Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/F5968C34ED2F11EE8397F413C4F9AE02.roa
File: F5968C34ED2F11EE8397F413C4F9AE02.roa (raw, json)
Hash identifier: QloWPZcGjutNZnBNbUJnrVseot7dsb4K8cl9TbyHvbE=
Subject key identifier: 4F:58:C3:B8:A6:8C:2A:03:4F:DB:55:A6:82:B2:E1:BF:A2:AA:97:DF
Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Certificate serial: 1BD6
Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/F5968C34ED2F11EE8397F413C4F9AE02.roa
Signing time: Thu 28 Mar 2024 18:21:14 +0000
ROA not before: Thu 28 Mar 2024 18:21:14 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 150750
IP address blocks: 118.103.228.0/24 maxlen: 24
118.103.229.0/24 maxlen: 24
118.103.230.0/24 maxlen: 24
118.103.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 18:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7126 (0x1bd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Validity
Not Before: Mar 28 18:21:14 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=6605b519-51a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:f6:ce:b6:fb:0e:19:46:01:02:52:d8:fa:
54:71:7c:14:92:d8:53:2d:2d:b5:f8:ff:84:bf:3c:
4a:27:36:18:51:34:4e:b2:83:d9:b0:9c:91:b1:5d:
d8:e1:d0:fc:a1:52:6f:d2:bf:73:e7:c0:33:ad:cf:
02:c9:5d:c4:73:e5:14:48:65:ad:45:11:06:98:a0:
6c:0e:6b:df:c8:0c:f1:2c:79:ae:0d:1e:33:25:ac:
95:f9:35:95:e8:d5:eb:11:0f:e4:c5:10:d6:55:5b:
93:70:7d:57:c2:5b:25:71:11:fd:9c:2e:15:d6:7f:
20:44:12:f0:e1:e1:d9:eb:70:99:95:b1:f5:67:3a:
03:21:ab:6f:6a:ed:73:10:ec:81:41:e1:6a:a5:96:
6b:60:d5:96:c2:8f:58:6f:a2:2f:4a:a3:bd:f0:53:
cb:7b:c4:bc:88:39:27:23:1d:ab:b6:0b:1b:cb:ab:
17:5c:ef:fb:2a:39:64:88:e3:b9:26:27:ce:f1:d8:
20:2b:4a:65:b0:ec:1f:a5:1b:53:7e:45:b9:25:08:
eb:da:04:24:96:ec:e9:e5:d6:de:da:bc:90:ea:31:
8a:5e:d0:6b:31:e9:52:20:ea:ae:18:6f:cf:e0:ea:
ae:0d:ce:54:c2:9b:2f:2c:cd:ec:c6:d4:0e:d0:ab:
8e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:58:C3:B8:A6:8C:2A:03:4F:DB:55:A6:82:B2:E1:BF:A2:AA:97:DF
X509v3 Authority Key Identifier:
keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/F5968C34ED2F11EE8397F413C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.103.228.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:71:ba:ce:db:c6:cf:23:ed:98:d0:9e:36:97:74:12:44:85:
60:b2:80:f6:c4:d2:ae:0b:ce:42:58:5c:0f:e9:8c:c4:26:8f:
58:9b:4b:b5:5f:ec:5b:10:22:0a:ba:d9:e6:40:65:0f:ab:22:
4d:ee:e6:9e:67:c1:92:c7:28:a8:bd:be:e0:11:ec:f1:16:d4:
4e:6c:77:39:f5:1e:de:1e:58:81:a7:4d:ed:36:34:db:5d:73:
84:0f:9a:88:06:b2:38:d9:0f:7b:ea:95:c0:ed:75:6f:7f:ed:
4d:ef:d9:08:9a:7d:cf:85:c4:51:49:e3:6d:cb:27:9d:39:ed:
f5:8f:3f:dc:22:0d:12:2b:5b:5a:20:89:49:ab:ce:02:1e:24:
92:84:92:c6:1a:26:88:ed:23:c8:e2:5c:d7:c0:c8:3c:67:c9:
74:e8:3d:47:76:9f:25:cc:83:74:85:9f:a9:cd:22:47:25:c3:
3f:4a:54:9d:0e:11:8b:56:9b:18:d1:63:b0:d3:63:dc:71:0a:
21:bd:61:5c:44:b8:ad:cb:bf:46:0f:aa:a9:2b:da:02:c4:f1:
f1:79:71:1e:bf:ed:0e:92:23:3d:ec:75:5b:1a:38:91:da:53:
67:fd:59:36:2c:7c:bc:52:f5:ab:8c:68:3d:bd:bc:91:15:58:
5f:08:69:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 22:13:26 2024 by rpki-client on console-ams.rpki-client.org