Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/09EC11AACC0511EEBD117713C4F9AE02.roa
File: 09EC11AACC0511EEBD117713C4F9AE02.roa (raw, json)
Hash identifier: Djmf7eN747WDtLAzRL1waIXbzzTaBtP2L85/sqaBxyE=
Subject key identifier: BE:A1:ED:6B:58:FA:00:AA:96:EC:83:78:B6:3E:1A:79:CE:5A:1B:72
Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
Certificate serial: 0217
Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/09EC11AACC0511EEBD117713C4F9AE02.roa
Signing time: Thu 15 Feb 2024 13:20:51 +0000
ROA not before: Thu 15 Feb 2024 13:20:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137823
IP address blocks: 103.185.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
Validity
Not Before: Feb 15 13:20:51 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65ce0fb3-ba9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:e5:ff:59:4d:54:bd:b3:8d:6e:e8:ec:46:
5a:3e:ed:e0:30:44:32:05:93:bf:c8:93:2f:c9:23:
a8:25:d3:a9:2a:52:82:23:2c:f8:7d:c9:c7:40:6c:
d3:6a:37:65:bc:e1:ed:48:1b:aa:14:36:ba:e9:13:
f3:b4:3d:87:ef:e8:91:8f:4d:28:e2:14:49:46:39:
0d:d1:8e:f8:51:aa:6b:2c:e4:7f:0e:d8:da:d0:08:
5a:bb:7d:c5:dd:ff:2f:a8:8e:d2:18:45:8d:55:72:
f8:4c:57:29:06:c4:ad:9a:02:c8:fe:5c:0b:4b:de:
7a:a9:27:a9:ad:aa:e5:9c:8c:9d:59:6b:53:07:08:
b4:33:49:c1:0c:37:5b:36:dc:0f:f8:15:13:a2:61:
6f:77:35:51:a9:ab:44:74:93:02:e2:46:ce:fc:c0:
34:67:b8:e0:53:21:b6:13:9b:27:65:a2:dc:51:a3:
c7:ae:be:cf:2a:78:fc:27:c9:f5:82:ee:cd:68:99:
fb:ee:8c:0a:80:90:91:25:ff:76:3f:f5:9d:21:85:
42:a6:86:da:13:e0:12:e2:fa:51:e4:61:ed:14:7e:
58:49:1c:f1:ac:72:6e:94:1a:d9:06:f1:ac:64:d5:
01:ef:76:24:87:ca:b6:c6:c8:6f:4a:e8:9e:96:76:
4a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A1:ED:6B:58:FA:00:AA:96:EC:83:78:B6:3E:1A:79:CE:5A:1B:72
X509v3 Authority Key Identifier:
keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/09EC11AACC0511EEBD117713C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.227.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:68:6f:ba:87:61:f0:13:42:4e:18:9e:79:1a:81:ef:61:d1:
5d:a2:47:4b:24:33:ec:93:af:61:e2:c2:60:0e:ab:0f:41:c6:
a4:53:47:2f:61:0c:32:44:90:46:5e:8f:14:04:e9:9b:2c:6b:
47:8a:40:4e:6d:49:19:8a:d1:3b:26:da:d3:ae:0d:9f:31:d4:
70:02:eb:00:23:70:aa:63:8d:fe:02:c3:b3:8b:1e:cf:c4:1c:
6b:1f:8f:2e:45:e8:4f:c7:27:83:cf:6d:1f:f0:88:e2:56:a6:
b0:87:5a:87:6b:d4:55:f4:fe:64:ab:0d:88:38:ed:50:ae:fc:
8e:b9:c4:10:f0:4f:da:75:ab:c7:a8:37:fe:9b:8c:fd:0c:62:
d0:8a:4d:9d:48:ed:02:0d:23:d3:f7:0d:f5:ea:fb:18:d6:5a:
b7:0c:78:31:e0:32:75:84:25:78:92:6f:41:80:92:03:6a:5c:
6b:de:4a:33:6b:e9:62:cf:4e:f1:e2:44:93:64:ab:39:ed:ca:
dd:08:57:61:c4:0f:cb:36:43:f9:9d:97:fb:c0:de:a0:92:8e:
0b:f3:bd:17:aa:56:25:d8:e5:94:e7:b0:a8:b8:1d:28:c3:83:
bc:ab:be:81:01:35:91:29:29:57:95:6a:91:25:40:15:21:f2:
cd:6c:17:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 18:54:18 2024 by rpki-client on console-fra.rpki-client.org