Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/EBA74768866F11ED8EDFC568C4F9AE02.roa
File: EBA74768866F11ED8EDFC568C4F9AE02.roa (raw, json)
Hash identifier: xnIYkQdGvEIaq3qEOrWd/17RHHmvGRRyFDzQQx0n/RA=
Subject key identifier: AF:EC:67:08:E6:4D:81:4E:C7:69:DA:D8:73:E6:DF:CA:89:E7:17:99
Certificate issuer: /CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51
Certificate serial: C5
Authority key identifier: E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/EBA74768866F11ED8EDFC568C4F9AE02.roa
Signing time: Thu 11 Jan 2024 05:05:56 +0000
ROA not before: Thu 11 Jan 2024 05:05:56 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 150696
IP address blocks: 103.60.204.0/23 maxlen: 24
2400:cf60::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 20 Feb 2024 07:27:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51
Validity
Not Before: Jan 11 05:05:56 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=659f7734-c506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:69:1a:ef:41:2d:95:d1:12:4b:b0:c9:7b:c5:
5f:dc:5a:7f:30:4f:83:fc:3c:d3:85:46:de:ac:a6:
20:16:32:25:c4:67:4e:c4:a4:36:53:5a:f7:5e:4e:
bf:7d:bf:33:b6:cb:00:bc:e1:68:6d:35:a9:ac:01:
00:d4:13:09:98:d3:47:31:67:a1:93:78:7e:83:e7:
cc:ae:41:19:31:b3:e0:6c:88:76:77:33:65:c5:5b:
ea:75:9a:4b:e1:59:92:a6:e2:57:e6:18:af:fa:c3:
05:14:ae:65:0c:18:17:a5:49:4f:c9:0e:7b:09:f4:
8e:63:28:da:ae:9b:fd:38:d3:37:70:5d:21:fa:dc:
65:a6:c0:29:8b:ca:4f:3e:f7:18:3b:92:90:48:b4:
47:27:7a:4f:48:0b:ea:1f:37:c1:78:0e:33:c6:6c:
bc:1f:b6:77:d1:ed:d6:a5:56:80:b6:9d:8a:9a:bc:
05:b7:ad:b6:6e:d4:09:fa:4e:5c:4e:21:31:8d:6d:
d2:ea:93:c7:b6:dc:e2:a8:17:15:63:0f:aa:06:69:
b4:9b:77:57:ab:ff:9e:54:c5:4c:71:fe:e0:8a:79:
92:54:f1:c6:1a:d3:68:36:2e:df:de:01:42:eb:a5:
c8:13:36:47:0f:17:2c:5f:ad:60:88:fb:aa:7c:83:
a2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EC:67:08:E6:4D:81:4E:C7:69:DA:D8:73:E6:DF:CA:89:E7:17:99
X509v3 Authority Key Identifier:
keyid:E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/EBA74768866F11ED8EDFC568C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.60.204.0/23
IPv6:
2400:cf60::/32
Signature Algorithm: sha256WithRSAEncryption
79:2a:7f:2a:6f:4e:c8:a8:5e:8f:be:c3:92:b2:2c:4e:59:2b:
82:ce:0f:8e:4e:ce:ea:55:58:5d:12:bd:7e:57:10:ca:a4:3b:
e9:a4:77:ad:df:44:a1:8e:25:da:df:fc:a4:dc:8e:9a:58:d9:
75:16:c6:be:5b:79:12:4a:98:47:ce:bd:ed:fc:db:7c:70:5c:
78:27:e1:97:c3:02:2b:8d:4a:93:90:8c:9b:09:ff:da:63:78:
b5:e9:2e:23:c2:5b:0d:57:63:4f:76:47:19:a8:7c:2d:df:40:
51:72:dc:9f:cc:d6:13:2b:32:88:43:37:5e:3d:7d:62:0b:36:
ce:c2:21:35:95:51:c4:c9:56:f9:9d:27:c3:ff:00:49:1b:39:
9f:46:80:e5:43:37:e2:b2:c6:b2:a9:94:a3:bd:4c:be:68:5a:
bf:88:57:10:3b:2d:15:25:c4:a4:9c:ba:17:f5:f3:c7:06:67:
c0:81:56:b6:50:31:68:b7:a1:ff:1a:44:a9:1e:3d:2f:0c:1b:
67:d6:f3:b7:d1:05:fc:2b:10:93:29:1e:88:26:34:a4:32:a5:
af:25:e0:84:48:99:37:d4:fa:f0:4d:ef:28:dc:30:5e:36:69:
b4:bb:28:34:a2:38:f8:43:53:0f:4c:fe:78:22:53:a8:98:ae:
7e:e6:87:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 12:04:23 2024 by rpki-client on console-fra.rpki-client.org