Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/E28D98DEC9EB11EDA0BE5C48C4F9AE02.roa
File: E28D98DEC9EB11EDA0BE5C48C4F9AE02.roa (raw, json)
Hash identifier: qYO1dP0PoVxIFCncGnO0BGsZ4PxYEcuuwkcZ+gPNpME=
Subject key identifier: CC:52:4F:66:14:D3:3F:E4:18:F4:43:86:61:CB:27:7F:04:3B:2C:48
Certificate issuer: /CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Certificate serial: 06A0
Authority key identifier: 62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/E28D98DEC9EB11EDA0BE5C48C4F9AE02.roa
Signing time: Sat 02 Mar 2024 23:12:08 +0000
ROA not before: Sat 02 Mar 2024 23:12:08 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 55720
IP address blocks: 103.82.228.0/24 maxlen: 24
103.82.229.0/24 maxlen: 24
103.82.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 08:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1696 (0x6a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Validity
Not Before: Mar 2 23:12:08 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65e3b248-0820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:8b:53:af:95:a2:2d:89:ec:9e:91:0d:93:
e7:7f:44:68:12:ee:b4:7b:5c:53:9e:ea:16:a3:7d:
fa:6b:ab:f0:17:bf:46:c8:cb:10:cd:c3:12:cf:9a:
20:b5:34:e0:7c:9a:7f:37:8c:c6:56:94:52:dc:eb:
79:27:1b:4c:54:b9:61:c2:ba:15:26:55:db:1c:75:
37:a1:ca:1f:36:8a:ec:2f:28:a3:72:ba:e6:43:b7:
00:ef:65:ba:16:c8:71:71:28:5e:6d:59:20:b7:59:
f6:3b:cc:9f:49:7d:0a:ba:d3:30:5b:40:ba:c6:6e:
4f:c6:c5:87:50:3a:86:69:02:2b:a5:96:6b:03:b5:
03:73:b5:fd:f8:93:f7:22:81:64:b5:b5:18:93:f0:
8a:97:8d:0a:9d:ad:0f:89:c6:0b:1b:65:d6:d7:37:
bb:48:e8:79:c6:50:0f:d9:b1:62:9c:11:ec:4f:c2:
63:de:4e:49:ec:73:dd:f5:76:6c:03:b3:42:0c:56:
2d:0f:05:bb:10:b0:83:d0:30:89:e7:f5:a4:b5:66:
03:f9:ec:9a:04:41:8d:67:45:9d:4d:d1:9b:88:3f:
82:c9:be:03:ff:67:b1:fb:d9:86:34:5d:6c:da:b7:
7d:35:2b:44:2b:71:49:b0:81:aa:85:ef:3d:8b:c8:
0c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:52:4F:66:14:D3:3F:E4:18:F4:43:86:61:CB:27:7F:04:3B:2C:48
X509v3 Authority Key Identifier:
keyid:62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/E28D98DEC9EB11EDA0BE5C48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.228.0/23
103.82.231.0/24
Signature Algorithm: sha256WithRSAEncryption
27:66:00:2a:77:26:07:d5:90:f1:f1:c0:5e:49:ca:98:5c:0f:
0f:d9:5b:d5:62:7a:5b:e3:4e:59:c9:6f:2b:55:da:e9:86:2f:
1a:20:59:0e:35:90:c5:18:13:9c:10:2b:73:25:97:76:69:0c:
b4:f3:0b:c9:b4:c1:2b:59:5d:eb:09:0c:65:3c:23:d7:4f:19:
39:d9:64:c1:6e:50:2a:d3:7c:bd:60:64:09:4c:0a:5d:ca:f6:
44:f2:2a:07:f5:0a:f6:c1:ca:48:b2:c9:53:f0:2e:c2:61:a3:
ac:a9:f3:99:df:c1:83:19:c3:25:48:9c:e3:25:8a:cc:f7:61:
1c:fb:d4:ee:14:09:b6:47:ae:9a:4b:5c:2d:c6:a2:8e:f1:cb:
e9:a7:0a:c2:b7:c6:9d:f7:f9:49:15:06:18:93:cb:c5:35:87:
ee:9b:70:f1:e9:bd:c1:c2:84:82:42:47:04:75:3a:56:b0:d4:
c1:c3:40:89:1e:f6:a1:36:53:e1:80:75:f4:7f:08:31:3e:2b:
c5:37:7a:46:88:1b:7b:9c:0e:7d:a4:f5:1d:af:e7:80:f4:cc:
97:83:04:cf:e8:45:74:80:98:5f:1c:d7:94:75:8a:7a:dc:3e:
d8:dc:b4:74:3d:c8:55:79:35:1d:76:68:0b:f8:6b:dd:ea:76:
57:24:9e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 11:27:49 2024 by rpki-client on console-fra.rpki-client.org