Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/2C482014531811EF9FD0E209C4F9AE02.roa
File: 2C482014531811EF9FD0E209C4F9AE02.roa (raw, json)
Hash identifier: xEtGWPvgzm1DbU5PeT4SkCb/Ux6Bp9eCfV7htIJCfio=
Subject key identifier: 83:C3:5D:64:45:4A:F6:A3:17:51:F3:C1:3B:BC:13:34:66:2C:15:C3
Certificate issuer: /CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Certificate serial: 0661
Authority key identifier: 77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/2C482014531811EF9FD0E209C4F9AE02.roa
Signing time: Mon 05 Aug 2024 10:47:56 +0000
ROA not before: Mon 05 Aug 2024 10:47:56 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 134365
IP address blocks: 103.42.28.0/22 maxlen: 22
103.42.28.0/23 maxlen: 23
103.42.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 03:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1633 (0x661)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Validity
Not Before: Aug 5 10:47:56 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=66b0addc-3b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7f:5a:c3:51:62:80:5f:a5:94:5e:54:2a:72:
2a:14:f9:b3:34:5c:af:0f:2b:16:62:4d:13:b4:45:
bd:f8:bd:5c:83:4c:9f:19:d8:63:ad:69:fe:19:50:
23:d0:c9:d9:cc:de:47:8b:f7:b1:1e:b1:ce:1d:54:
a8:46:3a:8e:5e:51:eb:41:b7:b9:4e:33:ec:01:69:
b4:09:e0:d1:39:76:b0:b1:01:31:bd:ee:16:6b:15:
f1:5a:ac:f7:25:a9:37:73:18:70:60:bd:79:bc:72:
5a:ac:0a:4f:30:e0:11:32:a9:c9:8f:6c:e2:cd:3a:
4d:23:ad:be:1f:9a:d4:4b:00:f8:1c:ca:34:ee:6c:
e8:d4:6e:04:7c:f2:e8:7c:8e:50:64:bc:b0:b0:e2:
21:8a:d9:65:c8:7b:f9:15:5b:27:c1:44:1e:cf:87:
07:93:a3:60:1c:51:91:b1:ec:76:1b:ae:65:8d:03:
16:e6:b4:2d:ae:53:03:99:db:fc:47:7d:60:a6:f9:
20:41:15:ab:cc:b2:fd:ff:38:67:63:80:ae:63:cc:
56:d0:29:46:ca:fc:e3:59:39:a6:95:71:ec:bb:15:
43:65:ed:f8:16:b4:7e:93:87:13:92:8a:cc:00:ac:
cc:ee:a8:b8:f5:5f:1b:d9:17:6d:40:60:19:96:73:
87:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C3:5D:64:45:4A:F6:A3:17:51:F3:C1:3B:BC:13:34:66:2C:15:C3
X509v3 Authority Key Identifier:
keyid:77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/2C482014531811EF9FD0E209C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.28.0/22
Signature Algorithm: sha256WithRSAEncryption
97:2c:f2:5e:a4:8d:6d:ce:14:2f:62:84:39:af:82:c6:6e:cf:
c0:dc:6f:bc:7d:77:02:b1:9a:7c:20:81:53:87:ea:02:85:09:
5d:ef:34:fe:9f:c0:ef:91:43:a7:4a:a6:dc:8b:f1:86:1e:d3:
13:13:95:6d:19:1f:96:31:a0:e4:61:91:00:0a:45:56:96:ca:
0e:ff:44:ab:8b:33:2e:31:41:cc:0b:ee:a9:bb:f1:46:df:f7:
36:26:d8:ac:33:0d:65:c2:3f:6a:ca:4d:e4:ca:9e:51:a7:49:
3b:73:cc:54:ac:a9:ef:9b:95:4b:09:22:07:ea:57:82:bb:84:
73:8e:29:18:9e:aa:6d:5d:16:21:fb:6f:93:0d:e2:d5:7c:b2:
d6:d6:8b:2d:4f:2c:17:33:17:b1:63:ef:6e:2d:2e:8d:8c:60:
b0:4a:c8:a7:6a:0b:c4:f3:43:a1:a8:37:48:35:21:7b:2b:21:
75:1c:14:bd:29:90:ea:c5:ec:f7:b9:df:a5:21:d0:ec:ab:d9:
e4:02:74:83:c7:32:c8:87:17:df:42:86:ba:ae:70:ee:db:cd:
94:61:59:d5:99:e1:55:8c:4b:d8:27:9c:c1:a3:42:37:f5:bd:
96:d4:87:5e:94:77:3b:fc:57:ae:8a:f9:c0:2a:91:3e:ae:f2:
e4:a9:f2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 07:01:10 2024 by rpki-client on console-ams.rpki-client.org