Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/61114758262311EEA8A3EB53C4F9AE02.roa
File: 61114758262311EEA8A3EB53C4F9AE02.roa (raw, json)
Hash identifier: 6nFkfM9c+P+xNaxd83hIADOSpLHoSRu94OqMzC5bG0k=
Subject key identifier: 43:EC:F5:E1:2B:C1:96:E9:59:76:E6:20:97:F1:6F:BC:E4:DE:9B:26
Certificate issuer: /CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
Certificate serial: 04
Authority key identifier: C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/61114758262311EEA8A3EB53C4F9AE02.roa
Signing time: Wed 19 Jul 2023 11:02:39 +0000
ROA not before: Wed 19 Jul 2023 11:02:39 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 151343
IP address blocks: 103.204.30.0/23 maxlen: 23
2001:df2:75c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 03 Apr 2024 17:07:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
Validity
Not Before: Jul 19 11:02:39 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64b7c2cf-c607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c1:27:d0:8b:f1:03:4f:de:6f:a0:2d:c2:25:
bf:44:ab:9c:7d:25:70:6d:37:41:89:a5:72:e6:5a:
07:59:75:ff:01:47:de:06:8c:ce:54:92:93:d2:a8:
88:91:3d:0d:34:4d:a6:2e:e2:0a:9d:6f:be:80:eb:
08:1d:fb:38:93:91:62:35:2b:c8:99:2b:79:4d:af:
40:40:86:63:88:54:71:a6:bf:db:19:37:8b:30:07:
80:b6:73:aa:1b:7b:ae:6d:e5:db:6a:6c:a7:9b:0a:
04:88:4c:62:a6:a8:e3:4e:54:0d:68:0e:d0:82:da:
40:86:ee:2d:0b:14:bd:83:8d:db:cf:58:b1:9a:d1:
2f:30:2b:71:e2:c6:b7:ab:8d:cb:c2:8e:38:e8:21:
5e:43:61:7f:83:29:c0:7b:fd:30:ba:d2:18:47:ef:
11:ac:c0:a2:90:78:0a:43:56:c8:02:67:db:a0:25:
3d:e2:bc:89:65:42:89:0e:52:36:eb:e9:39:f8:49:
c5:b7:62:4e:3c:20:01:25:6b:ec:98:df:f8:33:fa:
8d:e9:67:2a:d6:2c:9d:94:35:0d:a5:ea:44:03:20:
3a:38:06:14:9f:aa:29:43:a4:ed:c8:48:43:f6:62:
bb:a9:f2:d9:bc:41:5d:bd:64:38:0e:a4:3a:39:b9:
6d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EC:F5:E1:2B:C1:96:E9:59:76:E6:20:97:F1:6F:BC:E4:DE:9B:26
X509v3 Authority Key Identifier:
keyid:C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/61114758262311EEA8A3EB53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.204.30.0/23
IPv6:
2001:df2:75c0::/48
Signature Algorithm: sha256WithRSAEncryption
da:c1:42:bb:c5:88:31:6f:ce:9a:4e:d0:24:4e:40:6e:95:40:
1d:62:1e:d7:0c:53:99:85:3e:d0:fa:07:94:9f:60:77:7e:cc:
0a:8e:39:7a:cc:8e:8e:89:7b:ad:a2:ee:8a:c8:27:d0:bd:32:
04:6a:7f:3a:96:ac:ed:69:48:cd:c8:89:38:92:df:46:d8:d1:
18:54:63:c1:35:9e:42:c6:ad:09:51:b3:61:dc:e6:4f:76:95:
b9:b6:47:fe:d3:f6:0a:e2:69:bb:28:f0:14:99:88:ca:1f:fc:
cd:8f:2e:70:00:40:19:ac:fd:99:79:68:6d:6e:58:c5:0b:ee:
fd:11:9a:80:5e:21:d9:82:47:bd:a5:87:54:5f:4a:64:8e:3f:
ab:78:e0:3f:6f:1b:e9:7c:18:cc:18:84:15:bc:5d:93:9f:10:
6e:5a:4f:0e:ab:d7:13:89:fb:77:2a:54:f2:a9:e7:e0:21:ce:
4b:c9:e5:5d:5e:4b:1f:48:71:64:58:6e:03:0a:5a:d7:06:60:
42:a0:60:15:b9:b6:68:b3:7b:83:df:fc:05:07:fa:5f:11:25:
79:40:38:2a:3c:c5:e7:c8:ac:b4:3e:ab:c3:1b:62:5c:d2:8d:
fd:c5:ff:06:71:12:ca:f8:b9:29:90:85:9b:be:92:4c:58:e2:
de:46:e4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:09 2024 by rpki-client on console-fra.rpki-client.org