Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/98C114E6B58711E9921CAC66C4F9AE02.roa
File: 98C114E6B58711E9921CAC66C4F9AE02.roa (raw, json)
Hash identifier: 9I1sbpNK/0umQwpRyeVcCo/FEVuMWhVxGsIIEuWcePY=
Subject key identifier: 32:D5:10:C1:4F:76:66:02:EE:38:C7:3A:DF:FB:7C:68:82:53:FB:85
Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
Certificate serial: 0D0C
Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/98C114E6B58711E9921CAC66C4F9AE02.roa
Signing time: Tue 02 Apr 2024 18:57:31 +0000
ROA not before: Tue 02 Apr 2024 18:57:31 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 138624
IP address blocks: 103.134.225.0/24 maxlen: 24
103.158.243.0/24 maxlen: 24
2001:df7:d500::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 08 Apr 2024 04:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3340 (0xd0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
Validity
Not Before: Apr 2 18:57:31 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=660c551b-883e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:fb:0c:df:79:69:94:27:eb:3a:5f:89:e6:
ce:61:2c:2b:2f:a4:3e:f7:54:c2:a2:94:48:4c:f7:
c1:68:94:eb:e2:9c:78:c3:5b:f1:06:2d:cf:fa:4a:
7a:9e:d0:6a:50:6a:60:ef:c9:09:b1:61:37:81:8f:
ef:ad:0b:3b:cd:f5:eb:76:59:56:64:01:4c:72:d4:
d0:60:f6:d7:08:22:c5:3d:75:45:be:df:ac:49:20:
c3:42:3d:6c:4f:7b:b4:fd:f6:b6:8e:1a:d5:2f:80:
25:c3:4e:4f:8b:f5:33:10:54:70:7b:fa:18:f0:06:
85:44:e6:d5:e9:24:51:88:2b:2e:cf:cf:11:8f:87:
98:6e:87:d6:08:ae:fb:0e:69:c0:6b:59:c8:b3:18:
a6:ff:b9:4c:96:6c:9e:00:ad:6b:71:d4:aa:ce:07:
c0:4c:9b:31:50:2d:67:9c:93:01:1d:dd:98:1a:06:
93:ab:fe:c5:e7:32:71:84:eb:a7:33:1b:f8:26:44:
f3:3d:45:e5:2d:69:f0:80:18:a1:54:78:6d:2c:5d:
a0:23:5c:27:2c:46:96:89:06:e0:8d:3d:75:f2:7f:
59:43:57:77:ab:30:c8:1e:16:e7:fd:cb:a2:15:ba:
06:35:74:a0:c5:f8:92:5b:64:20:d1:47:2f:09:44:
e7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D5:10:C1:4F:76:66:02:EE:38:C7:3A:DF:FB:7C:68:82:53:FB:85
X509v3 Authority Key Identifier:
keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/98C114E6B58711E9921CAC66C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.225.0/24
103.158.243.0/24
IPv6:
2001:df7:d500::/48
Signature Algorithm: sha256WithRSAEncryption
6b:70:76:1a:0b:06:81:9d:35:53:54:5b:72:4b:2e:9c:98:ae:
88:42:ff:b0:3d:86:14:08:2d:66:fb:63:e6:d1:ad:2a:aa:7c:
c3:51:0c:3a:47:50:ee:44:a7:a3:ed:55:9e:0c:d1:dd:66:61:
73:99:cc:c2:ad:6c:c0:32:1d:c4:57:9b:76:0a:a1:bd:fa:3c:
28:04:dc:40:e4:9d:f5:52:ad:ec:e5:77:2b:0f:8a:19:fa:78:
06:42:4f:5a:6a:49:4d:6c:25:aa:ea:94:5f:c5:fd:33:15:bf:
48:6e:32:72:2a:2b:94:09:15:d5:5b:05:2b:9f:d6:7a:75:35:
12:45:9b:27:87:12:71:59:a3:89:35:51:24:3f:5d:67:a0:e2:
5f:ce:f5:14:8c:61:87:c2:ec:02:2a:97:ad:0d:3c:d6:70:f7:
38:1a:53:c4:57:d0:8e:62:d4:a9:e6:24:06:af:cc:e2:1b:be:
df:7d:81:61:11:0c:92:12:d5:c1:e1:e1:5c:bf:02:fc:7c:5c:
df:a1:36:3f:40:3f:72:4a:99:b5:2c:0d:32:48:38:10:9a:a8:
8b:d2:01:4f:0c:69:72:8c:46:bd:a0:2d:d9:8b:4d:b9:8b:df:
cf:dc:5c:2c:29:db:c7:cf:73:c7:69:2b:5b:a9:50:d9:1e:11:
2b:06:0f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 06:20:25 2024 by rpki-client on console-ams.rpki-client.org