Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/99FEAE20FDE711ED880C3C6AC4F9AE02.roa
File: 99FEAE20FDE711ED880C3C6AC4F9AE02.roa (raw, json)
Hash identifier: RXsjL9SfAQYM74eHJJpPKjMK7TyXncBWpb+27mvmWts=
Subject key identifier: C6:2B:E6:54:4D:66:50:DF:BD:9D:20:E7:01:AE:4A:FC:B7:02:61:29
Certificate issuer: /CN=A91FC9FE/serialNumber=A5D9C6A6F9675B91CE54D115F88C9410F18F90FE
Certificate serial: 02
Authority key identifier: A5:D9:C6:A6:F9:67:5B:91:CE:54:D1:15:F8:8C:94:10:F1:8F:90:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/99FEAE20FDE711ED880C3C6AC4F9AE02.roa
Signing time: Mon 29 May 2023 06:11:08 +0000
ROA not before: Mon 29 May 2023 06:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139871
IP address blocks: 103.119.80.0/23 maxlen: 24
2400:ef20::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 19 Mar 2024 10:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC9FE/serialNumber=A5D9C6A6F9675B91CE54D115F88C9410F18F90FE
Validity
Not Before: May 29 06:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=647441fc-11e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7c:f5:91:dc:a0:49:31:87:99:2a:88:43:0a:
e9:91:80:2c:1d:90:70:4a:d6:c1:77:2f:74:68:6c:
c3:5d:82:a8:55:83:d1:64:ce:f8:83:05:74:1e:cf:
d1:d8:8a:d7:fa:13:d3:06:d4:6e:3b:b2:93:e4:bb:
37:07:66:5c:b7:57:4f:e1:7e:80:a9:11:7b:2c:a9:
8b:ad:80:3b:26:a6:f5:db:08:6d:6f:74:60:f0:66:
bc:f7:47:ef:42:d1:7e:5b:b6:ac:dd:79:2a:e3:9a:
9d:7b:9c:bd:5f:c2:f9:bf:83:71:71:c3:d9:c6:34:
68:4c:8f:e0:be:06:0f:40:5f:7a:35:73:09:37:26:
75:a7:55:b3:f3:5a:77:02:31:c3:15:0f:ee:8b:ae:
47:23:88:ab:59:23:ab:b8:f5:77:9f:29:f6:eb:19:
b6:64:40:65:bb:5f:8a:6a:40:e9:ab:62:8e:d4:63:
51:32:91:ff:04:c3:d7:29:91:87:c9:c3:45:05:a1:
28:5a:be:cf:d4:c0:c0:d3:37:ee:b2:a3:3d:a6:98:
a4:a2:4e:ff:12:63:48:98:78:ec:38:81:c1:78:c3:
3f:f2:dd:68:f3:24:5a:5b:23:f3:f1:23:f8:90:77:
4f:3c:e6:20:61:88:03:e6:b0:27:b1:a6:34:9d:6a:
9d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2B:E6:54:4D:66:50:DF:BD:9D:20:E7:01:AE:4A:FC:B7:02:61:29
X509v3 Authority Key Identifier:
keyid:A5:D9:C6:A6:F9:67:5B:91:CE:54:D1:15:F8:8C:94:10:F1:8F:90:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/99FEAE20FDE711ED880C3C6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.80.0/23
IPv6:
2400:ef20::/32
Signature Algorithm: sha256WithRSAEncryption
a8:6a:fd:c5:c8:a6:d2:e8:dc:35:e7:f3:f3:71:01:0a:71:07:
b5:8e:11:1b:0f:7e:d9:fd:46:b8:58:ff:dc:38:62:32:21:5b:
50:0e:f9:aa:32:a8:f1:22:a9:80:b3:1f:ca:3a:bb:e8:48:a0:
f7:1f:f4:75:e2:56:86:6b:81:12:b0:c3:b9:f4:3f:b5:ab:60:
fb:54:d3:da:04:af:8a:ba:0e:b5:a0:7a:57:5d:72:12:d2:bb:
96:fd:1e:da:70:ad:c5:ec:16:9b:36:1b:50:73:ac:f0:0a:b0:
68:e8:de:0e:96:ad:de:9b:55:d4:0f:4b:3b:7a:3e:4c:84:1a:
8f:c4:76:f2:f0:23:0f:7e:bf:a6:b9:06:3e:d7:b9:de:22:ff:
f3:68:e5:cc:da:13:a6:a6:dd:ba:c8:c0:16:ed:81:66:5c:e1:
51:3d:05:23:d7:94:89:2a:0d:b9:ce:74:7a:78:d0:14:8d:0d:
67:35:47:c3:b9:d0:2a:ad:16:4c:b1:e3:87:29:2c:6b:a5:f8:
e3:77:0c:9a:44:50:ed:5e:75:45:da:a3:c9:1a:90:55:59:c8:
ee:08:b0:0b:ec:3c:d3:8d:6c:69:cf:86:a6:8d:ee:6b:29:2d:
d0:28:38:5e:57:76:ec:61:69:55:8c:bb:a2:bb:d1:ca:78:79:
6f:62:ee:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 19 15:17:41 2024 by rpki-client on console-ams.rpki-client.org