Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/6A22565449DF11EEA1161659C4F9AE02.roa
File: 6A22565449DF11EEA1161659C4F9AE02.roa (raw, json)
Hash identifier: i6hm2n4qd/DNaQKXjfxs/PdXGLhpejASdrxSM6bca5E=
Subject key identifier: 47:ED:FA:3A:04:85:CA:55:AF:91:0A:B8:A2:5A:F1:84:48:EA:21:FA
Certificate issuer: /CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Certificate serial: 0120
Authority key identifier: 74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/6A22565449DF11EEA1161659C4F9AE02.roa
Signing time: Wed 15 Nov 2023 04:35:05 +0000
ROA not before: Wed 15 Nov 2023 04:35:05 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 138998
IP address blocks: 103.7.4.0/24 maxlen: 24
2400:ac20::/32 maxlen: 32
2400:ac20:1000::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 05 Mar 2024 18:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Validity
Not Before: Nov 15 04:35:05 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65544a79-95b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6b:62:0b:b5:d3:9a:36:4a:f7:01:17:98:81:
bf:ed:09:ef:65:3e:f3:8f:ea:9a:02:c7:ff:27:1a:
df:0d:0b:f7:3c:bc:89:17:2f:93:cc:37:18:cf:a0:
7a:6c:ad:46:f2:82:69:25:f1:64:8a:2e:86:38:06:
6e:24:e1:51:42:50:c6:0b:63:04:75:81:71:71:0f:
ba:d3:a8:18:bd:57:bb:e5:0f:c4:9a:aa:9e:4d:63:
cc:74:31:1b:cc:5c:3e:0d:1a:79:d5:34:45:a3:65:
55:8d:0f:f6:09:21:e9:e0:79:a8:3b:42:80:5c:fb:
3d:45:3f:fd:6a:90:50:67:43:31:f5:e8:4f:de:10:
fd:00:e8:12:c5:af:36:6b:3c:39:dc:ef:48:d4:7d:
59:8a:b1:94:41:de:72:c9:3a:1a:b5:6e:a0:08:1c:
b8:04:19:a7:94:fa:79:b9:11:a1:9a:0c:27:a3:04:
23:3b:05:6f:f4:7b:d8:69:bd:8a:84:39:bf:17:05:
62:3b:61:8a:c1:2c:f5:26:f7:37:33:40:e5:c4:90:
93:59:96:23:ad:9b:22:68:11:65:c8:4c:d4:0e:43:
56:df:09:5b:79:d5:85:3d:f8:bf:07:94:83:3d:56:
24:7e:08:60:20:1c:54:c0:e2:b0:44:9e:01:fb:14:
ee:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:ED:FA:3A:04:85:CA:55:AF:91:0A:B8:A2:5A:F1:84:48:EA:21:FA
X509v3 Authority Key Identifier:
keyid:74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/6A22565449DF11EEA1161659C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.7.4.0/24
IPv6:
2400:ac20::/32
Signature Algorithm: sha256WithRSAEncryption
3e:06:4b:0b:91:71:58:83:db:15:ee:29:bb:8e:22:f6:9b:4a:
fe:91:cf:9e:c9:d0:f1:99:9b:2a:9e:81:67:39:65:be:ec:f9:
35:86:9f:98:cd:8f:f8:af:26:d5:d5:4e:67:71:6f:95:c1:ec:
fd:c6:17:17:b3:32:04:14:6f:9b:e8:28:7d:29:0a:83:18:ae:
6a:2f:a8:c2:ec:42:a9:ef:4e:fc:4d:af:f9:5e:77:80:fd:6a:
4f:b2:c6:e7:68:b8:a3:57:b2:64:9d:63:fc:89:0a:c1:06:a8:
f5:1f:6c:df:07:96:80:f6:3e:10:9f:a8:0f:81:a3:02:97:30:
27:fa:a3:b8:2d:3b:e6:7f:ac:f3:04:0f:0f:87:1c:f9:67:66:
09:f1:36:15:5c:95:cb:bb:81:08:a6:6e:39:ee:4c:29:1d:24:
41:cb:9b:45:f1:dc:d4:a3:2c:2b:56:f3:cb:4f:36:83:9e:d4:
2b:7e:4b:b2:db:59:a8:46:82:07:cc:c4:f6:4a:b2:0e:0d:8a:
11:ef:42:6d:ed:e2:af:a9:18:48:10:dc:c1:cb:64:cd:7f:b5:
d4:78:65:8c:15:04:f3:f4:41:14:bb:ec:dd:b1:a6:d6:98:14:
c2:49:69:65:4f:64:74:ee:6c:08:58:06:35:bf:32:a9:2c:31:
7e:fd:9f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-ams.rpki-client.org