Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/745EEDC25C9211EBAE499866C4F9AE02.roa
File: 745EEDC25C9211EBAE499866C4F9AE02.roa (raw, json)
Hash identifier: Rs+f4Kwm9sSe39kCrQZylyVBeMt8HuVi3YxifLUh+3Y=
Subject key identifier: 07:F2:F7:0E:DC:01:22:87:89:6D:D0:48:00:BE:F4:58:DF:EF:C1:F8
Certificate issuer: /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Certificate serial: 0626
Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/745EEDC25C9211EBAE499866C4F9AE02.roa
Signing time: Tue 18 Jul 2023 22:39:38 +0000
ROA not before: Tue 18 Jul 2023 22:39:38 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 63916
IP address blocks: 103.42.212.0/23 maxlen: 23
103.42.214.0/24 maxlen: 24
103.42.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Nov 2023 13:37:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1574 (0x626)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Validity
Not Before: Jul 18 22:39:38 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64b714aa-8ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7b:a3:98:af:1d:05:9e:ff:af:64:0b:77:39:
92:8c:fd:e5:f9:14:b2:a0:7f:16:d5:41:7f:5f:6e:
96:9f:ef:87:e6:a9:89:8c:32:fa:01:cc:d2:b2:4d:
da:ff:6f:5d:a8:46:49:98:ef:bc:b7:84:bb:18:41:
cc:90:01:b7:a6:1f:1a:40:6e:e1:45:e0:4a:5a:b4:
07:61:ed:f7:ab:56:03:b7:46:6f:58:4c:82:94:1d:
c1:06:0d:2d:15:9c:e8:16:db:c1:23:09:83:50:18:
39:28:d9:e3:bb:8f:5f:db:36:0c:a3:db:e6:0f:89:
af:92:9e:6d:50:26:02:93:45:9c:13:21:78:25:0f:
26:ab:42:4b:a5:1d:a0:61:1a:f9:58:70:94:15:93:
41:d0:ef:25:6b:61:60:76:cb:33:aa:cb:4c:d3:49:
66:eb:81:f2:7a:4d:e5:b3:d6:f1:8e:80:9b:96:6b:
85:dd:2c:96:dd:34:79:ee:cf:c7:7f:66:a6:bb:15:
a0:eb:43:a3:f4:29:23:5e:87:b8:d4:38:4a:c2:e5:
de:b4:21:2a:8f:06:bf:53:51:75:e0:85:5d:79:3e:
ec:94:d9:10:8b:b3:bc:18:2b:d1:97:31:6c:44:32:
03:94:6e:38:65:d2:80:b3:bf:7c:b3:77:63:f2:c7:
53:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F2:F7:0E:DC:01:22:87:89:6D:D0:48:00:BE:F4:58:DF:EF:C1:F8
X509v3 Authority Key Identifier:
keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/745EEDC25C9211EBAE499866C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.212.0/22
Signature Algorithm: sha256WithRSAEncryption
e5:d9:08:0e:b7:3c:a3:26:52:11:85:4d:3d:a6:a3:82:b4:7b:
fe:29:71:ed:8f:22:b0:5e:d7:4b:fd:f6:b6:43:cf:4c:90:ca:
42:2d:d8:72:6f:51:af:82:b5:aa:59:99:f1:5c:41:0c:c2:42:
d1:85:e0:b1:78:bb:db:c8:9e:e4:b2:98:69:7b:ad:35:1b:a6:
02:3d:9e:f9:d5:e7:c5:1f:6f:66:32:98:e6:f7:d9:94:2f:81:
97:0a:c6:5e:00:05:ae:c6:9f:94:ba:f6:5d:1b:45:57:4b:ec:
50:31:ba:52:2d:2e:70:b1:65:40:51:17:be:96:1e:09:24:5f:
f9:ed:04:e0:40:b8:a6:bb:b1:f9:50:68:6e:44:f5:24:68:40:
c3:1d:7d:60:0c:85:ce:80:3c:8d:d9:2d:af:bd:6a:8d:55:05:
4d:04:44:36:93:4b:83:4b:0b:ab:a5:5e:15:88:04:a6:3d:b3:
e4:d8:d3:4c:05:cf:78:61:b9:74:d8:c7:91:97:96:63:e1:48:
d1:f1:bf:5d:7b:4c:0c:f8:c6:c6:29:43:cc:8c:79:63:08:ea:
9e:44:40:54:88:a6:4a:c2:80:de:17:21:d1:1b:e4:d4:aa:73:
f2:47:28:7e:37:e5:34:33:93:43:d9:8b:73:6f:18:2a:a3:92:
3f:b1:fc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:06 2024 by rpki-client on console-fra.rpki-client.org