Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/96711DC441A811EE82874813C4F9AE02.roa
File: 96711DC441A811EE82874813C4F9AE02.roa (raw, json)
Hash identifier: r7uGLr1ZvhftQh5IOchgD86mQqXjDsVZlVcaCXrQqu0=
Subject key identifier: 0D:7F:4C:14:87:14:D7:E1:A7:BA:F3:93:43:DC:BE:13:9D:3C:C8:28
Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Certificate serial: 19
Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/96711DC441A811EE82874813C4F9AE02.roa
Signing time: Mon 02 Oct 2023 07:37:00 +0000
ROA not before: Mon 02 Oct 2023 07:37:00 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 147291
IP address blocks: 103.135.44.0/24 maxlen: 24
103.135.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Dec 2023 14:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Validity
Not Before: Oct 2 07:37:00 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=651a731c-f516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:97:80:5f:60:ba:4e:f1:78:16:16:c9:b8:
b6:31:19:12:c4:1d:d5:3c:34:48:8a:41:6a:b2:10:
cd:67:1a:20:ef:48:57:e7:10:4e:90:2f:f0:5c:64:
3f:51:57:56:b2:65:02:a3:4f:7b:cf:e3:b0:c3:9f:
57:2b:f4:d7:47:4f:7b:9f:97:d3:ad:de:b9:e5:df:
6d:f1:31:e2:40:2e:41:90:7b:63:0b:83:45:93:08:
e4:74:7f:cc:97:1b:35:17:a2:86:a8:f7:39:92:ad:
dc:ec:16:dd:b3:5b:f0:71:e3:0a:6f:a7:bb:a2:a8:
29:2b:bd:2b:b4:e5:45:fd:c2:ad:f1:74:eb:8f:6a:
8c:55:ac:11:f4:35:18:a3:41:75:0e:a4:1f:63:27:
33:1d:2b:58:ab:ad:25:16:8d:3d:ce:7c:10:04:16:
cb:39:58:39:e5:e1:73:de:84:f9:a5:f6:4f:4e:7a:
c7:1e:0b:f2:15:07:a2:54:3f:35:6f:c1:55:e5:20:
0d:af:33:41:34:16:5d:73:82:96:37:26:14:95:6d:
00:00:bb:56:00:2b:21:dc:68:67:fc:df:5f:91:e1:
34:58:13:65:f1:9a:48:f2:c7:da:1a:8b:1c:25:84:
7a:76:10:21:d6:9a:3d:19:6c:ce:59:87:0a:39:27:
1f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7F:4C:14:87:14:D7:E1:A7:BA:F3:93:43:DC:BE:13:9D:3C:C8:28
X509v3 Authority Key Identifier:
keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/96711DC441A811EE82874813C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.44.0/23
Signature Algorithm: sha256WithRSAEncryption
42:38:f1:14:4d:ca:90:8a:cf:56:8c:ee:98:1f:cc:b0:bf:bc:
b9:58:c2:76:0e:b1:f0:d4:25:68:3b:86:20:6a:ac:a7:07:ce:
2e:6d:0d:ae:38:94:45:76:ae:09:b7:65:0f:51:11:ce:c9:62:
e6:72:27:03:0d:96:4d:4c:d6:3e:e3:e6:73:be:f6:c4:6c:22:
24:eb:8b:37:3b:2f:13:c9:fc:82:8d:ca:58:ab:d6:cd:4c:2d:
6e:a2:7f:22:ed:de:1f:a7:d1:65:a0:8e:95:cc:c7:8c:68:39:
28:7b:b0:ed:86:4b:07:11:c1:0a:87:54:ff:f5:01:7a:13:a7:
b4:59:e1:67:ca:ba:a2:78:2f:11:bb:0b:cc:78:2d:13:3c:31:
32:aa:ae:fc:ba:fa:c6:c8:92:2b:4b:21:3a:6b:e7:cf:8a:77:
cd:f4:28:df:2f:50:21:0e:5a:b9:b7:f5:1f:dd:4e:78:1f:b8:
fe:05:07:db:ff:9e:12:af:f5:86:62:59:24:5d:e0:87:b9:e9:
e7:10:42:b3:b7:72:e8:7d:1c:99:f8:a2:d1:39:21:c5:4f:91:
e4:32:91:69:b4:69:12:ce:a5:b9:f6:86:71:36:d8:91:75:12:
8a:67:86:b5:c5:ae:83:b3:43:81:ca:e1:9e:d1:6d:95:ad:66:
b0:af:76:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:05 2024 by rpki-client on console-fra.rpki-client.org