Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/3E4FA084CBFF11EE946DBE80C4F9AE02.roa
File: 3E4FA084CBFF11EE946DBE80C4F9AE02.roa (raw, json)
Hash identifier: jkVvOkM2JYr9uVoYjSaOFoYaUdz8rV8Dq9nj7hU7YDw=
Subject key identifier: B6:E9:21:2E:B3:A9:F4:3D:06:F5:91:42:86:3D:8F:06:1A:59:4F:7B
Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
Certificate serial: 0215
Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/3E4FA084CBFF11EE946DBE80C4F9AE02.roa
Signing time: Thu 15 Feb 2024 12:39:22 +0000
ROA not before: Thu 15 Feb 2024 12:39:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149765
IP address blocks: 103.185.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 533 (0x215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
Validity
Not Before: Feb 15 12:39:22 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65ce05fa-b865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:06:c9:0e:34:d6:c3:77:e3:36:c1:22:f2:
24:dd:49:e5:68:cb:3e:fa:31:e4:61:c0:21:7d:05:
cb:9a:d0:86:10:8d:60:c1:db:4b:f7:1c:4d:78:b5:
74:a8:71:f4:7f:c1:ea:47:35:da:df:38:02:09:15:
a4:e8:11:fe:ac:74:0d:92:fd:b3:f9:6b:aa:68:27:
29:37:e0:31:e1:10:4f:58:8d:f0:08:8e:00:a4:ee:
c2:cd:08:67:99:d2:9f:89:db:27:52:4a:c9:35:69:
b2:d4:a8:69:d5:e7:d4:f9:65:91:7d:4b:e0:03:6b:
c3:74:9f:6a:66:e9:54:2b:21:a3:13:8f:7c:b1:0b:
1c:10:18:c9:45:77:c7:b1:fc:fc:31:81:93:4a:9d:
2c:81:bb:e1:08:5f:13:05:e7:2f:78:56:43:69:0f:
c1:63:aa:05:17:e3:3f:a8:1f:22:04:35:08:a5:e3:
7d:ce:42:30:90:73:55:36:27:36:5b:b0:b5:3b:8c:
cb:3d:af:8f:e5:89:c0:58:3f:c3:75:e6:e9:30:e7:
7d:c9:17:f9:4e:aa:82:2b:04:7b:b4:c5:b9:fb:3d:
cb:77:34:2b:81:2a:34:84:5b:26:48:45:54:b0:a8:
1e:d5:9b:f1:f2:9d:79:83:bc:07:ea:b8:30:00:3e:
eb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E9:21:2E:B3:A9:F4:3D:06:F5:91:42:86:3D:8F:06:1A:59:4F:7B
X509v3 Authority Key Identifier:
keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/3E4FA084CBFF11EE946DBE80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.226.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a1:b2:9f:4a:23:c3:12:38:ad:45:46:93:4c:fa:79:db:20:
98:c4:ff:2a:62:68:16:30:60:26:1b:46:83:dc:04:7b:3d:c6:
72:cf:da:05:56:59:5a:d4:3b:31:23:6a:f9:bd:f3:22:0e:7f:
e3:fc:f8:3f:a9:34:e2:ee:c7:97:93:d4:0d:3b:85:ab:5b:63:
53:45:37:e8:24:ca:9f:95:d3:dc:d4:c2:d2:2d:34:98:4d:ab:
0a:2d:76:7f:d2:3e:aa:b9:3d:63:fc:a4:34:43:5d:6d:4e:b0:
78:96:46:c7:b6:9c:42:58:1d:85:b5:c6:61:22:16:9b:19:eb:
33:3e:54:34:22:c9:a9:bd:11:9f:16:29:bb:e9:e0:f8:63:fc:
13:3a:44:60:86:c6:72:6f:74:81:9f:ee:cd:08:53:e5:3f:0c:
da:aa:a3:16:40:35:0f:54:c8:45:03:02:0c:fd:c8:1f:64:fa:
24:72:52:98:ee:76:89:89:65:89:e3:18:dc:20:89:7d:8c:25:
75:2d:f5:a9:52:3a:c0:c7:94:2a:7c:6c:fd:44:0b:28:06:a6:
07:a9:94:14:24:2b:3a:fb:d3:87:d2:4f:5a:26:e0:e0:93:46:
a7:39:a0:13:ba:83:2e:25:c8:38:5e:89:32:05:97:18:47:c0:
c3:56:1e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 18:54:19 2024 by rpki-client on console-fra.rpki-client.org