Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/24304276E98811EDA2F1AC56C4F9AE02.roa
File: 24304276E98811EDA2F1AC56C4F9AE02.roa (raw, json)
Hash identifier: nxoTI8jc3WH0bk9gnvUKZ0//EQvmblGmiexbzMGzg+o=
Subject key identifier: E3:06:54:8B:E5:D5:4A:F1:E6:11:06:49:E0:1B:5D:67:B6:D6:AF:3D
Certificate issuer: /CN=A9187000/serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
Certificate serial: 13F3
Authority key identifier: 9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/24304276E98811EDA2F1AC56C4F9AE02.roa
Signing time: Sun 30 Jul 2023 17:14:12 +0000
ROA not before: Sun 30 Jul 2023 17:14:12 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 137964
IP address blocks: 103.114.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5107 (0x13f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187000/serialNumber=9E92826CF47DAEC885C99810287DB86E695768EA
Validity
Not Before: Jul 30 17:14:12 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64c69a64-5d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fc:a8:e6:1c:a0:ff:05:c9:89:b3:eb:d3:73:
4a:f2:98:5e:3c:10:6a:28:c9:2b:84:47:9d:0d:7a:
8e:22:b1:f9:1a:ed:8e:c3:66:e8:9f:80:f6:db:1b:
8c:16:02:9c:8c:b7:bc:60:a8:35:4d:34:e0:79:d7:
a0:7c:46:85:6b:f1:94:c7:bd:92:6f:ff:f8:76:7d:
ad:d0:d2:5e:2e:10:9f:f3:1c:2d:4e:83:22:bd:f6:
8c:b6:f1:11:d1:05:db:ed:83:59:27:2b:8f:5d:35:
75:a4:ba:70:1b:74:b6:0f:9c:95:60:e3:29:53:a3:
79:f8:b7:7c:d8:69:5e:69:95:4c:7c:f8:01:3d:65:
dd:10:77:bb:ab:8f:1c:41:f2:c2:97:e0:41:6b:d7:
e9:e1:50:76:b6:e5:7f:1a:bf:35:f6:3e:d2:f1:76:
b2:ff:59:1a:27:6f:ab:14:e8:a3:08:33:f5:11:51:
ad:c8:1c:fb:16:cf:d3:ec:1f:46:3a:11:b0:d8:71:
fd:50:da:e4:c4:8b:ca:c2:a0:7d:8f:eb:e6:a2:55:
f7:43:46:52:fd:14:11:8b:4b:8a:bc:39:00:a4:82:
53:31:70:c2:df:ea:2c:b5:d6:34:8d:1a:08:9c:23:
ab:63:01:7f:47:57:33:bd:fb:ea:e1:d3:93:44:89:
85:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:06:54:8B:E5:D5:4A:F1:E6:11:06:49:E0:1B:5D:67:B6:D6:AF:3D
X509v3 Authority Key Identifier:
keyid:9E:92:82:6C:F4:7D:AE:C8:85:C9:98:10:28:7D:B8:6E:69:57:68:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/npKCbPR9rsiFyZgQKH24bmlXaOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npKCbPR9rsiFyZgQKH24bmlXaOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187000/067D6FA2478911E889D5DB49C4F9AE02/24304276E98811EDA2F1AC56C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.39.0/24
Signature Algorithm: sha256WithRSAEncryption
57:b5:96:20:dd:3b:b6:3e:10:33:86:b6:99:d1:6c:a7:22:56:
8b:31:35:91:b4:39:82:3a:36:d3:58:a2:9f:07:5e:b1:dd:e2:
20:8a:5e:24:e1:c6:e4:68:e3:f6:3d:c1:54:b2:a1:7b:39:e8:
ed:a2:bb:40:f7:6c:e9:17:83:07:34:0b:d4:b2:23:2a:a6:34:
35:02:de:c9:33:f9:b8:51:8b:84:99:df:e1:2d:47:60:a0:24:
d0:e2:ad:e6:7b:bd:13:19:f8:94:09:8d:8d:e0:52:27:96:ec:
80:b2:e6:1d:d8:00:ce:c5:5f:dc:15:4c:7f:7f:61:50:e7:10:
65:cf:82:e2:db:18:08:51:8e:cb:38:e1:47:d9:e9:9d:9f:19:
db:09:26:9f:00:57:41:6c:d1:30:05:0f:c2:24:80:04:35:3f:
91:09:a8:d8:11:24:29:ab:e1:bd:1d:79:f0:29:2d:f2:1c:74:
e6:f5:1e:06:f3:93:c4:93:e2:b8:b2:34:f2:7a:9f:81:44:71:
66:a6:6f:07:0a:80:7e:d4:68:0d:58:70:e3:9c:d5:2c:2b:5d:
03:52:1b:21:d2:53:1c:30:cd:ef:cf:07:64:0a:a4:3e:ab:43:
f8:cb:9a:4c:3b:74:06:10:c3:40:66:02:09:73:77:66:b0:50:
cf:d1:26:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 3 10:39:21 2023 by rpki-client on console-ams.rpki-client.org