Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/43850750140511ED869ED618C4F9AE02.roa
File: 43850750140511ED869ED618C4F9AE02.roa (raw, json)
Hash identifier: 0v1F3p7Zs6szEZqiBwaQzIB2JbVpdW5De1LKAC3Oqcc=
Subject key identifier: EF:8F:00:89:57:53:97:80:A8:45:31:DE:9B:D7:9F:B3:71:A3:DC:5E
Certificate issuer: /CN=A917C716/serialNumber=8BAAFAC465F08D047D2D7094BA5280D7D3988366
Certificate serial: 019E
Authority key identifier: 8B:AA:FA:C4:65:F0:8D:04:7D:2D:70:94:BA:52:80:D7:D3:98:83:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/43850750140511ED869ED618C4F9AE02.roa
Signing time: Wed 03 Apr 2024 05:07:20 +0000
ROA not before: Wed 03 Apr 2024 05:07:20 +0000
ROA not after: Thu 01 Aug 2024 00:00:00 +0000
asID: 148976
IP address blocks: 103.175.34.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Apr 2024 22:18:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C716/serialNumber=8BAAFAC465F08D047D2D7094BA5280D7D3988366
Validity
Not Before: Apr 3 05:07:20 2024 GMT
Not After : Aug 1 00:00:00 2024 GMT
Subject: CN=660ce407-140b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b0:bd:dc:83:e5:d4:a0:fd:17:fd:72:fb:07:
74:14:46:2a:5e:72:1e:7d:b1:b8:db:de:26:ee:69:
80:a5:51:68:1d:8a:15:0a:55:20:2c:83:fd:45:9c:
ce:c7:97:cb:87:9e:d0:25:64:6f:31:ea:27:70:c8:
eb:95:73:b0:20:8a:27:27:48:06:1c:77:81:c8:15:
36:0b:c3:33:a3:bf:c5:e8:1f:7a:bc:7a:76:42:d5:
3a:49:62:11:76:95:87:00:da:ae:81:18:62:29:2c:
ce:f9:83:d5:89:e5:bb:14:ee:c4:dd:64:8c:0e:97:
0d:3a:5b:aa:55:9d:e9:31:d4:cb:b7:07:b5:6e:0d:
cc:79:a9:b8:b3:86:ac:dc:f6:b8:2a:52:73:39:6c:
97:c9:fd:ea:7e:5e:9e:4e:69:8a:05:04:f0:ac:1c:
8b:23:60:f7:df:3b:64:14:9c:d7:32:5e:0c:9f:1a:
93:e8:bc:9e:69:70:79:a2:51:1e:4f:2f:23:31:b6:
34:f8:52:87:a1:7b:ab:99:a0:52:49:fa:07:a4:98:
05:2d:0e:21:c4:82:52:2d:2d:81:d5:15:92:bf:35:
2e:31:26:4f:93:77:46:d9:85:41:e6:45:08:ce:96:
92:56:06:a1:02:e6:3c:ec:84:af:82:44:b8:f2:4d:
cc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8F:00:89:57:53:97:80:A8:45:31:DE:9B:D7:9F:B3:71:A3:DC:5E
X509v3 Authority Key Identifier:
keyid:8B:AA:FA:C4:65:F0:8D:04:7D:2D:70:94:BA:52:80:D7:D3:98:83:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/43850750140511ED869ED618C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.34.0/23
Signature Algorithm: sha256WithRSAEncryption
78:9f:de:49:e6:f9:fe:ba:25:ed:aa:91:e6:5e:06:41:5e:bb:
c1:7c:fa:0b:50:85:bf:82:06:6b:db:95:cc:cf:8d:b8:ca:91:
af:88:c4:54:4e:9f:df:01:48:7c:88:fe:dc:24:86:31:87:6b:
40:9e:c8:b8:6b:29:0c:f0:bd:87:77:94:68:5e:93:2b:18:cf:
55:6b:83:5f:f4:b5:70:fe:75:28:d0:12:88:69:79:d8:65:e7:
06:d0:07:39:7b:b8:1c:f4:56:1e:c9:78:5b:65:57:0a:2d:e2:
09:36:3a:d6:57:fd:c8:ed:9c:aa:d5:ce:6d:af:89:3b:32:82:
7d:50:be:6f:e3:d2:42:26:a4:97:1d:f4:1f:62:37:5a:f4:2a:
89:ef:dc:af:b9:f5:89:e8:40:38:87:1f:0e:dd:49:58:ae:37:
05:cb:76:55:8d:ba:90:0b:a8:2b:03:4e:59:1a:8d:7e:fc:f8:
99:df:8b:a5:4b:d2:4a:f3:5a:81:6d:68:fc:38:ce:2a:aa:41:
09:de:90:86:ca:41:e4:ce:dd:b3:1a:d1:a2:4c:db:cc:40:f2:
05:17:33:d1:4e:4d:b8:4e:30:0b:07:51:b9:fa:7d:b6:60:b6:
6c:48:ea:ee:e2:dc:42:43:7e:c2:ba:b9:f5:68:2a:60:a7:66:
54:c1:6b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:13 2024 by rpki-client on console-fra.rpki-client.org