Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/B2EB9FEA214811EE8A1BBE50C4F9AE02.roa
File: B2EB9FEA214811EE8A1BBE50C4F9AE02.roa (raw, json)
Hash identifier: SeDIEuJEB2ph6YfCfQ/QJvFcKbvnCS8gyaPsIAP+jAs=
Subject key identifier: 85:86:99:DA:0E:3D:14:D6:2A:90:1B:E1:D8:C7:0B:45:E1:7E:6A:1C
Certificate issuer: /CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
Certificate serial: 0511
Authority key identifier: E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/B2EB9FEA214811EE8A1BBE50C4F9AE02.roa
Signing time: Thu 13 Jul 2023 06:44:22 +0000
ROA not before: Thu 13 Jul 2023 06:44:22 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 134486
IP address blocks: 103.139.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Jul 2023 01:37:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1297 (0x511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
Validity
Not Before: Jul 13 06:44:22 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64af9d46-a96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:94:f0:d9:ad:57:ed:1e:af:00:ab:8c:97:
cb:50:f7:27:dc:55:42:25:fc:71:08:32:3d:59:0c:
10:07:90:5a:57:4b:ed:1d:4a:e6:64:89:c7:88:0d:
ee:a2:6c:0c:68:75:3e:2d:50:7d:e2:1e:6c:06:19:
bd:fc:92:12:86:75:ff:e9:f3:72:36:51:cf:7a:52:
99:3d:6f:d9:2a:8d:b9:79:87:60:cb:2a:1f:5f:1a:
04:43:83:81:dd:bb:8d:17:4f:e3:7e:b2:d1:d2:2b:
99:2a:11:0b:5b:3e:cf:6b:4b:d8:19:d1:57:6b:2c:
da:36:13:17:5d:8d:29:9f:05:47:c6:5e:ca:1c:00:
83:ce:5e:e2:cb:af:ab:ba:ab:31:60:0b:8b:ae:b6:
6b:39:22:09:ba:00:2a:58:13:47:31:2e:17:42:3e:
c3:44:16:90:79:92:90:5a:ad:8e:b5:10:e2:db:17:
89:47:d4:4b:9f:5a:91:62:61:e8:c4:ed:f5:c9:d5:
f1:70:2b:e7:9b:0d:8e:6d:72:0d:2f:5e:84:b2:47:
13:98:71:0c:7f:63:d7:e7:31:4b:df:04:c8:99:6d:
94:e6:ce:a3:a5:75:bd:50:c0:16:dc:5d:de:36:59:
37:a1:9b:c1:42:92:69:68:b0:35:19:a6:1f:53:fe:
52:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:86:99:DA:0E:3D:14:D6:2A:90:1B:E1:D8:C7:0B:45:E1:7E:6A:1C
X509v3 Authority Key Identifier:
keyid:E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/B2EB9FEA214811EE8A1BBE50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.218.0/24
Signature Algorithm: sha256WithRSAEncryption
39:94:f9:4e:05:d8:ab:66:c1:b4:75:61:9f:49:c7:32:01:4b:
4e:db:2e:c6:8e:d1:d8:77:70:25:d1:94:b7:e9:c6:dc:ae:8c:
c4:1a:84:fe:f6:8e:76:41:79:7a:36:b9:e2:1c:55:a8:4e:d1:
4f:3e:8a:90:64:fd:86:1e:4c:01:d2:4f:25:c8:42:42:a9:97:
15:37:44:b1:98:6a:4a:77:ef:b8:e5:ec:09:ab:b3:99:94:11:
4c:e0:bc:ef:70:97:c5:1d:fd:a9:8c:81:3d:8e:41:65:44:ca:
29:92:51:8a:23:eb:89:4a:20:f1:e4:45:90:34:72:26:ae:63:
89:e5:a3:55:79:09:16:dc:f9:3d:c6:f8:ca:ff:7a:9f:a1:1b:
a0:9d:16:62:c1:61:97:b6:43:c2:c8:60:ee:7a:1d:b9:fe:0c:
ca:7b:a8:32:ca:88:18:15:01:d1:ff:b4:11:86:a7:46:6f:06:
c5:18:13:a3:ea:15:59:75:78:d5:29:f5:cc:ad:3c:54:7a:bf:
a2:04:be:35:0f:de:d5:67:e8:7d:f2:5a:04:cc:6b:c9:42:e4:
14:e3:14:85:1c:25:b1:7e:12:81:3a:da:c9:d7:8a:83:c2:87:
8d:96:c4:c7:b5:e6:61:72:f3:5b:9c:dd:ce:96:ec:e0:d4:c6:
3d:fe:b4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-ams.rpki-client.org