Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/ED347E7CAD6D11EE83DA6253C4F9AE02.roa
File: ED347E7CAD6D11EE83DA6253C4F9AE02.roa (raw, json)
Hash identifier: AwNkGUBN+GDsi5s+SoDvB7pJzysnKFck5WG8FyrYlKI=
Subject key identifier: AC:EB:D3:28:61:EF:C9:EA:AB:23:A8:F2:5E:23:47:48:F7:F1:79:65
Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Certificate serial: 13
Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/ED347E7CAD6D11EE83DA6253C4F9AE02.roa
Signing time: Sun 07 Jan 2024 15:03:34 +0000
ROA not before: Sun 07 Jan 2024 15:03:34 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 21859
IP address blocks: 103.94.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 03:46:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Validity
Not Before: Jan 7 15:03:34 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=659abd46-6883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:35:54:2c:f4:c9:1a:65:b0:75:7b:6a:8d:
5e:16:1f:63:ca:8d:99:27:68:e0:dc:e1:0d:57:9f:
fc:5d:86:fc:e0:39:fd:53:3e:54:aa:ff:04:34:2b:
ae:c5:56:22:b9:00:17:bf:62:6a:d5:b8:34:48:05:
58:67:7e:07:11:6b:ed:a0:b5:84:f4:ce:21:78:d8:
ce:ae:71:bb:37:b8:fd:12:ca:e5:f1:28:02:8d:c6:
03:6a:df:ce:72:9c:12:85:96:5b:c1:40:46:6d:d2:
97:00:2c:52:9a:cd:d8:f4:ea:25:76:2a:9d:48:d2:
a2:08:ba:22:b3:6c:ed:e9:d7:f2:bf:3d:36:5e:e2:
fb:77:73:2f:70:0d:ec:f2:d3:0e:18:11:11:4a:cd:
2e:7c:1b:79:33:c9:c7:38:93:53:58:1f:02:33:37:
72:05:2e:11:49:cc:bc:ac:76:dc:31:25:9b:e6:9c:
5e:31:1c:ec:56:e2:cf:86:5d:19:43:a1:bd:4e:78:
b0:f1:b7:22:61:81:d1:9a:0f:4d:9f:bb:11:5b:aa:
de:84:c5:1c:99:11:a5:75:6f:a6:81:65:d4:f3:e9:
54:1d:9f:df:57:74:31:e5:0e:eb:e7:74:46:93:de:
84:f5:0c:47:f7:73:9e:00:cc:9f:08:e8:22:b4:b9:
01:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EB:D3:28:61:EF:C9:EA:AB:23:A8:F2:5E:23:47:48:F7:F1:79:65
X509v3 Authority Key Identifier:
keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/ED347E7CAD6D11EE83DA6253C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.94.185.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:b2:48:b2:ed:0a:57:af:bc:ed:08:a9:8b:09:b9:dd:eb:7a:
87:59:45:db:0d:66:cc:fb:21:9d:25:65:a6:8f:b6:57:0d:11:
80:3b:e6:81:d6:63:f4:97:2c:29:c7:ee:88:bb:21:af:37:84:
4b:6e:ed:bb:52:b3:81:69:48:b0:b7:5f:d0:dc:26:3d:d4:a1:
57:57:03:b9:fe:78:6a:09:69:29:0e:f8:f8:ef:18:94:0e:5b:
cd:49:4c:a0:b7:24:ce:d7:d2:e6:56:fc:f3:0d:3b:ea:a4:b9:
25:64:6b:1a:50:5a:98:6b:15:6d:cc:f8:5b:5d:17:62:bd:6e:
70:fc:17:26:2f:d5:62:cf:30:77:e5:c2:9e:dc:7c:e6:44:37:
f1:a5:ce:17:ca:ac:09:eb:d4:cf:e8:50:7e:f1:27:2e:b1:55:
e0:38:15:41:52:db:67:d1:9f:14:b7:a7:ac:9a:a7:36:9b:43:
bd:0f:4f:a0:00:b5:13:d1:47:6e:56:30:a9:37:54:39:26:4d:
b5:55:16:e6:47:2a:8c:b2:ea:6d:03:14:de:f6:97:bd:e1:20:
c1:1a:5e:bc:a7:c2:6f:4a:ad:9f:df:ad:b1:ff:9d:c8:5a:b1:
3d:e8:69:5d:84:f8:d2:5a:66:98:2f:c6:a4:2b:fd:7c:f6:08:
86:2b:f2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:56 2024 by rpki-client on console-fra.rpki-client.org