Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/6139BEE86F0611ECA7639C1CC4F9AE02.roa
File: 6139BEE86F0611ECA7639C1CC4F9AE02.roa (raw, json)
Hash identifier: LOhwdeI/tkjFId9FFZkMhriefK2F5ifOwF/fZno8Py0=
Subject key identifier: FD:B6:EA:D5:E4:5D:9C:DB:1B:CF:9D:31:2E:65:6E:92:70:48:9B:27
Certificate issuer: /CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2
Certificate serial: 0AC6
Authority key identifier: 65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/6139BEE86F0611ECA7639C1CC4F9AE02.roa
Signing time: Sun 28 May 2023 20:30:47 +0000
ROA not before: Sun 28 May 2023 20:30:47 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 137449
IP address blocks: 103.114.96.0/24 maxlen: 24
103.114.97.0/24 maxlen: 24
103.114.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Oct 2023 08:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2758 (0xac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2
Validity
Not Before: May 28 20:30:47 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6473b9f6-b495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:9d:b7:65:3e:d0:26:52:92:fa:b7:06:e9:
db:3f:4a:fd:54:c9:77:98:8c:f4:e6:2d:84:85:ed:
9f:ab:fd:55:36:1c:bb:b8:16:29:72:b7:c1:e3:59:
eb:b0:66:e8:a2:05:1c:1c:05:6a:67:1b:1b:f4:c7:
c2:8e:6e:07:da:98:0a:17:89:7d:f1:14:8f:5f:9c:
e2:66:67:60:ee:ff:21:d4:66:b6:f6:a7:e0:2d:6e:
ac:28:15:4d:9b:32:d3:70:bb:ce:5e:99:ca:53:53:
f9:5f:93:4a:53:31:2f:c0:58:4d:62:fa:b9:a3:63:
53:23:6a:f8:e8:ab:cc:96:ae:87:b1:26:c4:38:26:
01:aa:53:40:fd:79:15:86:f8:6c:6a:1c:ef:2b:ae:
e3:83:a9:2b:92:4e:a0:9c:4b:e3:6d:ff:e1:5d:36:
8f:b1:87:eb:79:31:29:0a:9e:cc:10:d8:d8:f9:98:
16:c8:5a:a7:d7:9b:af:b8:23:de:bc:cb:69:55:0d:
3e:81:bd:cc:25:e2:03:c7:22:d0:47:28:2d:87:19:
e3:c8:bf:67:07:8e:7f:74:e3:c0:3d:1a:c4:02:1f:
b9:d4:3c:61:23:fd:4b:95:75:4e:18:59:83:63:31:
e9:cc:10:3f:81:f2:8d:97:2b:21:0e:97:c7:6c:3a:
d6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B6:EA:D5:E4:5D:9C:DB:1B:CF:9D:31:2E:65:6E:92:70:48:9B:27
X509v3 Authority Key Identifier:
keyid:65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/6139BEE86F0611ECA7639C1CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.96.0-103.114.98.255
Signature Algorithm: sha256WithRSAEncryption
09:eb:10:a1:9a:97:9e:ca:e7:d1:fa:e6:73:c8:91:71:ac:5a:
11:99:f7:58:26:d7:a7:9f:27:d7:7c:a9:6b:bf:01:e0:a2:03:
46:13:54:68:ef:69:05:8d:06:cf:f6:70:cc:2e:ca:c2:3a:8f:
13:38:54:87:04:6a:1c:77:e7:f0:a4:ca:d3:6a:ed:60:61:a4:
99:40:20:2f:95:4c:f8:6e:b4:24:3e:e0:90:43:c9:2b:34:cb:
21:46:b2:a5:4e:6d:17:91:4f:95:d1:9b:04:a2:16:f3:be:70:
bd:f2:36:92:1b:82:5b:3c:24:19:e6:30:c5:27:b5:29:b9:ad:
a1:92:c6:31:68:60:1f:8c:2a:f6:ce:28:50:d7:ae:4f:94:3f:
96:9a:7c:55:2e:89:48:9a:26:22:35:43:53:29:5f:e0:e8:b4:
8e:7e:a6:8a:74:e7:a2:07:60:fd:55:cd:84:ad:fd:0a:af:15:
8f:00:4d:e0:6f:9c:75:04:37:bd:d6:7b:69:f3:03:fc:d9:ab:
e8:52:8a:e4:a1:2b:b6:3e:c6:af:6e:fd:f9:a4:f5:1c:2d:22:
d0:25:0a:82:09:42:2a:8e:07:ac:ba:8f:40:e3:88:41:8c:f0:
53:3c:d3:70:26:46:3a:a4:af:6a:4b:67:0d:88:f2:24:9d:99:
30:bc:7f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-ams.rpki-client.org