Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/0A1CE106909511ED9E54B261C4F9AE02.roa
File: 0A1CE106909511ED9E54B261C4F9AE02.roa (raw, json)
Hash identifier: V1npvQROVzceaEO46PCQ7+R6kI+mTmQoFUyrLVrbp5I=
Subject key identifier: 2B:62:A6:05:43:18:1A:C3:DC:E7:63:78:CE:2E:CD:7F:27:B3:15:66
Certificate issuer: /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Certificate serial: 0CD1
Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/0A1CE106909511ED9E54B261C4F9AE02.roa
Signing time: Wed 12 Apr 2023 19:16:03 +0000
ROA not before: Wed 12 Apr 2023 19:16:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132824
IP address blocks: 103.136.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 09:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3281 (0xcd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Validity
Not Before: Apr 12 19:16:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64370373-7222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bd:51:05:e7:b6:84:90:e0:8c:c0:46:0f:21:
ec:7e:08:67:cd:d7:7c:65:34:e7:6f:a6:a4:55:e6:
49:4f:af:17:a4:1f:fc:26:49:2b:e4:22:7b:dd:3c:
95:ce:61:7d:58:ab:d7:70:35:30:d5:a3:cb:d0:01:
a8:16:6f:7d:ac:ad:99:db:c8:e5:e0:9f:fa:3d:f8:
7b:72:22:bf:19:f0:a3:ff:45:c2:d5:ab:7e:c7:51:
b5:b5:08:2c:e8:77:33:85:26:d2:79:81:03:9f:0a:
f6:2a:30:c1:d9:7d:22:85:8f:53:53:89:89:a6:d5:
6c:fe:12:40:68:e8:bc:7c:35:6c:7b:ae:b7:5b:93:
ef:4a:da:1d:56:33:2c:c5:48:f1:38:ef:ff:f1:5a:
47:f2:1a:d8:f1:70:10:13:f0:31:72:58:ef:e8:76:
66:e8:6e:47:af:cc:90:f5:c9:6a:2f:96:94:ed:2f:
cc:11:cb:93:5d:a0:f2:d0:cf:13:67:59:bd:f3:88:
2f:61:8c:f6:a5:4b:6a:12:b1:8d:81:c6:c3:ea:00:
8d:28:92:62:38:e8:53:c8:03:e9:1d:4a:9b:cd:5a:
ba:7a:71:06:c2:6a:2e:2d:31:f8:1c:8c:f4:d2:00:
4d:c7:b8:7c:07:8e:3e:42:40:31:7c:48:bb:e4:9f:
cf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:62:A6:05:43:18:1A:C3:DC:E7:63:78:CE:2E:CD:7F:27:B3:15:66
X509v3 Authority Key Identifier:
keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/0A1CE106909511ED9E54B261C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.34.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:9c:12:e2:1c:e3:0b:f7:52:c9:f2:2d:c6:6c:37:a8:d7:b7:
3c:29:90:61:fe:23:c0:e5:5f:68:6b:09:b8:89:80:cd:17:b9:
4c:8d:5a:af:b6:16:71:42:2c:ce:99:3e:3f:47:29:e2:22:01:
2e:9c:a7:55:5b:d0:d0:58:80:cb:5e:0f:93:30:b1:30:cd:a8:
d0:6b:1d:41:cc:da:fc:99:c2:07:27:d6:58:c1:6b:de:3a:be:
0e:2e:51:35:9f:07:b4:fa:d8:74:c5:b3:db:a1:46:a7:bd:6f:
99:e8:53:c2:8d:37:8b:67:c9:64:22:c1:de:c4:15:2a:59:e2:
f1:00:65:df:55:85:41:f2:df:fd:04:03:1e:66:70:59:82:73:
8c:a1:91:d6:4a:7e:ac:ad:71:cf:2d:ed:c6:7b:ee:6a:5d:b6:
90:3a:b8:23:02:d9:55:f2:25:e1:f0:af:ad:f2:1b:9a:bc:a9:
47:d5:16:3e:ff:2e:ae:8c:8f:2a:f8:82:f7:12:05:f4:cc:bc:
d1:b8:bd:a6:12:41:e8:43:d7:17:0d:0d:83:46:3e:68:60:bb:
c1:57:c1:f9:aa:5f:7a:d1:08:f6:85:99:fe:63:94:54:df:73:
34:27:16:7f:2b:a6:18:7f:c3:1c:53:79:9b:06:15:69:86:d2:
fc:03:75:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 12:38:56 2024 by rpki-client on console-ams.rpki-client.org