Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/CBBD0C44295B11EBB6592F7CC4F9AE02.roa
File: CBBD0C44295B11EBB6592F7CC4F9AE02.roa (raw, json)
Hash identifier: GGSGud9e5EmVlzgztMbCedgUgSQWzW85b2I/rsdqDHw=
Subject key identifier: 0F:97:25:8A:03:59:56:BF:EE:61:FC:03:2B:9D:D6:15:2B:7F:0B:D8
Certificate issuer: /CN=A917AF13/serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8
Certificate serial: 064E
Authority key identifier: 3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/CBBD0C44295B11EBB6592F7CC4F9AE02.roa
Signing time: Thu 04 Jan 2024 23:21:46 +0000
ROA not before: Thu 04 Jan 2024 23:21:46 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 58507
IP address blocks: 103.81.124.0/22 maxlen: 24
199.21.172.0/22 maxlen: 24
2400:70c0::/32 maxlen: 40
Validation: Failed, certificate revoked on Wed 29 May 2024 01:15:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1614 (0x64e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AF13/serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8
Validity
Not Before: Jan 4 23:21:46 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65973d8a-43c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:81:50:9e:ae:a5:e5:09:33:47:65:2c:4f:c2:
63:88:bb:cc:cc:d4:8d:4e:9f:71:09:48:f7:0a:d7:
02:06:7b:94:b8:e1:07:49:9e:58:1b:f9:ca:50:d0:
46:ce:7b:fe:b2:01:9c:11:d9:a7:96:78:b8:ce:f8:
67:67:d7:e6:ac:31:ad:e1:e5:57:ad:e6:3d:1b:2e:
40:86:a6:11:78:9f:d2:7c:c3:5b:c0:4e:7a:46:4d:
b2:74:94:36:56:8f:2a:c7:79:0d:e8:4a:a1:2c:1a:
8c:14:bb:b1:ea:ee:c4:41:1f:0d:2e:75:ee:61:6c:
a1:9c:be:08:05:78:5e:7f:32:2e:67:a2:a8:c0:1b:
01:08:4d:6e:6c:be:63:aa:6f:14:4f:ec:d9:44:75:
1a:af:f8:26:e1:8e:01:23:35:86:a7:90:ab:2e:a7:
c3:11:1d:c8:32:f8:4c:db:8e:74:d2:b7:5a:fc:57:
5a:c3:b8:fb:c1:17:f0:21:ea:59:b4:f0:e2:82:f9:
da:59:fc:5d:df:ea:15:28:e0:a4:e0:f8:7b:41:f8:
83:65:eb:10:2a:f4:46:07:9d:64:f7:6f:d9:28:38:
e0:3e:64:ad:34:33:93:0a:bc:c7:91:fe:5b:ab:aa:
c3:ff:7f:b1:cd:41:97:62:fc:a7:06:58:bd:ff:ee:
84:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:97:25:8A:03:59:56:BF:EE:61:FC:03:2B:9D:D6:15:2B:7F:0B:D8
X509v3 Authority Key Identifier:
keyid:3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/CBBD0C44295B11EBB6592F7CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.81.124.0/22
199.21.172.0/22
IPv6:
2400:70c0::/32
Signature Algorithm: sha256WithRSAEncryption
41:2d:74:86:48:47:d8:1b:24:82:ef:6d:3f:41:87:af:13:22:
14:ef:79:75:2c:59:94:d2:55:77:76:f5:3c:e4:b8:c9:19:6e:
4b:4d:ab:f3:84:bb:ea:f6:29:90:81:b6:a6:68:bd:5c:c3:66:
2e:11:2b:e8:cf:b4:26:8c:6c:3a:d2:3f:65:41:50:67:ad:4b:
14:0b:53:cc:7c:1f:0e:7c:e7:43:f0:61:5f:e5:43:f1:51:dc:
9b:b5:ea:f5:90:42:83:be:7a:48:eb:34:27:d8:50:5e:e4:08:
f4:05:6e:52:e7:55:46:82:0d:a5:19:5b:6d:16:18:a4:18:f3:
11:3c:43:21:47:58:cf:c4:8c:5f:be:82:5a:4e:11:89:90:58:
83:d4:18:6d:e2:0f:96:fb:9b:c5:b5:f5:34:83:89:13:f4:da:
3d:b1:5f:fa:c0:2c:4f:3e:fb:40:83:55:3e:6d:72:9c:4c:ec:
bc:f3:48:a0:59:55:9e:11:18:47:ee:16:c5:04:29:1c:d1:83:
59:36:1e:1d:92:88:d6:b3:e4:bf:36:66:9f:ac:7d:68:b4:58:
a5:79:93:c2:f5:3b:eb:1a:10:68:aa:91:29:db:09:a1:c8:9b:
5f:b3:30:16:c3:1b:23:72:ca:f0:ac:9b:52:92:e1:1b:c4:fd:
a0:39:3e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-ams.rpki-client.org