Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/CF1F629016B211EFADE45D0EC4F9AE02.roa
File: CF1F629016B211EFADE45D0EC4F9AE02.roa (raw, json)
Hash identifier: lNxLea0xnQxbLq9BiFqdfz+KjHcqAhwf+p3wY+OKkio=
Subject key identifier: 0B:4F:4B:E9:9E:9D:39:39:3A:EB:9B:E6:BD:1A:E6:6A:36:B4:FD:0E
Certificate issuer: /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A
Certificate serial: 044F
Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/CF1F629016B211EFADE45D0EC4F9AE02.roa
Signing time: Mon 20 May 2024 14:11:11 +0000
ROA not before: Mon 20 May 2024 14:11:11 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 147070
IP address blocks: 103.172.114.0/23 maxlen: 23
103.172.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Sep 2024 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1103 (0x44f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A
Validity
Not Before: May 20 14:11:11 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=664b59fe-2abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:7b:63:48:0f:04:44:45:bb:1a:d4:83:5c:
cd:d7:dc:1c:ee:cd:c4:9b:fa:36:ee:67:27:e1:f9:
54:7d:25:60:d2:5c:12:2f:83:34:86:02:4c:ff:04:
e7:e6:ed:b3:1a:08:36:14:0c:a1:bd:1c:12:52:78:
b7:a1:39:37:45:cd:60:c1:b9:9e:1e:66:d1:8c:ec:
9d:03:39:fc:28:9c:ad:d7:44:76:ab:5e:cf:ee:49:
cf:72:5f:c3:2d:f3:69:59:26:82:28:dd:5d:e6:0b:
db:06:22:82:12:39:d8:8c:45:8a:a9:51:81:4f:7a:
ca:a2:2d:e5:d0:b2:42:0e:0e:c0:c4:ae:d6:e2:4e:
51:b6:0c:51:ee:b4:bc:3e:9e:7c:78:73:d3:21:41:
dd:c4:58:a6:6f:e6:3f:a7:19:c6:b5:a8:6e:c5:9b:
fc:9a:86:c9:fc:7c:5e:ad:d9:49:8b:9d:d2:b0:e8:
f8:d4:71:1c:77:e3:f1:cd:93:36:df:03:10:49:92:
64:95:f8:a9:87:7a:ed:55:57:07:46:83:69:ff:de:
3b:2e:86:f8:83:43:c8:02:52:d5:dd:c8:14:ef:f2:
6e:1b:ad:be:3c:a9:3e:a1:cb:61:9e:b3:6f:c3:92:
4d:50:e4:0d:a8:4f:d0:e6:3f:17:38:37:3d:39:06:
73:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4F:4B:E9:9E:9D:39:39:3A:EB:9B:E6:BD:1A:E6:6A:36:B4:FD:0E
X509v3 Authority Key Identifier:
keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/CF1F629016B211EFADE45D0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.114.0/23
Signature Algorithm: sha256WithRSAEncryption
49:15:1d:b3:8c:58:1a:0c:f1:f5:20:74:71:6d:93:c8:b6:03:
1d:f8:77:38:72:d1:c0:cf:3e:65:ac:e0:cb:65:bb:a9:05:9b:
c9:fa:30:9d:dc:fd:39:d3:4c:2c:36:75:74:6d:d1:70:79:e3:
f3:85:fb:0d:14:51:65:b5:83:e3:db:1b:1c:b1:80:b4:53:02:
65:9c:19:65:d6:69:2f:95:22:59:a3:f7:f0:e3:d4:46:d0:0e:
9f:b4:b5:7e:45:7f:14:ce:0f:68:11:25:da:e4:f7:17:95:c4:
3e:b6:08:32:46:56:40:87:b8:cd:c4:23:f3:62:08:e6:9a:3c:
aa:bc:1c:37:7f:30:2c:bb:38:a1:fa:83:da:57:1e:56:e6:e0:
d7:d1:c9:45:5f:b5:cd:46:1f:72:10:20:fd:d0:be:e4:31:59:
62:92:d2:13:22:a8:a6:ad:91:69:6c:b6:6b:4d:96:de:58:da:
5b:4c:5c:0d:40:61:ba:77:06:86:11:ab:0c:4b:56:a7:3e:e6:
54:b4:bf:c3:e4:86:cd:4a:ec:05:af:3d:c9:c6:98:07:bc:9e:
61:83:4e:0c:4b:74:25:ab:f1:3c:c4:93:c0:8f:ee:71:f3:ab:
46:eb:d3:5d:49:09:e7:48:cd:fa:4f:55:10:7f:34:66:b7:a5:
e7:f8:ac:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 05:11:44 2024 by rpki-client on console-ams.rpki-client.org