Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/9E5BA312EAF811ED9E2D1958C4F9AE02.roa
File: 9E5BA312EAF811ED9E2D1958C4F9AE02.roa (raw, json)
Hash identifier: qtA0qzLhD2ZDtq/gOzd5ImrnNi9TokOGcieIOOXQ5qM=
Subject key identifier: DE:C9:5D:7F:36:C2:56:4E:2D:C2:B3:3E:C4:8B:B8:CD:35:23:E1:0B
Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Certificate serial: 13DA
Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/9E5BA312EAF811ED9E2D1958C4F9AE02.roa
Signing time: Mon 11 Sep 2023 10:15:32 +0000
ROA not before: Mon 11 Sep 2023 10:15:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137557
IP address blocks: 103.113.44.0/22 maxlen: 22
103.113.44.0/24 maxlen: 24
2402:b740::/32 maxlen: 32
2402:b740::/33 maxlen: 33
Validation: Failed, certificate revoked on Tue 12 Sep 2023 02:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5082 (0x13da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Validity
Not Before: Sep 11 10:15:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64fee8c4-1dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:63:f2:2c:58:f6:0a:58:0f:e3:8e:ae:da:
c6:8a:0c:9b:93:76:c0:de:cc:e1:a1:cd:16:0e:f3:
6f:c5:7b:1d:a6:96:d5:74:76:8c:bd:b4:6e:53:ed:
f2:ea:f7:3c:99:f4:58:34:dc:20:63:04:8b:7e:11:
89:c7:69:cf:ab:96:99:f2:f6:ca:76:76:63:e4:48:
12:6a:51:b6:73:bb:58:03:af:ed:4f:28:1e:4d:25:
55:48:50:de:9c:7a:f6:02:98:97:96:74:6b:11:aa:
87:40:ba:e4:d2:38:b8:9d:6f:1e:56:0c:6c:e3:7b:
9d:08:1e:a2:dd:50:2a:fc:d4:1a:ac:65:63:4a:33:
43:53:36:f0:0f:3c:a4:ad:59:ca:28:ab:f1:09:93:
3b:67:f2:99:3c:4a:d4:9c:37:71:6a:32:bb:3b:b1:
3b:a5:40:3b:53:fa:f2:4f:1b:59:64:df:28:2f:02:
8b:fc:a9:d5:6a:9f:6f:95:4c:a3:cf:70:5b:b0:40:
63:77:bb:bf:5c:e1:bd:aa:32:4d:13:b0:22:dc:35:
cf:1c:f8:db:c0:a4:ef:f9:93:8b:27:69:99:dc:c8:
63:dc:32:eb:ca:8d:bf:a1:3f:ee:4b:2c:74:35:58:
4a:27:9e:52:07:90:7f:36:cb:7e:43:b6:1c:97:85:
b3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C9:5D:7F:36:C2:56:4E:2D:C2:B3:3E:C4:8B:B8:CD:35:23:E1:0B
X509v3 Authority Key Identifier:
keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/9E5BA312EAF811ED9E2D1958C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.113.44.0/22
IPv6:
2402:b740::/32
Signature Algorithm: sha256WithRSAEncryption
9e:d8:21:9e:8f:6a:b9:19:ec:25:0b:46:56:3f:38:aa:96:02:
99:1a:4c:4a:7e:5b:26:b0:f0:5f:d3:ae:78:2b:aa:2f:79:c3:
4e:a5:cb:a9:d5:58:c6:18:9c:dc:9a:da:1b:eb:cf:64:91:13:
b1:bd:76:95:70:d9:df:07:5a:38:0a:15:8c:a1:16:8d:15:45:
52:1c:29:9c:09:91:10:f9:9b:63:32:8a:fe:03:5c:6a:b5:39:
cb:6d:96:64:27:09:a8:c8:de:af:dd:2c:84:7d:83:b8:ee:79:
17:0f:c3:b3:2d:91:92:dc:56:ae:92:f7:f3:50:5c:e6:b5:10:
c5:ea:1a:a6:d2:90:fb:e3:67:b0:5c:77:e6:34:5b:36:e2:3c:
67:ae:ba:23:be:9b:90:0e:25:6d:86:9c:65:74:18:6d:c2:eb:
11:11:b2:30:ce:a1:86:60:95:4b:23:5c:eb:c4:e6:b4:a9:3f:
9c:d2:f1:19:3b:d0:5f:0a:f7:f1:05:bf:be:8e:fd:80:17:c3:
24:5c:c4:10:aa:a3:ec:94:8f:8f:a9:2e:37:3d:0f:13:c4:2e:
98:77:4b:43:48:76:17:40:05:27:46:69:b7:42:9e:51:ae:dc:
7d:4b:c3:58:cc:dd:56:73:17:44:20:45:4a:36:c0:af:52:b4:
e4:cb:8d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:49 2024 by rpki-client on console-ams.rpki-client.org