Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/4DC3DBB67D6F11EB9D8BB419C4F9AE02.roa
File: 4DC3DBB67D6F11EB9D8BB419C4F9AE02.roa (raw, json)
Hash identifier: 7L++sAqFUBd+4r7C3fuIetlcaVjGZBjzJf0vvTxTclA=
Subject key identifier: 12:74:2C:26:E9:AC:45:7D:36:A8:A7:E1:AC:A1:47:FB:2C:B9:83:A1
Certificate issuer: /CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
Certificate serial: 050E
Authority key identifier: E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/4DC3DBB67D6F11EB9D8BB419C4F9AE02.roa
Signing time: Wed 12 Jul 2023 23:20:24 +0000
ROA not before: Wed 12 Jul 2023 23:20:24 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 137549
IP address blocks: 103.139.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Jul 2023 06:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1294 (0x50e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
Validity
Not Before: Jul 12 23:20:24 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64af3537-4f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:99:51:c3:93:85:f8:9e:ef:1b:2e:49:c1:
28:64:cc:84:36:36:1f:ce:e2:2e:18:b4:1a:0e:b8:
0a:6b:20:07:4b:14:ff:03:fa:b4:d4:8c:a2:07:15:
1f:ae:54:bb:0a:39:97:96:ae:f4:a6:ef:24:39:1e:
8e:ba:2b:25:f2:db:a8:9c:42:9c:eb:39:7d:07:09:
5f:8f:1d:7d:e4:4c:53:01:0f:50:b3:23:4a:0e:d0:
12:fe:f3:da:08:77:a4:e0:83:7b:89:2c:01:9b:26:
cf:aa:36:af:eb:1e:43:0b:c5:7c:45:2b:be:b1:7a:
d4:df:b7:c2:9b:57:c1:70:9e:2a:67:2b:13:fa:37:
1f:f5:14:d4:88:e4:01:a7:2b:ad:31:93:9d:95:a0:
34:d9:cf:96:b6:4a:c3:24:c3:d1:65:c3:10:55:bd:
f0:8d:46:ff:e5:52:82:b9:0b:af:7d:45:eb:b4:6c:
2b:c1:92:cf:bb:a4:1c:a2:99:1a:14:cf:c3:f5:aa:
5b:99:da:47:86:4b:b5:12:b1:a8:59:1b:f3:db:79:
c9:59:f4:31:e2:39:cd:89:21:75:9f:28:51:2b:8f:
77:3a:db:71:26:e9:c8:f1:d6:ac:76:e0:56:97:c4:
57:79:37:79:9f:9a:d7:c2:85:25:6b:22:71:15:3e:
26:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:74:2C:26:E9:AC:45:7D:36:A8:A7:E1:AC:A1:47:FB:2C:B9:83:A1
X509v3 Authority Key Identifier:
keyid:E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/4DC3DBB67D6F11EB9D8BB419C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.218.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:ac:77:13:20:39:0f:d9:3b:21:36:b3:b9:91:ac:f9:60:fd:
e7:57:0c:3c:86:f4:3e:2d:2e:90:c8:05:0b:21:15:c8:9e:8c:
09:84:bd:58:be:3b:ef:4c:42:73:db:d4:2f:a0:20:71:07:05:
16:3c:18:55:40:19:92:c9:aa:22:d7:69:fa:9b:2c:df:29:49:
c0:a1:81:70:5c:e6:67:4e:b2:8f:2a:20:01:42:e3:74:5a:94:
4c:21:f5:90:06:26:cb:73:ea:7c:a7:46:6d:7c:2e:5b:72:18:
e1:4c:46:74:38:a2:1c:2c:fb:23:df:b6:d8:c6:7f:97:4f:22:
0b:75:ce:5a:d3:93:2e:51:dc:a7:40:eb:26:5b:33:62:80:9f:
e1:c3:7e:59:fd:8f:9f:74:c0:f6:2c:a9:5c:60:29:bb:8c:9f:
44:79:f7:46:03:1e:b6:49:f5:47:4f:5b:4d:61:c8:cd:b8:46:
55:63:db:17:34:44:5f:03:32:3d:d7:15:68:74:02:79:1b:eb:
1d:d7:49:9e:f5:75:69:44:9e:8e:a0:96:99:ec:c5:91:d7:9d:
a4:c9:cf:22:2c:2c:a7:95:ed:20:be:2a:78:d3:79:41:d8:32:
a9:71:6d:6a:b8:f5:eb:02:1b:5c:19:a6:b8:5e:a0:18:d6:2f:
40:37:67:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:13 2024 by rpki-client on console-fra.rpki-client.org