Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/70AC772A98C711EE8DA3B81BC4F9AE02.roa
File: 70AC772A98C711EE8DA3B81BC4F9AE02.roa (raw, json)
Hash identifier: ZZjMqmHfPCwaIIYrW6vuOQ7bHojupAJ7eCNXrJBHNw4=
Subject key identifier: 35:B4:60:12:20:D8:BE:DB:88:7B:8B:98:48:4C:17:FD:99:98:BB:24
Certificate issuer: /CN=A915C449/serialNumber=484EBF33750B21CAF028D0CE219B9461D1FBAA66
Certificate serial: 0527
Authority key identifier: 48:4E:BF:33:75:0B:21:CA:F0:28:D0:CE:21:9B:94:61:D1:FB:AA:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SE6_M3ULIcrwKNDOIZuUYdH7qmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/70AC772A98C711EE8DA3B81BC4F9AE02.roa
Signing time: Tue 12 Dec 2023 08:21:25 +0000
ROA not before: Tue 12 Dec 2023 08:21:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4842
IP address blocks: 103.165.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 18:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1319 (0x527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C449/serialNumber=484EBF33750B21CAF028D0CE219B9461D1FBAA66
Validity
Not Before: Dec 12 08:21:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65781805-dfba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:8b:3d:b7:65:24:65:c5:ed:c8:a8:21:4a:
1e:4f:48:ba:e6:7e:5b:81:40:13:9c:b6:51:eb:1e:
19:54:0d:14:e2:ac:e7:2c:17:72:cf:1e:0b:27:ed:
32:10:df:51:60:eb:7a:89:b6:16:a0:77:26:77:9b:
a2:f0:ef:b2:ad:eb:13:d6:25:a9:d1:ee:2a:33:6e:
e6:7a:54:23:22:a2:a2:27:ff:72:bc:b9:ee:32:7d:
fc:a6:87:a8:ac:35:3c:7e:e6:ce:94:5c:83:e9:4e:
7c:17:c0:1a:7f:c9:23:fe:2f:84:62:b7:51:b0:94:
05:42:25:83:f3:18:16:64:e0:e5:30:8a:e8:bd:99:
be:f9:92:45:dc:87:10:09:b3:69:ca:02:8b:97:50:
bf:f7:a4:c8:e2:36:a8:62:ad:1e:d2:34:c4:ec:c1:
b5:55:7d:c8:72:7a:da:23:3c:60:31:38:90:cf:4a:
52:cf:08:0a:bf:59:c6:a7:81:8c:5e:68:35:11:bb:
16:fd:88:18:03:96:6f:cc:d9:88:1d:57:5d:51:e3:
1c:66:5e:08:c8:eb:64:e3:37:4a:85:1e:c2:ff:7c:
f3:6e:87:5f:14:f9:7c:70:4c:17:c5:57:af:70:42:
9f:1f:70:0c:d9:38:09:17:ba:54:8e:c3:23:c1:30:
9f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B4:60:12:20:D8:BE:DB:88:7B:8B:98:48:4C:17:FD:99:98:BB:24
X509v3 Authority Key Identifier:
keyid:48:4E:BF:33:75:0B:21:CA:F0:28:D0:CE:21:9B:94:61:D1:FB:AA:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/SE6_M3ULIcrwKNDOIZuUYdH7qmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SE6_M3ULIcrwKNDOIZuUYdH7qmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/70AC772A98C711EE8DA3B81BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.165.85.0/24
Signature Algorithm: sha256WithRSAEncryption
22:03:a7:20:c0:e7:d4:96:e5:09:54:99:57:62:cc:3b:ed:14:
fb:38:ff:34:de:40:18:74:0f:7d:ed:b4:04:90:17:4b:82:74:
45:32:09:26:88:af:90:ec:95:c4:46:64:30:6b:62:df:0b:ad:
75:58:db:8e:91:7d:e0:3d:a0:bd:cb:67:b4:4a:99:5a:30:86:
71:2a:fb:4f:35:2b:e4:db:8f:97:40:7a:ef:c1:7e:4c:b6:81:
21:d9:58:18:61:39:55:66:ca:7d:f3:7d:95:2c:5f:a6:cd:77:
fe:e8:0c:ac:bb:3c:48:a7:a7:2b:07:1b:f1:f7:75:d5:bc:a6:
fd:ac:2b:ed:d2:70:f4:a3:a0:a9:8c:d1:d4:22:6f:53:aa:d2:
ff:d3:c8:e4:ae:ee:4d:f9:2b:03:35:24:86:12:12:21:46:57:
e2:98:5c:2d:ef:ad:0c:3e:43:2a:ca:d3:f9:53:9f:7f:2c:06:
e5:f7:1b:04:d3:c4:ba:3c:e7:50:0e:6f:4c:04:0c:3e:ce:15:
29:02:19:54:e1:4f:71:4a:07:cb:29:1e:4c:5e:3f:5c:ed:76:
39:6a:8d:03:29:fa:ae:4e:a6:a1:da:a8:de:59:49:94:75:07:
e5:50:c0:04:e1:c3:a9:02:9c:0d:4d:be:e3:55:32:93:96:04:
bf:ad:4b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-ams.rpki-client.org