Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/EB0405120AAD11EAB8B64238C4F9AE02.roa
File: EB0405120AAD11EAB8B64238C4F9AE02.roa (raw, json)
Hash identifier: b4bjuwFl73k67sWnFd83sJJqwjOBGHs8DpwQhBgHdkI=
Subject key identifier: 41:07:26:ED:63:30:0A:B8:BD:BE:30:EC:2B:62:C7:FA:B9:BD:4D:6E
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2644
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/EB0405120AAD11EAB8B64238C4F9AE02.roa
Signing time: Sun 06 Aug 2023 16:13:16 +0000
ROA not before: Sun 06 Aug 2023 16:13:16 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 24000
IP address blocks: 103.217.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 15:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9796 (0x2644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Aug 6 16:13:16 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64cfc69c-946f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e9:d6:45:c1:2e:aa:0e:65:49:87:7e:35:ef:
c5:53:d6:22:83:92:85:a1:81:1c:cf:8e:10:60:d8:
82:b6:82:40:68:22:88:8f:77:00:f2:77:f8:cf:29:
c3:78:10:24:2c:3e:99:26:cf:a7:0b:24:1f:9c:7e:
28:8f:ba:ec:e2:11:e7:bb:d5:3e:eb:c6:83:8a:b0:
f7:f2:62:e7:c6:16:45:76:f2:e0:25:96:ef:66:fc:
1d:74:81:f0:13:ab:80:ad:9b:e1:86:71:cf:a1:9b:
97:0c:ef:89:35:f5:43:8d:d9:62:3e:fa:bc:e7:76:
18:83:79:58:f0:7f:7d:71:a6:8d:65:a0:d7:3d:46:
50:57:bb:6f:d8:35:8a:04:f4:8a:8e:eb:3e:ae:fd:
dc:1f:b8:ab:0e:db:3f:dc:fd:2c:ba:10:f1:6d:1f:
64:12:88:c4:80:03:58:68:78:49:51:a1:7e:0c:c9:
0a:1e:72:ec:5d:3f:91:c1:d5:6b:f9:f4:a8:94:c1:
1f:bd:ad:89:f2:e2:d0:48:d8:5b:25:11:2b:65:3e:
dc:a2:35:1e:9e:cb:5c:9c:f3:5a:95:21:50:ec:77:
bd:bb:f4:ee:3c:28:5c:81:67:cc:5e:25:ee:31:3c:
2e:ac:7b:dd:a3:5d:e6:ef:06:e0:3e:27:cd:70:91:
92:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:07:26:ED:63:30:0A:B8:BD:BE:30:EC:2B:62:C7:FA:B9:BD:4D:6E
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/EB0405120AAD11EAB8B64238C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.217.252.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:82:44:1c:58:d6:f8:06:9d:80:d7:c7:6f:c6:87:d2:3c:37:
d9:7c:6a:2f:bd:e3:d0:f1:3f:b3:ef:72:68:50:75:7f:ab:e3:
4e:93:87:27:51:2a:a6:2c:1a:72:09:35:22:13:c8:76:df:84:
f5:b5:ae:5b:86:56:a9:59:2f:ee:3d:67:0e:7a:27:2f:72:09:
e2:71:d1:25:51:6e:ef:0b:90:95:4e:77:ba:98:0a:b8:e7:84:
cb:5a:d9:0e:39:36:ed:5a:b7:03:c5:0d:ea:b7:a6:2d:32:d8:
68:f8:4f:ac:e8:3a:09:08:39:8d:48:b8:ae:ae:f9:16:f1:e1:
cf:da:85:20:98:89:22:a0:32:21:bb:52:e8:f9:0e:8b:86:de:
3e:cc:f7:e8:cb:3b:38:20:f6:0b:f4:be:17:61:4a:0d:aa:d1:
ef:41:b8:96:8d:95:e7:bf:41:a1:be:8d:90:c5:e0:d7:ff:59:
f3:ef:c2:18:7f:20:5c:a3:9e:0d:62:4e:44:17:f4:29:bc:14:
4a:d1:22:88:3b:6c:02:32:7e:0f:f8:92:3b:cf:ab:96:58:2c:
e8:57:24:41:aa:9c:cc:7d:7d:88:ae:35:2d:fa:16:27:6e:14:
3c:6f:33:90:32:41:48:cf:1a:69:58:0e:a1:40:cf:cd:4b:23:
1f:c4:13:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 19 17:58:37 2024 by rpki-client on console-ams.rpki-client.org