Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/053ED5AA21F011ECBA678C1DC4F9AE02.roa
File: 053ED5AA21F011ECBA678C1DC4F9AE02.roa (raw, json)
Hash identifier: BAnHiFVFmkVkOA24pt14UYFrEUDgx3UUzxT3cHQldVo=
Subject key identifier: 42:B2:CA:F2:1A:AC:38:33:1B:65:9A:81:A9:E4:6B:29:93:9F:5E:A9
Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Certificate serial: 03D0
Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/053ED5AA21F011ECBA678C1DC4F9AE02.roa
Signing time: Fri 29 Dec 2023 01:43:32 +0000
ROA not before: Fri 29 Dec 2023 01:43:32 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 17483
IP address blocks: 103.204.20.0/24 maxlen: 24
103.204.21.0/24 maxlen: 24
103.204.22.0/24 maxlen: 24
103.204.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Oct 2024 10:52:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 976 (0x3d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Validity
Not Before: Dec 29 01:43:32 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=658e2444-74cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:41:93:24:1d:91:65:cf:cb:45:2c:ee:eb:
e8:50:71:79:41:5e:0b:dd:6d:20:fd:26:75:6d:45:
a6:d0:22:27:5f:02:67:47:85:ca:75:0f:bd:5a:a5:
29:40:38:cc:12:10:98:fe:0b:08:51:7b:35:47:02:
bf:f5:a7:ac:5d:08:80:7e:e6:ad:84:37:53:94:5c:
de:ab:46:9c:2f:94:f1:a3:91:7a:90:2f:02:e6:6e:
7f:c7:47:1e:43:44:ec:c4:b4:c5:3d:eb:b3:8f:10:
99:26:ab:95:c0:6e:13:85:fd:e8:b7:4c:26:a3:f6:
f0:8b:86:ae:b9:27:f2:d0:72:87:22:ab:a3:0a:bc:
bd:68:21:c7:36:9c:76:88:4c:7a:db:6a:26:d6:bd:
54:fe:55:59:f6:9e:73:64:04:34:e7:42:d5:4f:ea:
37:ca:85:12:48:6b:ed:64:5e:84:fb:ee:2a:37:e8:
4f:86:54:28:dc:55:1a:1f:d9:57:ff:f0:60:c6:4c:
d4:f3:8b:87:1f:10:a3:32:8c:82:cf:03:90:3d:78:
e4:3c:b6:aa:de:91:62:58:79:23:77:64:36:a1:9b:
8c:ef:65:03:3c:37:8c:b1:20:b7:72:83:c5:e8:2e:
d3:5f:11:53:6d:bd:16:d2:31:21:9a:32:c4:67:cb:
df:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B2:CA:F2:1A:AC:38:33:1B:65:9A:81:A9:E4:6B:29:93:9F:5E:A9
X509v3 Authority Key Identifier:
keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/053ED5AA21F011ECBA678C1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.204.20.0/22
Signature Algorithm: sha256WithRSAEncryption
49:e9:1a:53:3c:fb:60:ae:58:11:09:16:0f:f8:78:64:ab:4b:
2e:04:9a:74:d3:f2:4b:70:d4:24:89:e8:86:31:e4:3b:53:63:
0d:ab:c6:03:c5:27:6d:32:e9:a9:3f:74:38:18:f4:27:a6:a7:
ec:63:35:2e:74:a4:3d:c4:0a:ea:da:48:ab:26:4c:d9:c0:14:
66:73:8a:f1:44:0f:9a:e6:a6:a3:2b:77:b3:b1:b7:15:ab:59:
c5:a6:79:36:3c:26:82:96:ff:f5:02:85:58:7f:ec:cc:7b:87:
aa:06:e4:c0:e9:8b:14:fa:25:90:63:db:f2:7d:bf:0f:26:94:
b8:2e:6b:d0:e2:de:4d:66:5b:ce:7f:57:e7:8d:9d:1d:47:1b:
4f:53:a6:6e:b0:8d:17:ee:72:af:c1:ac:45:e8:75:72:43:f1:
10:3c:75:22:0d:3d:7e:c2:b3:72:39:b3:01:49:8d:de:c3:ab:
54:23:d9:57:21:2b:8e:3e:61:11:aa:8b:2d:64:80:c7:8a:68:
55:bc:75:a8:0b:46:a4:bc:7b:af:58:b4:d8:ac:91:14:e9:c7:
db:e5:3b:68:bd:b8:53:ac:2c:8e:3a:11:53:b7:00:3f:6f:b0:
18:bc:c3:42:ee:74:a1:ca:e1:75:29:d2:a7:f8:98:c2:55:c9:
e6:09:b0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 13:52:15 2024 by rpki-client on console-fra.rpki-client.org