Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/9E004B743F6711EFAF988F11C4F9AE02.roa
File: 9E004B743F6711EFAF988F11C4F9AE02.roa (raw, json)
Hash identifier: J8zVJL8GRPnIKU7ik/xjVn64GElwtQe5eQjv2I5EBhM=
Subject key identifier: 8F:29:76:E2:6D:AB:5A:C5:74:AB:03:E9:99:A7:9E:C2:1B:06:E5:D0
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 105D
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/9E004B743F6711EFAF988F11C4F9AE02.roa
Signing time: Thu 11 Jul 2024 09:26:14 +0000
ROA not before: Thu 11 Jul 2024 09:26:14 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 0
IP address blocks: 103.140.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Jul 2024 10:19:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4189 (0x105d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Jul 11 09:26:14 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=668fa535-7beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:41:2d:c3:51:54:15:78:79:d2:7e:ca:42:53:
ad:bb:a8:a8:4c:67:02:92:71:eb:37:11:61:fd:73:
0f:d9:bb:03:7c:64:e8:01:25:40:d0:a6:da:f2:62:
90:ef:80:ac:f8:7f:38:70:cf:27:7a:71:60:c5:5a:
00:26:cd:51:bd:e8:0b:70:6b:f8:dc:31:ad:c5:41:
20:bc:4c:41:87:9d:b3:4c:28:13:8b:53:97:70:da:
e1:1a:3b:01:19:2f:bd:73:de:0e:8a:51:dc:b1:f1:
a5:ee:1f:e5:2b:3e:ba:b6:5c:d7:42:6c:f6:30:ae:
af:54:9c:61:41:56:27:0c:93:a0:dc:63:74:f3:6a:
47:6f:50:f0:c8:c0:fe:49:13:c6:a8:3b:41:31:f5:
80:c3:09:69:ad:34:82:a9:72:aa:ca:01:7c:4b:8b:
c1:a9:d4:f8:b8:02:dc:36:7a:ce:91:ab:d6:c8:86:
36:ea:ac:57:5f:30:20:77:86:f5:16:aa:8e:da:ce:
e4:16:e1:a2:eb:d3:d0:e3:aa:3f:0b:d4:e2:ce:03:
ea:20:91:23:fc:1b:ea:4d:84:5c:23:32:b6:1b:6e:
1c:4f:c0:15:4e:53:51:81:d9:db:6e:63:58:10:89:
5e:ca:64:59:70:d7:52:fe:71:62:82:76:fe:af:97:
a0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:29:76:E2:6D:AB:5A:C5:74:AB:03:E9:99:A7:9E:C2:1B:06:E5:D0
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/9E004B743F6711EFAF988F11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.9.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:56:49:ee:44:4b:d6:b4:b5:0d:4a:e6:a0:0a:21:f3:88:f2:
8f:63:41:d5:c3:d4:aa:11:82:10:18:cd:8c:ee:58:df:47:f6:
39:1b:f0:fc:a0:87:d1:b0:8a:de:13:be:87:e0:c6:e1:ec:8b:
34:a1:74:72:9d:7b:02:a4:8c:7a:43:43:aa:df:72:f9:21:8b:
9e:8b:15:42:23:b9:20:1c:25:c1:1a:20:89:a9:af:62:d2:00:
af:7e:15:7d:99:c4:7f:e1:fe:fc:7e:f6:0f:c6:45:5c:7b:b6:
81:2c:76:ea:72:e7:81:49:f0:1b:37:34:53:7b:de:df:f0:ac:
4a:cd:2e:40:9b:6d:82:20:bc:99:68:c2:ce:6f:3f:b7:e6:fa:
dd:3a:79:09:05:6e:bf:90:b3:b1:72:eb:cb:59:e3:f7:a5:8e:
82:59:7e:11:78:bd:29:7c:50:8f:16:c1:b5:da:fe:f9:13:08:
a4:c7:18:bb:9b:46:cc:6a:a8:70:dc:cc:69:5a:c8:d6:ec:ca:
17:c4:8c:a7:06:4c:a7:aa:3b:aa:1a:26:f8:27:44:73:44:55:
ef:cd:d5:dd:85:28:1a:d1:65:01:ad:05:b9:76:12:00:88:cb:
e9:d5:4f:c7:b5:f9:58:a6:f7:c8:ef:48:3a:b0:a7:8b:0b:67:
a1:19:d8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 13 12:13:34 2024 by rpki-client on console-ams.rpki-client.org