Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/779195C06E3311EE8D57B959C4F9AE02.roa
File: 779195C06E3311EE8D57B959C4F9AE02.roa (raw, json)
Hash identifier: t1GPfx/cwngPAxcYD5Wye8kgl5dKAC29mju5VQLbSRI=
Subject key identifier: 3D:1D:AB:14:DC:24:9C:3E:AC:A2:51:A4:3A:91:58:42:52:E9:8F:E5
Certificate issuer: /CN=A91A5C43/serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E
Certificate serial: 0605
Authority key identifier: EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/779195C06E3311EE8D57B959C4F9AE02.roa
Signing time: Fri 02 Feb 2024 23:31:52 +0000
ROA not before: Fri 02 Feb 2024 23:31:52 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 134507
IP address blocks: 103.231.204.0/22 maxlen: 22
103.231.204.0/23 maxlen: 23
103.231.204.0/24 maxlen: 24
103.231.205.0/24 maxlen: 24
103.231.206.0/24 maxlen: 24
103.231.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 00:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1541 (0x605)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5C43/serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E
Validity
Not Before: Feb 2 23:31:52 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65bd7b67-2b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ed:60:5c:08:75:73:e7:16:d3:68:6d:7e:89:
33:23:5e:71:65:d3:e4:65:a6:cc:a6:d8:cf:4d:83:
38:af:28:7e:7a:72:23:31:99:67:d1:68:4c:21:58:
6f:13:b2:11:a9:bd:b5:e3:15:0c:49:4e:94:c5:78:
62:20:7a:21:af:fd:a4:69:10:64:0e:e0:53:2e:97:
ad:bb:2c:83:e0:25:82:7e:a3:a3:ae:72:58:8c:f6:
ca:3f:c0:22:d7:af:86:f7:66:f7:f6:47:ad:81:31:
7e:6c:60:11:fe:91:4c:ca:b6:90:d6:e6:b9:ed:dd:
f1:13:54:ed:b1:7a:54:c7:5d:cc:a9:23:e6:47:3e:
bd:cf:87:49:96:8e:82:e5:32:04:be:73:14:1f:35:
b1:66:71:77:cc:7a:85:e8:d3:e7:ba:87:e3:71:67:
fa:82:45:f2:4f:4d:cc:a1:54:b2:b3:eb:26:34:20:
fd:c1:cf:ca:79:ef:01:38:0b:6f:f1:5b:37:47:65:
55:99:11:db:b4:f0:54:33:a1:18:bc:0b:1c:f0:f3:
a1:db:0b:fc:cc:55:d8:a5:87:05:48:7d:27:45:db:
59:8e:6a:7c:71:6e:16:e6:2e:03:3a:e8:70:6a:f4:
6d:be:93:b5:b8:ff:46:c1:22:19:98:7c:61:48:5b:
2a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1D:AB:14:DC:24:9C:3E:AC:A2:51:A4:3A:91:58:42:52:E9:8F:E5
X509v3 Authority Key Identifier:
keyid:EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/779195C06E3311EE8D57B959C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.231.204.0/22
Signature Algorithm: sha256WithRSAEncryption
05:d1:44:d6:80:35:35:4b:e9:75:42:c1:b4:a3:8d:5f:01:45:
00:f1:98:df:11:70:ca:de:3e:81:06:62:54:27:43:ba:f3:cb:
42:23:93:22:5d:a5:7b:b8:7b:be:a2:cb:be:d3:bd:56:4e:26:
4d:c1:dc:d5:67:e4:b3:a0:46:dc:a6:28:89:52:a6:e4:79:4c:
64:f7:bd:38:de:4f:5f:f4:83:55:7e:0e:7b:3b:24:12:15:a5:
98:a5:6d:9f:94:e7:df:36:8c:e1:fd:8a:94:6e:85:96:83:d0:
0b:6b:8b:79:b4:7c:34:0d:7b:a4:0e:39:7e:68:95:e3:0a:22:
38:8c:c0:c4:8a:8d:95:15:73:10:0f:14:eb:d0:65:17:a7:6b:
7b:4c:76:68:53:2f:a7:fe:d2:06:f3:27:62:1b:72:ca:03:c6:
3d:3e:87:9a:33:03:62:cd:f8:fb:23:fd:ec:16:95:8f:e2:55:
15:0c:16:6b:18:7a:49:a6:4f:a3:e8:da:3b:e9:2f:3f:28:2f:
7c:09:65:b7:fa:b7:5c:61:32:bb:49:a2:6f:45:2d:7c:b4:ae:
25:46:7e:45:8f:2d:52:0d:25:24:c4:44:bc:a8:2f:9a:9a:b6:
95:83:08:b6:5d:9a:0c:c8:0e:92:ec:89:e1:ac:fa:5b:f8:2e:
4f:45:3a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:40:37 2024 by rpki-client on console-fra.rpki-client.org