Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913360F/9B137B9E1B2511EBA997D416C4F9AE02/4EFFE7A41B2711EB87DFFD18C4F9AE02.roa
File: 4EFFE7A41B2711EB87DFFD18C4F9AE02.roa (raw, json)
Hash identifier: VQYD84LUukLOmSPOgoiXcHuEZBAE7c7aj3sWPcnnh+w=
Subject key identifier: 8A:0F:36:9C:D0:73:7A:61:E9:DA:D8:90:84:37:A0:B7:86:35:8E:A4
Certificate issuer: /CN=A913360F/serialNumber=7E8939BA55237EBD2386572B0E58028A7E19B3F0
Certificate serial: 0598
Authority key identifier: 7E:89:39:BA:55:23:7E:BD:23:86:57:2B:0E:58:02:8A:7E:19:B3:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fok5ulUjfr0jhlcrDlgCin4Zs_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913360F/9B137B9E1B2511EBA997D416C4F9AE02/4EFFE7A41B2711EB87DFFD18C4F9AE02.roa
Signing time: Thu 08 Dec 2022 12:31:23 +0000
ROA not before: Thu 08 Dec 2022 12:31:23 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 141383
IP address blocks: 103.157.250.0/23 maxlen: 24
2406:aa40::/32 maxlen: 40
Validation: Failed, certificate revoked on Mon 22 Jan 2024 05:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1432 (0x598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913360F/serialNumber=7E8939BA55237EBD2386572B0E58028A7E19B3F0
Validity
Not Before: Dec 8 12:31:23 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=6391d91a-dfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9b:9c:2a:1b:e4:e6:0a:6b:41:c1:12:4d:26:
0f:63:03:13:a8:2f:07:99:73:ea:b3:54:7a:45:3f:
f2:60:7d:78:4c:dc:15:8e:ab:26:68:f0:11:ac:55:
af:cc:ce:3e:4b:88:28:7f:e5:6f:a3:1f:f0:31:4a:
f2:44:3f:70:b0:be:55:76:e8:19:e9:6d:24:c6:03:
cb:34:42:8b:96:69:3b:e5:b3:59:58:23:fd:d8:1d:
e0:a4:33:af:98:9c:11:26:fd:f6:86:72:06:9a:3d:
b8:a8:72:63:3e:c8:43:6e:56:38:7a:56:af:37:50:
d9:c1:ed:1f:95:67:69:2f:c5:94:14:ea:05:3e:3b:
8e:2d:df:30:f5:cb:0a:71:5b:3d:45:8d:4d:a7:13:
4a:b1:ff:4a:3d:76:e7:f6:af:0d:96:23:23:58:42:
d3:3c:35:ab:d8:e1:7f:c3:d2:1b:03:12:cd:dc:c9:
94:a3:97:51:53:a5:e5:4c:ac:5f:7f:e7:a6:65:ae:
87:73:a2:53:06:0f:91:a0:17:cf:e6:5c:1c:35:79:
72:39:cb:d0:32:46:fe:7e:21:1e:e0:04:a1:13:a5:
e2:e5:dd:8b:9b:cf:c5:9f:30:8b:05:c4:18:6e:de:
91:b7:65:b8:49:78:ad:5c:b6:a1:92:d5:a5:50:7a:
9a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0F:36:9C:D0:73:7A:61:E9:DA:D8:90:84:37:A0:B7:86:35:8E:A4
X509v3 Authority Key Identifier:
keyid:7E:89:39:BA:55:23:7E:BD:23:86:57:2B:0E:58:02:8A:7E:19:B3:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913360F/9B137B9E1B2511EBA997D416C4F9AE02/fok5ulUjfr0jhlcrDlgCin4Zs_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fok5ulUjfr0jhlcrDlgCin4Zs_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913360F/9B137B9E1B2511EBA997D416C4F9AE02/4EFFE7A41B2711EB87DFFD18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.250.0/23
IPv6:
2406:aa40::/32
Signature Algorithm: sha256WithRSAEncryption
43:69:b3:5b:04:e5:0a:19:82:ad:79:f0:19:2a:de:24:dd:b0:
de:48:92:4c:69:84:80:f1:d3:90:2e:66:cc:89:ba:57:e9:98:
22:55:0e:f1:86:c1:b3:c8:36:15:bb:b8:6f:48:ab:0c:b9:66:
14:4c:e1:be:66:72:f1:de:47:1e:5d:bb:45:cd:96:bd:d9:24:
8f:bf:1e:dd:4e:9e:d8:96:0b:12:3d:e0:19:36:56:18:9e:8b:
6d:ab:69:9e:0d:1b:23:79:35:e5:81:ab:80:e9:4b:b7:8a:39:
e8:19:35:5b:55:6d:85:8e:66:59:d9:f2:a5:7d:98:f8:44:35:
ed:f5:a7:0d:5b:40:f7:50:57:a2:d0:c1:0f:59:7c:09:35:e7:
c3:36:66:fb:93:cd:ac:ea:d5:03:8d:7a:fc:fc:ea:60:ad:9a:
fe:84:81:36:8c:10:80:4a:73:40:31:38:03:7a:b1:64:73:58:
f3:30:75:06:af:e1:b0:ca:78:be:4b:fe:c2:50:14:c5:d6:9d:
3b:81:0c:5e:ea:34:91:24:67:5f:b4:66:8d:e8:39:2b:f7:fc:
a5:bf:22:dc:98:3b:df:ce:65:ef:a0:06:f0:29:d7:10:24:09:
4b:94:0f:03:62:e8:d7:c1:75:90:e4:c8:86:21:d3:89:25:81:
5e:e5:e8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 06:52:55 2024 by rpki-client on console-ams.rpki-client.org