Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/21B9D048D6DC11ED9FCE0F48C4F9AE02.roa
File: 21B9D048D6DC11ED9FCE0F48C4F9AE02.roa (raw, json)
Hash identifier: D5cvpjOptYW49UYp/DrH9eNKzhhjcT8pWpFaFsyPrZU=
Subject key identifier: 55:C7:50:F9:CA:E7:8C:D7:24:DB:E0:2B:85:9C:EC:2A:76:4B:9C:9F
Certificate issuer: /CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
Certificate serial: 05F0
Authority key identifier: 42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/21B9D048D6DC11ED9FCE0F48C4F9AE02.roa
Signing time: Tue 31 Oct 2023 23:51:09 +0000
ROA not before: Tue 31 Oct 2023 23:51:09 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 23734
IP address blocks: 103.101.0.0/22 maxlen: 22
103.101.0.0/23 maxlen: 24
2401:c740::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 26 Jan 2024 22:25:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1520 (0x5f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
Validity
Not Before: Oct 31 23:51:09 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=654192ed-0977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:ed:00:ee:66:a9:91:81:a5:28:95:e6:3e:
a7:ff:0d:44:ab:31:cb:cb:33:9d:b3:fc:82:2a:ee:
f1:60:25:d5:45:ee:1e:ea:b4:76:16:7b:e0:47:b8:
b6:fc:90:82:23:c5:dc:7c:9c:9f:dc:35:4a:d1:e7:
35:65:38:35:2d:d0:58:68:50:05:bc:b3:22:c9:78:
3d:85:5d:a7:b8:68:36:69:6a:d1:4a:11:e4:1c:4a:
ed:2b:0b:7b:72:0e:63:7f:11:3c:21:16:8d:35:0d:
00:38:5a:d7:74:6e:12:47:8f:2e:5b:12:16:61:ec:
d2:51:d8:a6:ce:d3:60:9e:1c:9c:07:6b:f4:25:d2:
13:af:13:dd:e4:b7:e7:81:f6:db:98:31:1e:f2:1e:
93:3b:18:43:17:d8:36:83:90:13:0b:81:c9:ff:06:
2e:0a:91:c5:a8:05:47:db:80:be:42:af:cc:51:d3:
b1:cf:00:73:32:be:0a:c4:74:88:98:37:5c:c9:95:
d1:1e:c7:4c:d8:9e:be:7f:b5:ba:98:53:f6:d8:31:
aa:60:1d:8e:74:d1:62:d4:63:2c:c4:fc:14:b4:ec:
5d:c7:68:a4:38:35:10:72:3a:e9:db:a5:e5:f3:8c:
84:02:44:d8:56:f3:4f:1f:23:ef:06:6c:fb:60:25:
03:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C7:50:F9:CA:E7:8C:D7:24:DB:E0:2B:85:9C:EC:2A:76:4B:9C:9F
X509v3 Authority Key Identifier:
keyid:42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/21B9D048D6DC11ED9FCE0F48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.0.0/22
IPv6:
2401:c740::/32
Signature Algorithm: sha256WithRSAEncryption
06:62:e6:9b:a0:94:9b:da:3d:e4:37:41:15:1a:d1:04:26:e6:
4e:64:55:95:e9:ee:20:31:fd:a6:62:65:70:b0:ec:f8:46:ac:
57:8b:0d:74:44:c7:26:87:44:38:cf:41:ba:de:f8:35:9b:c0:
89:48:f9:c5:f3:11:08:44:84:10:81:4a:ac:97:b3:7f:5b:39:
8f:cd:cc:7b:36:dd:f2:c2:60:ab:a6:29:72:07:76:c3:9d:c9:
0e:47:ac:b1:2b:d4:31:ac:92:49:bd:c9:9b:67:98:d7:cd:21:
72:74:f4:7b:a8:1c:5b:52:85:bc:fe:36:73:37:80:33:3a:3b:
cb:04:b6:4b:2a:39:34:7d:df:0b:0c:a6:53:50:5c:92:c5:48:
73:09:bf:e2:b5:bc:26:4a:c7:d7:14:25:88:bd:b5:5c:0c:06:
8e:bf:b8:48:9c:65:16:75:4a:f1:ce:dd:b6:0d:93:e3:e0:cf:
ec:d2:42:09:3d:07:c6:02:d5:54:56:2a:cd:b0:71:7f:98:2e:
df:d2:f1:6d:31:2e:c6:82:d0:cb:1b:5c:f3:44:64:9c:2a:00:
45:40:47:6d:8a:46:a4:ae:ca:64:16:59:24:33:8f:c0:6e:c9:
ee:6a:85:4d:b7:b4:b8:36:8d:a5:bb:55:5e:b5:27:62:de:25:
4a:e1:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-ams.rpki-client.org