Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/45A2D934CBC611EEBF8AD22FC4F9AE02.roa
File: 45A2D934CBC611EEBF8AD22FC4F9AE02.roa (raw, json)
Hash identifier: xXuGc541QpomVhPKwcDdMcYmT+njdGJB7LmmlnPM94c=
Subject key identifier: CC:1C:51:9A:1A:14:C3:93:B9:90:28:2C:E3:3E:DA:42:1F:09:6A:DD
Certificate issuer: /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Certificate serial: 0A41
Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/45A2D934CBC611EEBF8AD22FC4F9AE02.roa
Signing time: Mon 18 Mar 2024 20:48:35 +0000
ROA not before: Mon 18 Mar 2024 20:48:35 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 138623
IP address blocks: 103.134.240.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 May 2024 10:32:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2625 (0xa41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Validity
Not Before: Mar 18 20:48:35 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65f8a8a2-3983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:cf:52:35:f9:bf:3f:43:10:f5:06:be:d3:
84:af:b2:ff:b3:6f:4e:bb:34:0a:79:0f:94:f9:95:
37:7a:68:d1:32:91:2c:14:20:d3:38:5b:52:af:c7:
10:ae:a7:ad:56:a1:a0:09:be:32:f3:0b:56:ac:e5:
dd:e4:d0:c4:54:1d:4b:b4:90:cd:7e:d8:30:47:35:
8e:62:ee:ab:4d:23:61:96:57:14:21:32:30:98:c7:
6d:96:d8:be:85:87:fa:3b:db:57:93:bc:17:1c:80:
6d:05:8a:ab:df:81:d3:30:98:39:e8:6b:13:05:b1:
9a:eb:0a:c5:24:60:e2:3c:9a:81:3d:18:a3:38:3d:
16:8c:8a:1c:e4:ef:5a:46:c9:92:10:fb:2c:a4:07:
1c:58:a6:66:06:da:59:18:af:9d:fe:ef:a6:be:b4:
c6:cc:bb:2f:d1:71:94:99:16:06:87:69:68:c2:04:
87:fb:70:63:72:d8:bf:1f:4a:0f:ec:29:16:48:a8:
13:38:04:64:bb:5d:2e:1d:49:da:a6:d4:c1:4b:c0:
0f:7e:51:bc:21:e4:a5:a8:61:5d:7b:0c:0b:a2:51:
9e:40:a8:1a:b0:da:de:14:51:ff:30:e4:4e:4c:58:
6f:c6:41:72:a6:a0:9b:69:e5:1a:d0:21:b3:b8:a6:
e9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1C:51:9A:1A:14:C3:93:B9:90:28:2C:E3:3E:DA:42:1F:09:6A:DD
X509v3 Authority Key Identifier:
keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/45A2D934CBC611EEBF8AD22FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.240.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:40:aa:ca:71:f8:7c:9e:b7:35:3f:f5:e6:4e:f3:aa:6c:cf:
04:cc:83:78:d2:ce:7c:bf:99:a2:cf:1e:30:99:68:24:73:81:
aa:3c:ec:26:50:7a:41:53:80:c4:1a:f6:8c:38:1e:cc:f9:e0:
a1:2b:05:52:af:77:c1:c5:c8:c1:50:48:2f:e2:a3:6a:9e:f5:
cb:db:45:a4:a3:54:34:5a:ff:bd:ec:f6:f3:52:91:d4:5e:96:
02:d3:64:b0:f8:30:ae:00:26:6f:3e:9f:16:18:f7:8d:77:9f:
97:86:85:90:c4:04:5d:d3:1e:f4:2b:68:94:1a:b8:e2:a9:9e:
9c:4e:af:fe:1e:3a:23:58:9d:03:77:51:60:33:08:65:c6:35:
b8:46:33:ca:5f:a5:64:d1:85:9a:30:89:84:a9:1b:1e:a8:07:
9c:45:c2:5a:47:36:19:83:ea:f4:fd:18:f6:3a:3f:10:58:dc:
9c:9e:f6:5f:7d:a0:1b:e9:71:00:2a:86:69:3d:46:40:3d:c7:
05:ab:fe:5c:58:88:66:89:7f:aa:e6:f7:65:58:d1:92:5d:86:
e1:0b:4e:49:e9:03:b6:98:43:1f:0a:bd:dd:01:23:da:aa:f4:
11:b8:37:96:bc:62:0c:60:5e:a4:f6:91:c8:3a:02:59:c2:7c:
ff:1e:83:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 14:33:02 2024 by rpki-client on console-fra.rpki-client.org