Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20313336333539.roa
File: 3130332e3233382e3132382e302f32342d3234203d3e20313336333539.roa (raw, json)
Hash identifier: YB+CBjdxRJuQBQkR+QF6YqGN5NFnBBgtToXD1mC+I5E=
Subject key identifier: 57:27:49:E1:07:FD:19:EC:C1:72:4B:E2:16:1C:BC:B9:09:FD:91:40
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 3C9FE91CCD3DCF96FE6869C607CAFD7D985A2BDC
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20313336333539.roa
Signing time: Fri 12 Jan 2024 04:41:47 +0000
ROA not before: Fri 12 Jan 2024 04:36:47 +0000
ROA not after: Fri 10 Jan 2025 04:41:47 +0000
asID: 136359
IP address blocks: 103.238.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 10:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:9f:e9:1c:cd:3d:cf:96:fe:68:69:c6:07:ca:fd:7d:98:5a:2b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Validity
Not Before: Jan 12 04:36:47 2024 GMT
Not After : Jan 10 04:41:47 2025 GMT
Subject: CN=572749E107FD19ECC1724BE2161CBCB909FD9140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:29:b2:4f:eb:5c:6b:de:b7:85:12:2e:0e:ff:
23:3a:45:6e:21:de:e3:e3:31:27:bf:f6:3f:a0:c4:
2d:dc:8c:d8:55:bc:10:54:d0:00:d6:97:3f:11:4b:
ec:39:62:5a:ee:b8:f3:a1:7c:7f:df:4f:fd:be:ae:
bf:00:8f:23:62:d1:db:a7:59:03:f2:b3:61:b6:61:
c7:8f:46:f6:cd:94:3f:c4:ff:53:36:d7:db:32:df:
38:53:41:77:c7:25:e1:0b:bb:23:76:f1:63:22:1c:
2a:53:cf:dc:00:32:3c:87:57:63:a9:3e:94:17:11:
b0:1f:53:6c:a3:87:e9:84:4c:a1:21:ef:e7:a8:8a:
c6:3a:55:d2:27:0c:22:2e:30:71:fb:d3:bf:8f:db:
4e:d2:8d:80:ee:11:bc:f3:9b:30:3a:65:30:3e:78:
17:d8:c7:52:1c:d1:76:ab:3c:84:b2:6f:7e:35:84:
0d:93:2e:31:cb:1d:0e:eb:97:91:47:48:30:33:64:
6b:b8:93:84:3e:cf:2a:e9:5f:0a:f0:89:48:de:b4:
2e:de:95:e4:d0:09:2c:72:5e:9c:67:68:e2:aa:7b:
d9:7c:bf:95:7a:57:cd:1a:b6:d2:f4:a5:5e:b3:f8:
38:a0:9a:f6:70:82:6b:86:e9:3f:cd:f7:0c:14:04:
53:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:27:49:E1:07:FD:19:EC:C1:72:4B:E2:16:1C:BC:B9:09:FD:91:40
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20313336333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.128.0/24
Signature Algorithm: sha256WithRSAEncryption
99:21:5b:ab:6c:96:3e:16:c0:76:fd:6e:18:e8:c7:f9:9b:46:
52:02:32:b7:1d:a8:16:48:c0:71:5d:b2:92:07:a4:9e:62:9c:
7b:08:3d:e5:f1:f5:61:e4:ac:b3:ac:17:e8:8a:50:7d:17:9d:
a9:a8:44:60:70:12:33:e8:34:36:63:67:fc:d9:e0:35:be:44:
f8:d4:1a:2a:67:31:bb:f7:69:a1:e4:95:f3:6d:2b:f7:00:d0:
a3:9b:12:73:f4:2d:e1:54:b7:6e:25:6d:d6:9c:eb:1c:76:42:
34:99:6e:9f:61:90:36:ab:d5:4c:5d:b2:c5:22:04:d4:a0:78:
10:17:5f:1e:01:dd:1d:4f:01:fe:0b:e6:70:62:ff:1a:73:15:
d9:61:ca:c9:f4:ae:e7:0e:a1:cc:7a:22:47:68:91:f0:4e:e6:
e3:d1:ef:b6:68:f6:78:4a:1a:7e:b9:40:c4:0c:11:b2:54:4b:
9b:20:bb:d3:8a:fc:da:43:ee:6f:b6:e9:74:c1:8f:d8:2b:c3:
1b:22:cb:a8:95:31:45:55:5b:22:77:48:ca:2b:e1:c0:eb:e1:
c5:4e:f3:34:b7:9c:fa:35:09:23:b2:c0:b8:bf:89:f4:4b:8b:
bc:df:49:7c:cc:fa:8b:cc:7c:d5:02:bd:25:f1:f4:a8:7a:fc:
b6:ed:4f:0e
-----BEGIN CERTIFICATE-----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Generated at Tue Feb 13 14:35:35 2024 by rpki-client on console-ams.rpki-client.org