Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/E2E24CA8831A11ECA9164623C4F9AE02.roa
File: E2E24CA8831A11ECA9164623C4F9AE02.roa (raw, json)
Hash identifier: uMO5IFiVuTLwcNdDxWniEj/hIAkZRToCPDx7l2xHu5A=
Subject key identifier: E0:C7:CC:06:DD:38:8D:79:F5:35:7D:F7:E5:C4:08:98:22:FE:59:F9
Certificate issuer: /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1
Certificate serial: 0342
Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/E2E24CA8831A11ECA9164623C4F9AE02.roa
Signing time: Tue 23 Jan 2024 02:44:31 +0000
ROA not before: Tue 23 Jan 2024 02:44:31 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 141465
IP address blocks: 103.161.214.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 15:28:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 834 (0x342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1
Validity
Not Before: Jan 23 02:44:31 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65af280f-52b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:2a:85:e1:2e:c5:e1:d6:a0:d3:89:04:12:
be:00:85:dd:0e:88:5b:f1:d5:a2:b4:b4:34:3a:cb:
ba:0d:97:8d:db:42:1e:99:1c:63:81:0e:ba:73:70:
6c:cd:b5:cd:ed:51:65:15:3d:8f:b2:73:79:0f:68:
18:3e:36:5b:96:62:6b:dc:90:70:d8:cd:67:ed:0a:
e1:f9:62:40:96:05:11:0a:09:93:94:8f:8c:72:b5:
a6:9f:2d:86:0f:15:9f:78:3f:cd:b7:f5:2a:24:ff:
32:c7:f0:99:b6:2b:25:c4:41:98:d9:de:1a:ac:fc:
55:96:bd:38:b2:6c:e3:e4:8a:ef:1e:cd:3b:05:62:
30:9f:83:d2:c6:7e:8d:48:9f:93:14:a7:ca:7d:3c:
4a:98:d3:84:6b:6f:61:49:62:7a:ac:18:fa:8a:9c:
c9:93:75:e1:2b:5c:7a:a8:6f:6d:e4:c0:71:39:be:
4b:96:31:27:85:66:28:71:5f:18:41:5b:42:23:2c:
bf:3d:51:04:ef:e0:40:41:96:a2:1c:f8:90:30:8e:
26:d9:cf:e4:12:9f:66:26:21:5b:c7:e0:3a:95:7c:
8f:05:4f:4c:61:3f:6c:33:89:92:47:8d:f4:b7:94:
b0:71:3f:cf:13:61:1c:f1:ce:17:87:73:e9:2c:77:
d5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C7:CC:06:DD:38:8D:79:F5:35:7D:F7:E5:C4:08:98:22:FE:59:F9
X509v3 Authority Key Identifier:
keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/E2E24CA8831A11ECA9164623C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.214.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:4a:68:e3:0a:ac:25:8e:b0:cd:c5:dc:92:2d:50:19:44:ef:
f2:90:3e:af:51:d9:7e:6d:2a:aa:e4:5a:a3:95:09:fe:75:1b:
c8:c2:e8:4f:ae:e2:d9:0b:f3:e4:75:c3:56:d0:66:7b:e1:46:
1d:f8:5e:b2:5d:8c:02:02:04:60:d6:71:85:d3:9d:13:52:7f:
56:90:da:a0:c8:f4:4c:2e:b4:1b:53:ff:32:be:bb:7d:15:a6:
b3:66:07:f9:e4:35:c8:99:7e:3c:ae:52:41:94:02:40:0f:4d:
95:5f:29:f1:4c:b3:fc:3a:3d:01:2d:87:59:6c:69:83:8e:2a:
08:1a:39:29:3f:4e:89:d0:9c:6a:6a:2d:58:b7:38:21:b7:14:
38:c2:54:e2:23:0b:82:af:e4:1b:b2:d8:43:f3:96:3c:61:7a:
c8:f1:bc:eb:9a:69:b4:de:06:5d:8e:5d:c6:dc:7c:55:43:b6:
0c:5f:14:62:df:f7:86:46:c9:89:81:f3:3a:94:ba:86:56:e4:
22:85:e3:a3:87:9a:8a:cf:50:22:b0:df:74:e4:0f:94:42:c6:
3c:3b:4c:39:b5:9c:29:f6:4c:9e:66:76:0e:30:52:ee:5a:8a:
71:ad:0c:f7:b1:af:6e:45:bb:ab:e1:1d:87:4a:e1:c1:38:1e:
22:99:fe:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 16:54:14 2024 by rpki-client on console-fra.rpki-client.org