Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/2F6A6650A14211EDA566785DC4F9AE02.roa
File: 2F6A6650A14211EDA566785DC4F9AE02.roa (raw, json)
Hash identifier: 1srU8H4E29KQe9mLY8L40C/y6YpY2EvILIwygsKarmU=
Subject key identifier: BF:B4:38:B2:4E:F9:89:71:B2:2B:13:78:65:B2:5A:4E:7B:D2:FD:A4
Certificate issuer: /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D
Certificate serial: DB
Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/2F6A6650A14211EDA566785DC4F9AE02.roa
Signing time: Wed 31 Jan 2024 05:45:59 +0000
ROA not before: Wed 31 Jan 2024 05:45:59 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 150697
IP address blocks: 103.59.216.0/24 maxlen: 24
2001:df1:bac0::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 22 Mar 2024 15:54:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D
Validity
Not Before: Jan 31 05:45:59 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65b9de96-0d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:04:c8:68:4c:8b:ad:98:05:4e:99:04:cf:d9:
75:81:0e:7a:04:b6:bf:49:e3:01:a6:da:cb:e1:df:
9d:23:21:24:ba:88:25:69:33:c7:1f:97:d2:2b:02:
9e:6d:71:0f:d2:4f:d3:57:12:dc:1c:28:d0:5b:03:
56:b3:bd:5f:1d:32:fa:b8:8e:e5:19:75:cd:36:c4:
b2:90:8e:bf:b7:88:71:8d:84:7b:53:81:3f:af:46:
a3:22:e9:2b:6f:4e:33:41:78:8a:6d:f1:77:3e:6e:
e2:c7:46:46:11:78:9c:e3:16:2e:5b:6b:a4:3e:98:
72:88:13:a7:0e:c1:93:0f:78:c3:76:9e:9c:1f:e4:
57:c8:4e:5e:19:19:2b:5f:2c:71:4c:80:e5:4b:33:
76:de:2a:ff:dc:d7:e1:33:e5:f5:c7:dc:06:10:03:
58:c2:f0:22:ae:75:82:17:be:0f:96:e9:08:d0:a3:
8d:29:ce:78:2e:71:fa:fe:7d:df:ba:2d:bf:16:aa:
47:c9:19:d8:80:d3:04:37:d4:d9:e1:34:be:10:cd:
a8:ef:9f:df:41:f3:5b:ed:fe:db:dc:69:42:22:86:
49:36:b7:2d:e3:fb:39:3e:99:dc:a6:d3:dd:d9:d2:
e5:5f:72:aa:99:69:ee:65:38:c6:d9:23:37:b2:80:
d9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B4:38:B2:4E:F9:89:71:B2:2B:13:78:65:B2:5A:4E:7B:D2:FD:A4
X509v3 Authority Key Identifier:
keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/2F6A6650A14211EDA566785DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.59.216.0/24
IPv6:
2001:df1:bac0::/48
Signature Algorithm: sha256WithRSAEncryption
96:7c:12:48:9c:eb:87:16:d8:4e:ff:d3:99:5d:87:33:6e:e2:
de:62:56:6f:ce:5f:be:84:94:2d:fb:66:3e:8a:1d:8e:68:2c:
30:79:35:09:55:0a:23:bc:97:7a:64:3e:0a:e2:ce:2f:62:d5:
ed:08:0c:af:ae:60:c5:91:3b:5d:b4:e3:bb:66:18:ba:97:ae:
ef:4c:25:d4:4d:92:01:b0:36:00:4e:15:92:37:82:a7:16:c9:
18:74:7a:a8:d8:71:1d:c6:70:7e:da:e9:7b:c5:3c:c5:4b:57:
1a:c4:fb:26:43:19:8a:69:5f:64:71:12:4d:75:9b:14:97:9e:
68:31:af:d8:34:e5:e7:83:26:e6:9e:b1:0c:17:64:bd:91:18:
2f:8b:b9:71:7a:7c:59:35:2e:91:72:bd:9b:0b:38:ab:be:90:
dc:cb:89:6a:3b:f5:18:dd:a8:91:c4:10:85:d0:22:d7:02:3a:
e4:d9:d9:3f:3a:6f:fe:61:b1:58:97:73:63:6a:fc:78:a6:af:
3e:92:0a:ca:99:36:86:dd:db:e1:79:27:93:67:2c:d9:ca:9c:
2c:a5:9e:78:da:ee:d9:6b:6b:69:5e:af:4c:ee:de:c2:20:20:
d8:ef:18:b9:7b:3a:97:ea:5d:07:d6:1b:1d:d7:40:a1:2b:04:
9b:53:34:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 18:41:49 2024 by rpki-client on console-fra.rpki-client.org