79:09:b1:63:1e:d0:62:cc:73:6a:1d:b7:0e:52:c5:
c8:39:0f:d5:1d:66:db:1c:ab:97:99:1f:cf:46:7d:
7f:c2:c5:e8:ac:a7:e5:61:8b:63:29:24:18:91:eb:
ab:55:1a:5e:29:e9:b5:9b:80:4d:c2:94:0b:d5:b7:
dd:4c:03:82:3a:bc:2b:17:df:75:fc:5f:de:a3:5b:
0f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4E:31:45:E7:AF:D0:07:2A:9A:53:68:F4:8F:C1:4D:D1:C3:8C:C1
X509v3 Authority Key Identifier:
keyid:28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/96B4C7C405D311EEA4EFFD5BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.48.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:de:ac:19:5d:ea:63:89:13:1f:d8:49:a9:f7:0c:57:09:89:
d5:90:d1:41:11:21:c3:29:4a:e9:02:36:0b:00:61:ca:f5:a0:
65:bd:78:26:42:55:fc:e4:dd:ab:80:09:95:48:ea:ba:77:0b:
35:be:b6:00:8a:24:49:00:2b:e3:bf:18:64:52:18:2f:db:61:
11:7a:3b:5a:de:cc:ef:ce:38:2a:56:cd:7f:87:9c:b9:3a:94:
e7:6d:63:a7:24:f5:8e:9c:a8:de:8f:64:24:d4:be:27:74:3a:
9c:cb:c6:82:e6:59:a4:e0:f4:2d:8b:c7:fa:a3:f8:ea:16:31:
00:48:39:b7:71:39:c4:25:ba:c3:47:42:87:3a:38:a6:57:fe:
9c:62:fd:df:a4:60:a8:81:ac:96:3d:34:b5:cf:20:6f:ad:08:
52:7f:c5:03:c5:fd:c9:c3:ae:a7:e6:84:6e:b5:14:49:98:a5:
13:7f:67:b2:11:e7:ef:a0:01:24:9e:1a:8d:b1:c0:86:53:f0:
07:1e:ce:76:3b:a9:ec:8f:90:8d:f5:3d:ad:32:58:34:3d:6b:
53:f3:c8:71:48:d6:5a:23:b6:67:02:df:9c:00:ce:ea:29:cc:
79:36:2a:89:fc:41:cc:d0:42:0a:64:df:dd:86:78:6a:21:15:
4a:c9:54:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:03 2024 by rpki-client on console-fra.rpki-client.org