Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/B77DFD4E1CE311EB88EB1B78C4F9AE02.roa
File: B77DFD4E1CE311EB88EB1B78C4F9AE02.roa (raw, json)
Hash identifier: JMs2/LJjQt6KiixkV3wONxqsVX9WfdE5oB9RcjzVjrY=
Subject key identifier: 70:44:AD:48:2B:42:FE:10:0C:F4:08:55:AC:5F:B5:3B:4C:AC:63:66
Certificate issuer: /CN=A91FDA00/serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98
Certificate serial: 066E
Authority key identifier: B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/B77DFD4E1CE311EB88EB1B78C4F9AE02.roa
Signing time: Sun 28 Jan 2024 23:01:14 +0000
ROA not before: Sun 28 Jan 2024 23:01:14 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 134712
IP address blocks: 103.158.4.0/23 maxlen: 23
103.158.4.0/24 maxlen: 24
103.158.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 09:19:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1646 (0x66e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDA00/serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98
Validity
Not Before: Jan 28 23:01:14 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65b6dcba-a660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9c:d6:26:42:68:e8:1d:f7:1e:bf:d3:d0:0e:
c7:72:01:7c:ba:d1:49:07:14:84:7f:76:db:58:90:
af:57:5a:33:88:dc:0e:20:6b:3a:f9:58:12:d3:b8:
27:b0:44:8d:fc:87:48:ac:11:57:37:b4:8b:7a:58:
cf:84:34:33:7e:2a:f0:46:51:c8:3d:78:db:58:2d:
a1:6e:dd:63:f8:ff:43:a5:8e:5b:3e:21:91:a6:e7:
78:a2:db:b8:48:72:1b:55:0a:72:3b:29:a7:a1:1d:
56:b3:a9:5d:62:98:8b:67:df:cf:eb:1a:f6:18:b1:
00:4a:77:79:04:1d:37:a0:0e:8d:9b:b3:02:91:bd:
c1:e9:e1:3f:ce:05:e7:46:46:f4:e9:d0:a7:28:76:
38:2e:45:b2:4d:27:e4:0e:5e:d7:e6:cb:07:62:51:
49:43:c2:2f:48:a1:a0:12:f9:6a:85:b3:93:03:47:
95:0e:97:48:11:75:de:2f:7a:18:e3:48:fc:a0:50:
78:17:eb:84:b4:f3:fe:01:fd:c5:83:53:70:d5:30:
e0:f1:bc:53:0c:c4:27:76:c3:ac:fe:98:f2:a5:1f:
10:4a:d3:76:af:88:2d:a0:60:bb:2a:b6:fc:29:61:
70:93:b2:f1:ca:d1:82:e8:3b:f0:e0:54:5f:1c:37:
86:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:44:AD:48:2B:42:FE:10:0C:F4:08:55:AC:5F:B5:3B:4C:AC:63:66
X509v3 Authority Key Identifier:
keyid:B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/B77DFD4E1CE311EB88EB1B78C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.4.0/23
Signature Algorithm: sha256WithRSAEncryption
df:67:42:24:91:27:23:08:a9:87:88:e8:61:11:c8:58:ad:54:
9a:82:85:f4:53:3d:44:b1:4b:0d:0b:7d:37:cf:4d:67:bb:8e:
94:28:39:d8:a6:10:a5:e5:b7:6d:58:34:81:ca:e6:d9:8c:a6:
45:35:ac:00:46:48:03:8b:20:5f:57:91:54:b6:cf:8e:8a:50:
76:de:5d:46:a1:49:09:38:fb:5f:0e:75:00:74:9f:1f:f0:2e:
03:dc:dd:41:b5:f5:61:ef:e5:d5:38:01:eb:ca:70:32:7b:d2:
00:62:35:a7:cc:f7:f3:ac:82:c3:d3:13:da:56:0b:64:ab:a7:
1b:27:55:60:07:fd:79:60:3d:b6:5c:00:af:68:78:27:2e:9c:
5b:9b:c4:26:14:8c:54:35:aa:5b:8d:b2:1d:b3:8b:ef:75:e3:
35:71:0b:dc:44:9b:2c:f1:31:35:69:d0:07:4c:e0:f7:10:62:
9b:13:e8:a8:9a:e6:9b:5c:76:b4:ec:22:45:c7:0f:f7:49:32:
33:57:f0:e5:d7:ab:d8:3b:20:a1:4b:d1:ae:db:71:70:23:0d:
b5:a4:0f:63:e8:97:df:87:cf:89:1f:6f:a9:ad:51:4d:40:18:
86:00:49:ff:e4:87:13:a4:fd:b6:80:83:c5:c4:b3:02:a7:6f:
0e:4c:e7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org