Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/442CE7C6A8C911EF999EDB3EC4F9AE02.roa
File: 442CE7C6A8C911EF999EDB3EC4F9AE02.roa (raw, json)
Hash identifier: Zx8MxIgQ3LQj9uWu2mLj2j9wfr2ZJwUVBD4ipni6qeE=
Subject key identifier: 0C:94:BD:17:53:37:BD:AE:61:41:D8:76:29:95:2D:53:95:25:03:9D
Certificate issuer: /CN=A9127514/serialNumber=62F7A5440A5A531BECC16341F3EE313396137E8D
Certificate serial: 02
Authority key identifier: 62:F7:A5:44:0A:5A:53:1B:EC:C1:63:41:F3:EE:31:33:96:13:7E:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YvelRApaUxvswWNB8-4xM5YTfo0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/442CE7C6A8C911EF999EDB3EC4F9AE02.roa
Signing time: Fri 22 Nov 2024 11:59:46 +0000
ROA not before: Fri 22 Nov 2024 11:59:46 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 55501
IP address blocks: 103.105.208.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 22 Nov 2024 16:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127514/serialNumber=62F7A5440A5A531BECC16341F3EE313396137E8D
Validity
Not Before: Nov 22 11:59:46 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=67407231-aa8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:eb:14:aa:a9:b7:c9:89:bc:f1:7a:e3:d1:1f:
fd:b0:44:0f:dc:40:2e:bf:8e:a1:3e:f9:de:0c:e3:
f8:1a:4f:ef:bd:41:11:3f:b5:a1:32:cf:66:4c:5c:
73:e0:c3:d3:80:df:7c:d3:b7:12:ac:c5:7b:9c:48:
13:f0:b6:8e:8e:0b:5a:3e:3b:4e:5b:f7:fa:7e:aa:
5e:a7:cb:93:ce:65:32:f2:0c:dd:6c:e4:31:61:1a:
e7:e3:95:74:56:45:50:ce:25:fa:02:3d:35:01:4f:
c5:dc:4e:ca:cd:30:ad:b5:14:7d:c5:7c:8e:c1:c5:
ce:58:c6:a9:21:82:e6:4f:6f:64:8a:76:25:7a:dc:
36:17:c1:3e:81:d7:30:16:fe:d9:d6:c4:a4:80:e6:
80:a0:26:9e:8e:3c:b8:22:34:9e:23:3d:6f:2e:9d:
97:19:95:4a:43:d3:f1:d5:c5:b6:6e:3a:64:56:ad:
94:f9:7b:f4:27:c7:5f:7c:91:c3:7c:af:2d:1a:48:
33:94:d9:9c:21:39:f1:b2:74:0a:b8:cb:93:2d:71:
a8:88:b1:86:11:3d:9c:c2:eb:0a:24:c6:9d:47:77:
98:9b:1f:8e:47:8e:8d:13:74:4c:f9:fe:4f:a1:62:
42:48:a0:cc:0d:2e:63:1f:f6:22:d9:55:36:2c:71:
ea:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:94:BD:17:53:37:BD:AE:61:41:D8:76:29:95:2D:53:95:25:03:9D
X509v3 Authority Key Identifier:
keyid:62:F7:A5:44:0A:5A:53:1B:EC:C1:63:41:F3:EE:31:33:96:13:7E:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/YvelRApaUxvswWNB8-4xM5YTfo0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YvelRApaUxvswWNB8-4xM5YTfo0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127514/6ACA712EA8C811EF9EC2733DC4F9AE02/442CE7C6A8C911EF999EDB3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.105.208.0/22
Signature Algorithm: sha256WithRSAEncryption
81:9a:3c:32:0b:f3:8b:84:f0:ab:a9:83:2a:ef:40:6b:93:4e:
a2:b9:ac:89:fa:24:ef:d3:3c:29:0f:fb:fd:b5:f6:25:00:b2:
57:6e:5f:60:aa:e3:56:39:cc:04:ec:45:e4:06:1f:35:e1:9b:
f3:52:b5:f4:93:e1:7e:fe:e3:82:61:8c:dc:97:b0:16:bf:36:
6f:3d:6b:f4:13:ec:a6:2d:21:56:2e:0e:c7:d4:fe:b0:a3:d5:
40:1c:a8:87:10:88:4e:33:ff:08:b1:f2:45:3b:b1:77:88:32:
fc:24:ca:08:84:95:96:64:f8:c2:ab:96:14:82:49:17:f9:74:
ab:c7:7e:2f:38:e4:4b:ea:14:84:6c:a2:0d:e7:28:87:1d:dd:
d6:d3:a2:af:81:b3:dd:c6:a1:86:72:16:60:f2:be:44:9d:bf:
ec:57:a5:ea:2c:73:1a:0e:60:6d:64:ae:6c:0e:be:89:c8:a6:
df:c0:79:4d:e6:91:36:e8:4a:17:9a:4a:ce:91:f7:7d:fd:97:
3c:ee:71:60:5e:4f:97:4a:e2:2e:8a:65:41:64:a3:e7:25:e3:
a0:1c:bf:17:e0:3b:72:f6:dc:9e:95:d6:45:47:99:fc:e4:bd:
cb:e7:08:6a:bb:0f:4a:9f:d7:b9:79:82:3d:d0:3c:61:7b:52:
8c:33:57:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:35:10 2024 by rpki-client on console-ams.rpki-client.org