Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/483ED5BA0A1C11EEA415BE0CC4F9AE02.roa
File: 483ED5BA0A1C11EEA415BE0CC4F9AE02.roa (raw, json)
Hash identifier: D/3crIyU8HjWAFwEMFpIqSzaKamRrK84YSy2F/Qym+c=
Subject key identifier: 32:DB:6D:E8:51:CF:96:9C:F6:7E:9A:A7:27:9E:38:04:7C:02:10:AA
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 0F67
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/483ED5BA0A1C11EEA415BE0CC4F9AE02.roa
Signing time: Wed 16 Aug 2023 18:16:33 +0000
ROA not before: Wed 16 Aug 2023 18:16:33 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 40065
IP address blocks: 103.140.8.0/24 maxlen: 24
103.140.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Jun 2024 05:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3943 (0xf67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Aug 16 18:16:33 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64dd1281-6fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:13:5d:3c:30:ff:c3:09:49:5d:0b:5d:c3:
8c:7f:eb:47:23:ab:b1:97:29:24:fe:b1:29:13:f7:
50:45:93:3a:b6:cd:44:95:4e:5d:f8:56:fb:36:aa:
bc:c2:e4:38:94:3f:ec:c4:9d:c2:32:5b:a2:2b:8f:
26:24:1f:fe:be:53:be:2f:82:bb:21:b3:27:28:44:
58:fb:94:f8:17:2d:51:c7:90:54:f2:7d:21:32:7a:
e8:6f:0d:16:59:de:38:12:3e:13:4f:bc:e3:1d:d2:
65:84:00:41:46:08:9b:26:cd:05:35:4c:8e:4a:06:
42:88:7e:81:fb:d6:b3:15:d4:9e:b9:cc:b2:0d:1e:
16:35:28:32:f3:87:14:36:b1:39:c4:39:71:d9:8f:
fd:9e:e3:f2:26:b1:27:ef:30:1e:43:e3:94:e7:89:
0c:11:ae:5b:ab:01:60:12:0b:86:81:da:46:48:84:
a1:56:b8:dd:f9:b2:24:65:29:0a:83:5d:a8:40:88:
92:09:64:b8:ad:19:7f:1d:20:64:52:e2:73:cd:9d:
5f:5e:23:0e:5c:f7:1a:87:bb:b2:fd:fb:57:0e:25:
c9:a2:ec:b3:49:4f:7c:5c:f6:7f:c7:0f:c7:51:00:
32:35:93:ca:7b:e1:bf:89:97:b8:d7:56:cb:77:06:
a0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DB:6D:E8:51:CF:96:9C:F6:7E:9A:A7:27:9E:38:04:7C:02:10:AA
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/483ED5BA0A1C11EEA415BE0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.8.0/23
Signature Algorithm: sha256WithRSAEncryption
39:4a:8c:28:3e:7e:b4:60:f5:9b:ea:21:47:3a:68:6d:b5:37:
94:69:f4:3f:6a:68:54:4a:c2:3f:33:80:2b:37:1d:06:38:3d:
17:f2:16:eb:52:ba:5d:ab:b2:e3:5c:6e:77:83:a4:e9:1f:3e:
cf:66:03:73:41:5f:a1:72:58:07:02:e7:02:d8:02:bc:dd:08:
00:b3:36:0a:21:f3:42:90:5c:03:6e:61:1f:de:5e:32:b3:45:
0d:5a:fe:4d:a7:5f:b6:80:26:15:c0:67:15:dc:e9:2c:77:98:
f4:0c:f0:07:05:ff:06:56:cb:4b:2b:23:07:c7:c5:89:ad:37:
d3:28:fa:56:5a:2d:65:ae:4a:9a:1f:83:7c:cf:11:78:28:e8:
8c:c2:12:42:42:e7:91:ed:1f:9c:fb:a5:a7:a4:8e:9c:d5:96:
bc:bf:d0:4d:b5:9c:ef:f8:80:2d:3d:4e:0f:09:f5:0a:59:e5:
96:12:8b:a5:a1:23:38:0f:57:a5:b3:81:b6:9e:c6:0a:35:cf:
e0:92:34:d1:36:2c:c1:a0:76:61:25:f1:c9:12:7f:3b:3f:1b:
76:94:55:10:e0:4b:db:71:83:d3:a3:11:85:a4:bc:f8:eb:b2:
06:9a:8b:fe:8c:16:fc:f5:ce:26:ec:7d:49:13:7a:1a:43:2e:
d6:00:c8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 09:35:06 2024 by rpki-client on console-fra.rpki-client.org