Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/0A85C53E015211EF93095A1FC4F9AE02.roa
File: 0A85C53E015211EF93095A1FC4F9AE02.roa (raw, json)
Hash identifier: euCxFFqge6sGny5zH8ABQhjDVrtLRSpsIjr+2iMXD/0=
Subject key identifier: B6:25:32:4C:30:FB:1E:29:EF:58:17:68:54:84:5D:37:85:76:59:93
Certificate issuer: /CN=A914A49B/serialNumber=D5037AF969C8ACEA01B570FC64ADD4828AC06414
Certificate serial: 02
Authority key identifier: D5:03:7A:F9:69:C8:AC:EA:01:B5:70:FC:64:AD:D4:82:8A:C0:64:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/0A85C53E015211EF93095A1FC4F9AE02.roa
Signing time: Tue 23 Apr 2024 09:15:35 +0000
ROA not before: Tue 23 Apr 2024 09:15:35 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 152477
IP address blocks: 103.213.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 29 Apr 2024 02:43:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A49B/serialNumber=D5037AF969C8ACEA01B570FC64ADD4828AC06414
Validity
Not Before: Apr 23 09:15:35 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=66277c37-4a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:90:b4:87:45:17:39:ee:af:32:fb:ae:ca:46:
39:09:23:18:1f:2d:51:18:d3:a3:1d:ad:0b:1d:ee:
43:b9:d8:95:4b:4d:42:05:64:1e:ed:4b:40:c6:7b:
f0:c6:72:74:7c:99:59:64:60:a9:83:b0:b3:5c:66:
7e:53:11:19:09:d2:24:d9:0c:b3:5d:75:99:04:31:
7f:05:c8:3f:c7:a9:62:6b:bd:36:a7:92:03:17:b5:
42:08:03:62:bd:00:63:32:55:60:b7:19:d0:3e:69:
7d:54:f5:5e:0a:35:3d:32:08:a9:76:0d:da:31:23:
57:43:c9:bd:84:a6:10:e8:33:68:ff:14:13:84:98:
75:bd:de:66:e2:ea:8d:be:30:01:43:47:4a:ea:54:
48:9c:a3:d0:db:5c:49:24:8a:01:4b:26:a1:a2:4e:
10:6b:31:ba:ea:91:f6:3d:a9:ad:a2:bd:85:f3:b7:
5c:fb:9f:d9:c8:8b:88:b0:fe:62:ed:4a:de:32:32:
67:5c:83:61:c1:b1:e9:fd:ec:90:56:58:ed:f2:a9:
00:c3:82:a9:b9:02:5b:75:53:60:29:ca:33:56:3d:
55:bc:ab:a7:f0:80:db:d1:e2:9d:98:ab:af:8e:50:
5f:fd:2f:7e:9c:06:60:4a:a4:bd:29:f0:4b:7e:0d:
77:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:25:32:4C:30:FB:1E:29:EF:58:17:68:54:84:5D:37:85:76:59:93
X509v3 Authority Key Identifier:
keyid:D5:03:7A:F9:69:C8:AC:EA:01:B5:70:FC:64:AD:D4:82:8A:C0:64:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/0A85C53E015211EF93095A1FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.213.10.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:9b:7d:65:ba:09:37:ff:ae:4f:b5:a2:8f:34:d2:55:aa:f0:
58:89:20:9a:a7:f4:0f:8a:b6:cf:78:f4:f7:01:7e:44:b1:0c:
00:c6:5c:e3:5f:34:73:98:55:bb:3e:96:9c:49:19:ec:f8:bb:
73:ea:f9:d7:46:f7:c5:15:3a:7d:87:20:83:90:a6:da:96:ec:
e2:79:f1:b1:a8:60:78:e0:62:44:9c:49:4a:5d:18:13:dc:d0:
15:52:9f:15:aa:bc:7d:7b:e6:64:e9:cc:99:73:1d:68:cd:ec:
48:cf:3e:3a:1e:b3:4e:d8:34:f5:7c:66:ab:8b:46:8d:42:14:
5f:31:fd:a3:7d:4f:51:0e:42:89:e9:4a:fe:19:87:21:3c:63:
51:f4:4e:63:84:85:60:d8:9f:ae:45:4b:74:16:a5:fa:76:4c:
e1:86:40:ae:30:67:79:1c:dd:b7:5f:75:d9:ce:89:19:5b:21:
eb:f8:35:f4:da:f0:05:56:45:fc:f9:71:8f:8b:5b:44:30:f5:
c3:bd:bd:ed:e4:24:04:49:6b:44:63:b6:65:9d:cc:7b:13:fa:
88:b0:00:0a:48:07:d9:25:bd:73:2b:4e:68:d0:5f:b3:fc:c0:
29:d5:01:fc:02:0c:7e:6e:7a:93:70:b7:02:37:ff:12:8e:9d:
e6:00:b1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 04:17:23 2024 by rpki-client on console-fra.rpki-client.org