Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/C0468E2CE2D911EEAD95A469C4F9AE02.roa
File: C0468E2CE2D911EEAD95A469C4F9AE02.roa (raw, json)
Hash identifier: j2A6Vc0AXuDwMhrfZncnxKZJQ7jOMMyabSHpnHufvkc=
Subject key identifier: 1B:15:78:BF:0D:81:4D:6C:48:BE:09:0E:1E:76:C7:E7:2D:F9:9D:17
Certificate issuer: /CN=A9117373/serialNumber=61841D1EDABF9FF0F6018C611017AF719627A24D
Certificate serial: 0436
Authority key identifier: 61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/C0468E2CE2D911EEAD95A469C4F9AE02.roa
Signing time: Fri 15 Mar 2024 14:38:56 +0000
ROA not before: Fri 15 Mar 2024 14:38:56 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 30938
IP address blocks: 103.101.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Apr 2024 18:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1078 (0x436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117373/serialNumber=61841D1EDABF9FF0F6018C611017AF719627A24D
Validity
Not Before: Mar 15 14:38:56 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65f45d7f-b147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:81:83:a8:d1:c3:90:ef:98:76:d8:b9:87:c9:
1a:d7:ab:e1:d9:12:eb:1e:c3:fb:f5:38:10:af:78:
06:53:39:5e:a5:87:2b:f8:8d:32:a8:94:d5:02:c9:
c9:80:eb:37:bd:8b:d4:2c:61:a1:2a:a7:e0:7d:bb:
3f:46:eb:98:e3:ed:68:c3:a5:ad:97:86:51:9f:cf:
a8:0b:33:b2:e2:8a:d8:8a:78:a3:9b:d1:56:5b:ed:
8f:4a:88:51:0c:f7:8f:4b:85:23:a2:f9:1e:21:b9:
7e:96:46:e9:da:b9:93:b0:aa:b6:ad:8d:50:43:58:
3a:91:8e:41:e4:4e:88:f7:c1:18:e3:08:3a:24:0a:
f4:e7:0a:71:7b:56:de:1f:6a:0a:a5:fd:2c:59:1a:
0b:f5:e6:b9:89:62:e9:eb:eb:09:69:99:d7:c4:ee:
b7:bc:c4:a3:c1:b2:07:f2:5b:98:da:d9:4f:76:7e:
40:58:69:35:1e:82:59:d4:e9:69:70:b5:ad:5f:80:
38:7f:69:08:63:56:c2:a8:56:bd:e1:bd:81:04:da:
22:01:22:a7:ac:95:02:48:2b:63:7c:ac:96:18:98:
cc:c5:b6:08:56:dc:a8:da:dc:a1:c8:8d:b2:f3:ee:
f9:9b:dd:12:3d:9c:8d:32:24:be:d8:6c:60:17:4d:
8b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:15:78:BF:0D:81:4D:6C:48:BE:09:0E:1E:76:C7:E7:2D:F9:9D:17
X509v3 Authority Key Identifier:
keyid:61:84:1D:1E:DA:BF:9F:F0:F6:01:8C:61:10:17:AF:71:96:27:A2:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/YYQdHtq_n_D2AYxhEBevcZYnok0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YYQdHtq_n_D2AYxhEBevcZYnok0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117373/BFA9C36223AA11ECA8116B27C4F9AE02/C0468E2CE2D911EEAD95A469C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.85.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:87:0e:fa:03:e1:61:0f:92:2e:c2:df:7b:2d:8a:00:24:44:
0d:cb:d1:4a:92:64:d1:44:11:b0:e3:18:3f:d9:78:78:41:40:
61:38:04:c4:0d:9c:04:80:b4:dc:38:34:8f:1e:96:64:89:83:
b0:45:9d:f2:c1:fe:e2:ca:6e:71:45:f3:a1:b0:33:9b:1e:2e:
db:7c:d9:33:b1:8b:d4:2c:9b:2b:18:9b:ba:fd:3b:95:a9:39:
b4:c3:f0:df:03:90:73:24:02:87:6b:ea:b0:ac:85:2a:99:f1:
34:d0:d1:cc:06:1c:fe:c2:d0:1a:a9:e0:0b:59:24:30:c0:6f:
e4:b6:bd:52:41:70:94:fa:ca:59:29:8a:ed:ae:56:ec:80:3b:
12:5b:d9:99:0d:7e:82:4e:8d:90:3e:57:ef:69:0f:80:f6:7a:
f1:ca:28:7a:6b:c6:f5:a0:95:97:95:45:32:c0:bb:74:d8:64:
cd:bf:67:f8:41:6d:d7:ed:7b:83:02:ea:a0:3a:99:23:04:e7:
18:32:df:25:66:e4:40:6e:98:1c:7f:2a:35:b9:88:3e:01:1c:
d5:a9:08:b2:c2:6c:c4:d9:92:63:1a:0b:a1:34:06:be:b7:84:
e9:0a:1f:fd:6f:91:aa:28:b4:34:a8:1b:e7:bc:7c:80:3b:a8:
56:d4:11:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 7 21:51:11 2024 by rpki-client on console-ams.rpki-client.org