Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/111CD68A8D3211ECA1CF9913C4F9AE02.roa
File: 111CD68A8D3211ECA1CF9913C4F9AE02.roa (raw, json)
Hash identifier: BYREclh+6btHMufklxV75LShai8sXtVhMiN3dlHV/Bc=
Subject key identifier: 16:28:DB:3A:20:24:4E:E6:CE:9B:A4:8A:A1:D0:9A:DC:AF:D0:6E:FC
Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Certificate serial: 13C8
Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/111CD68A8D3211ECA1CF9913C4F9AE02.roa
Signing time: Tue 24 Oct 2023 17:24:51 +0000
ROA not before: Tue 24 Oct 2023 17:24:51 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 9541
IP address blocks: 103.209.125.0/24 maxlen: 24
103.209.126.0/24 maxlen: 24
103.209.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 10:57:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5064 (0x13c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Validity
Not Before: Oct 24 17:24:51 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=6537fde3-2966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:24:6c:0d:3c:e3:46:47:9a:08:30:f9:fa:
93:ba:9f:ef:95:f2:18:9d:83:24:09:d2:00:19:bc:
29:6b:54:02:06:55:15:91:bc:8f:b9:9d:2a:7d:a3:
e1:6b:10:d3:db:cd:de:13:35:c9:3c:46:af:3c:28:
f4:d4:e4:fe:a1:9a:5a:07:d6:3a:69:15:05:63:f9:
ca:e8:b1:27:1b:fd:49:ea:a9:e4:aa:2d:25:c1:91:
9a:80:49:04:f1:b5:72:2d:35:a3:42:f4:03:35:ab:
ce:d4:1e:62:20:55:b8:37:85:cc:0e:98:78:6f:fa:
23:d2:74:c5:42:aa:42:6c:76:f4:7e:23:52:97:f2:
25:41:6a:91:66:2f:7f:aa:0b:a1:ee:c1:c2:de:96:
6f:d3:f4:9f:6d:d7:a0:f1:27:40:f1:91:47:10:04:
95:e6:93:df:65:1e:76:50:ee:ce:4e:25:de:a2:01:
80:ff:88:15:f7:82:cf:4a:68:d2:53:c1:47:ea:13:
c2:c8:55:33:10:13:3f:5f:06:83:e8:ad:f9:68:a7:
bf:d6:ab:7c:b4:c7:a3:aa:35:58:38:48:10:ec:d0:
91:1b:4a:57:79:b4:a9:18:a1:ae:f2:1d:cf:68:a3:
05:ef:42:e6:f5:8a:8e:9a:04:7c:b8:00:6a:15:5e:
d3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:28:DB:3A:20:24:4E:E6:CE:9B:A4:8A:A1:D0:9A:DC:AF:D0:6E:FC
X509v3 Authority Key Identifier:
keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/111CD68A8D3211ECA1CF9913C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.209.125.0-103.209.127.255
Signature Algorithm: sha256WithRSAEncryption
d9:52:73:7d:4f:a8:32:32:91:2c:a5:24:75:dd:86:b7:e0:d2:
71:4e:c6:af:5d:f7:16:ce:e0:ce:b2:34:f0:5a:98:a1:7b:82:
4f:33:2f:8d:46:14:34:b5:1d:be:71:15:a3:bc:3f:03:d0:e6:
6b:bf:d4:5e:07:89:99:00:63:57:2d:1c:f3:d1:39:c3:ba:88:
17:fb:15:28:a8:82:06:fe:47:69:10:93:df:ea:d7:0a:c7:e4:
68:25:76:7f:9f:18:4e:1b:02:60:8f:d2:2d:d2:2b:22:ad:5e:
1f:4c:44:cf:69:c7:dd:ad:25:3c:ef:29:68:aa:3f:1e:3d:a9:
04:a8:d7:1e:aa:e1:f4:e1:46:e3:cf:26:23:5a:4e:74:db:15:
94:0d:12:17:c3:a5:3f:1d:5c:ca:a5:27:77:c0:b1:05:02:4c:
86:0a:4c:ca:fc:42:f9:3a:f5:0b:38:99:45:54:52:a3:06:68:
4c:e6:9c:91:59:e0:51:6c:1a:e4:ee:b9:07:c0:5a:32:7f:f1:
16:43:f3:ba:e9:74:0b:e0:77:fe:51:7b:d8:d3:8d:8c:ab:ce:
f3:f2:53:1b:06:f4:aa:48:10:0d:15:4a:44:c0:a8:da:5f:39:
fe:95:d0:51:2c:ad:b4:b0:e4:94:2c:63:37:21:47:50:82:bf:
ac:95:a0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 14:02:43 2024 by rpki-client on console-ams.rpki-client.org