Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/455CF4F8C6FA11EEB9BB0D20C4F9AE02.roa
File: 455CF4F8C6FA11EEB9BB0D20C4F9AE02.roa (raw, json)
Hash identifier: Fj2cF1z1rsvNVARy0tnEyZmW6U8P5OqC/VKBcci87R8=
Subject key identifier: 0A:68:D8:FE:F0:51:D7:5B:DC:B1:AE:F7:F5:58:84:DD:4F:26:C3:DC
Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial: 02
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/455CF4F8C6FA11EEB9BB0D20C4F9AE02.roa
Signing time: Fri 09 Feb 2024 03:21:10 +0000
ROA not before: Fri 09 Feb 2024 03:21:10 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 7586
IP address blocks: 103.118.40.0/24 maxlen: 24
103.118.41.0/24 maxlen: 24
103.118.42.0/24 maxlen: 24
103.118.43.0/24 maxlen: 24
103.236.224.0/24 maxlen: 24
103.236.225.0/24 maxlen: 24
2403:27c0:1000::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 14 Mar 2024 03:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Validity
Not Before: Feb 9 03:21:10 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=65c59a26-2ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:d4:07:02:27:6d:2d:7d:a2:ff:63:96:4e:
b8:03:ed:ea:ff:9c:4c:45:57:98:2f:46:43:9e:b6:
78:3c:45:86:4a:70:bf:d2:93:04:44:76:b0:d6:dd:
29:e8:b6:d3:a3:34:f0:25:df:89:2b:8f:6c:a6:81:
5f:4f:26:01:87:54:ed:69:d7:a2:26:8c:fc:b6:b1:
bf:46:ea:8b:b4:18:bc:2b:88:6b:4d:5f:28:c9:7d:
5c:18:d2:47:4f:b4:ab:0b:4c:25:61:7b:78:46:01:
96:1c:da:69:89:33:7f:cd:65:8a:ef:2d:22:9e:3a:
75:2e:d4:c5:e0:7f:81:8f:c0:7a:7a:fa:7d:aa:be:
ab:cc:d8:d0:56:4b:ae:9e:ce:42:d8:c3:04:43:bf:
c9:db:2f:7d:29:d6:01:ee:14:e1:ac:3c:1d:89:54:
ff:09:69:28:76:90:72:e6:7c:ae:07:a2:b3:0b:0a:
41:34:5e:41:92:7c:16:da:1a:c4:b1:8e:ab:b3:af:
c9:04:ec:71:95:57:44:1c:36:35:43:37:3c:5b:0a:
c7:f1:86:de:98:f0:a5:e1:c7:de:30:ab:61:42:44:
2b:cc:26:32:72:21:7b:68:7b:8d:76:63:62:f1:fa:
61:bc:fb:3a:06:13:1c:e9:45:12:63:68:e4:bc:bb:
ab:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:68:D8:FE:F0:51:D7:5B:DC:B1:AE:F7:F5:58:84:DD:4F:26:C3:DC
X509v3 Authority Key Identifier:
keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/455CF4F8C6FA11EEB9BB0D20C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.40.0/22
103.236.224.0/23
IPv6:
2403:27c0:1000::/48
Signature Algorithm: sha256WithRSAEncryption
5c:0f:64:54:b6:d1:ab:13:49:f3:ac:09:96:ce:72:ca:17:36:
1d:c7:f6:86:99:ce:40:32:08:a2:ef:f5:4c:8f:08:1f:3c:ac:
57:4b:1c:6b:f6:2b:2e:a0:b7:ec:b7:c8:22:9f:16:07:29:e6:
9f:e6:c0:c1:03:43:f8:d3:5d:4e:2b:30:de:17:82:2b:f3:32:
d1:e6:49:20:54:33:cf:ec:8b:62:bc:ac:34:4b:8d:38:93:7a:
ad:be:14:b1:47:9f:54:8c:69:a4:62:2b:06:2f:24:23:00:69:
1d:80:3a:30:d2:69:f7:3d:4e:8a:35:a7:6f:f8:ec:dd:46:e9:
9a:27:b1:4a:7a:72:b3:4c:de:2d:65:01:74:17:31:8b:ce:ac:
98:7a:c3:f1:e9:80:cb:50:c3:7f:2e:17:b1:e0:5d:72:ba:bd:
d8:3e:3f:8a:44:6e:bf:ed:b0:3c:27:fa:14:42:11:bb:54:70:
3b:7f:f3:5f:af:34:4b:eb:cf:90:18:c5:f0:60:a0:9c:2c:2d:
a2:09:df:a2:90:16:f8:7f:df:6d:b9:51:f9:61:16:e0:da:e8:
dd:40:a5:dd:6c:47:3a:ca:48:9d:ab:aa:e6:ad:71:58:56:cc:
fb:f8:77:12:cb:1d:41:e0:43:7d:60:45:66:f3:b5:54:00:fb:
d9:0d:73:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org