Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/0F807DF8043811EE81290815C4F9AE02.roa
File: 0F807DF8043811EE81290815C4F9AE02.roa (raw, json)
Hash identifier: I1Szxqu51EPaKqHDT7qykEBW89E4D+1o+oMgoF3Ec8M=
Subject key identifier: BF:EF:6F:AF:09:41:C6:BD:A8:1E:F3:43:50:F7:F2:FD:29:DA:DC:DF
Certificate issuer: /CN=A9161B4C/serialNumber=E384AA4025A106B547A7C089B1DDFEEE6CCBA22F
Certificate serial: DE
Authority key identifier: E3:84:AA:40:25:A1:06:B5:47:A7:C0:89:B1:DD:FE:EE:6C:CB:A2:2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/0F807DF8043811EE81290815C4F9AE02.roa
Signing time: Mon 15 Jul 2024 14:09:51 +0000
ROA not before: Mon 15 Jul 2024 14:09:51 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 151396
IP address blocks: 103.134.216.0/24 maxlen: 24
103.134.217.0/24 maxlen: 24
103.134.218.0/24 maxlen: 24
103.134.219.0/24 maxlen: 24
103.214.0.0/23 maxlen: 24
2401:720::/32 maxlen: 36
Validation: Failed, certificate revoked on Thu 08 Aug 2024 08:47:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161B4C/serialNumber=E384AA4025A106B547A7C089B1DDFEEE6CCBA22F
Validity
Not Before: Jul 15 14:09:51 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66952dae-745b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:13:a7:85:71:1b:0f:64:ae:c9:06:2d:69:
06:10:35:ab:96:0a:9a:49:e5:d3:f1:1b:c8:69:ec:
e9:8f:21:8c:97:55:c0:d9:f0:fa:26:d1:2a:8d:58:
51:e4:3e:1c:37:ba:72:c6:d2:d8:c2:c6:24:fe:ac:
21:3d:2b:3e:36:1d:da:ff:fc:e4:d3:d1:31:f2:73:
ed:02:89:55:c6:ec:bf:c7:6f:eb:76:24:8b:40:6a:
49:31:6b:61:e2:66:8b:c1:26:73:cb:69:3e:14:79:
ff:c7:27:31:5e:80:2e:5d:b9:4f:b9:ad:88:13:49:
df:29:7b:13:cd:9e:13:47:07:c9:38:89:81:2c:6a:
0b:6b:0d:44:af:5a:b0:41:1a:9d:12:bd:0d:f7:19:
9b:1f:35:1b:5c:26:d8:39:f3:9a:fb:b5:4b:01:4d:
6c:7f:2a:c7:d3:ee:7e:3d:72:a6:4e:db:e4:07:11:
30:1f:3b:65:da:4e:ce:fb:60:df:57:cd:ba:b1:56:
2f:14:c5:38:47:31:57:72:3d:7b:4b:8d:e4:22:88:
03:c1:3f:7f:24:ec:f5:5d:ca:24:dd:1a:7f:40:81:
7e:85:29:5a:e5:c7:cb:04:e3:c8:ba:21:89:7a:bc:
83:4d:c6:30:23:18:91:ad:de:d7:66:a9:7a:6b:2e:
6d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EF:6F:AF:09:41:C6:BD:A8:1E:F3:43:50:F7:F2:FD:29:DA:DC:DF
X509v3 Authority Key Identifier:
keyid:E3:84:AA:40:25:A1:06:B5:47:A7:C0:89:B1:DD:FE:EE:6C:CB:A2:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/0F807DF8043811EE81290815C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.216.0/22
103.214.0.0/23
IPv6:
2401:720::/32
Signature Algorithm: sha256WithRSAEncryption
61:8c:00:35:97:db:95:d7:95:ea:82:1a:8e:3c:a0:21:39:cd:
de:52:93:21:26:99:cd:6e:91:ef:3a:5e:bd:e3:7e:ef:a0:db:
56:d8:56:49:51:4b:f6:84:1f:bc:76:6a:3b:78:3a:7b:1f:6e:
91:17:c7:75:1c:3c:d4:d5:7a:f3:5e:37:2a:db:5f:1a:7b:bc:
1d:f6:6e:26:43:48:13:79:5b:5c:08:1c:ef:22:ff:fc:5e:a4:
cc:48:75:ca:33:61:70:e3:2b:8a:a7:94:e6:ce:bd:96:0a:3e:
27:98:bb:a0:84:18:e4:1e:29:ab:d0:17:41:b5:5a:aa:bd:a6:
71:a7:87:71:45:da:c8:24:dd:9b:28:a1:05:ff:55:f1:15:0c:
c4:62:93:6a:2e:fb:7a:46:51:19:8a:74:77:f5:d5:e9:54:e8:
e2:21:5b:cd:9c:b1:96:9d:33:91:53:55:de:f8:4a:bd:1a:46:
5d:2b:8c:8a:f1:75:c0:4a:9e:c8:29:1e:aa:0c:b1:de:aa:88:
a7:80:71:2b:c3:06:d8:8f:de:f2:ff:9e:b1:db:c3:eb:38:b8:
c7:9e:a2:a7:f7:e9:1b:55:3b:6b:72:5b:98:58:84:ba:6a:06:
cb:92:5d:09:07:3a:80:21:17:28:a4:d9:92:5e:46:21:de:0e:
bd:14:81:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 12:52:50 2024 by rpki-client on console-ams.rpki-client.org