Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/5BD0377E0E5211EEB4699C4DC4F9AE02.roa
File: 5BD0377E0E5211EEB4699C4DC4F9AE02.roa (raw, json)
Hash identifier: in0QXP7OjsbijV8wAHDUSLsSbcFAJ8cA1Vzikz/gvEI=
Subject key identifier: 5A:CD:B0:3C:44:9A:2F:0A:35:F7:79:64:C8:7B:05:59:BF:E1:42:F2
Certificate issuer: /CN=A91383F0/serialNumber=1036C1E0FFE1CFC37D655D89FA65D65FE22E1F7A
Certificate serial: 07
Authority key identifier: 10:36:C1:E0:FF:E1:CF:C3:7D:65:5D:89:FA:65:D6:5F:E2:2E:1F:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/5BD0377E0E5211EEB4699C4DC4F9AE02.roa
Signing time: Mon 19 Jun 2023 03:35:39 +0000
ROA not before: Mon 19 Jun 2023 03:35:39 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 151403
IP address blocks: 103.221.67.0/24 maxlen: 24
2401:aa0::/32 maxlen: 40
Validation: Failed, certificate revoked on Mon 19 Jun 2023 04:05:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91383F0/serialNumber=1036C1E0FFE1CFC37D655D89FA65D65FE22E1F7A
Validity
Not Before: Jun 19 03:35:39 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=648fcd0a-fa2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:45:43:1f:41:6b:b2:35:3d:32:4b:02:21:
cd:80:fa:3b:27:d1:d6:82:42:49:1a:c0:89:d9:b7:
a7:70:e0:aa:b5:f8:5a:ed:08:66:0e:c0:e0:cb:02:
a9:0c:a5:69:ea:3a:c0:13:fd:ac:ae:47:98:72:1f:
e2:a3:49:f3:9f:07:18:96:04:55:9b:53:16:5e:ec:
58:88:e3:93:8b:2b:55:6a:ee:e8:9e:ad:de:15:2f:
f6:d8:0c:cf:01:72:f0:38:7a:35:f9:3e:81:9d:bd:
63:0c:3d:1b:f0:9c:3d:1c:47:dd:f3:e9:5b:ee:e8:
c5:81:c6:88:d5:30:7c:e0:89:83:67:4b:55:c1:35:
fe:18:6d:51:df:cb:fe:a2:8f:55:ad:ee:97:4f:e6:
75:b8:cc:6f:e2:2d:3a:ea:78:93:39:0f:21:eb:ff:
0a:10:ef:dd:5f:00:97:dd:e9:27:2c:71:fb:08:40:
cb:c8:98:5f:dd:1d:5b:e8:97:6d:e8:2b:1a:7e:f4:
cb:81:7d:67:ad:7c:0e:e8:59:58:9b:dd:a2:c0:61:
a3:c3:d8:89:a6:05:f7:40:1a:23:66:ba:7d:71:9f:
2b:b0:dd:90:a1:fa:5c:b5:b1:2a:b4:62:ea:ac:91:
38:a0:b8:9f:0a:78:ee:31:54:fe:c0:fe:bf:93:ac:
eb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CD:B0:3C:44:9A:2F:0A:35:F7:79:64:C8:7B:05:59:BF:E1:42:F2
X509v3 Authority Key Identifier:
keyid:10:36:C1:E0:FF:E1:CF:C3:7D:65:5D:89:FA:65:D6:5F:E2:2E:1F:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/5BD0377E0E5211EEB4699C4DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.67.0/24
IPv6:
2401:aa0::/32
Signature Algorithm: sha256WithRSAEncryption
04:34:bc:c8:e5:17:20:65:d4:da:31:54:07:f7:09:a3:fc:5c:
a3:ae:91:f9:c5:5a:f8:d8:ed:a2:f0:bf:47:b6:69:a6:07:16:
91:d7:e8:bb:fe:d0:e4:a9:52:fb:2a:97:47:bb:8c:ef:34:f8:
6f:7d:14:73:2f:51:18:63:0e:6c:e3:bb:2f:bd:5a:56:ed:61:
f9:3c:e0:b0:bb:4e:8e:2b:c6:18:5b:7f:ac:05:ee:69:b1:ca:
0b:57:e8:25:5a:3b:cf:5d:da:d3:86:fe:89:18:7a:88:24:36:
47:43:c3:5f:86:b5:cd:23:a7:eb:6e:cb:f2:3f:c3:4f:80:8b:
e1:7f:70:11:b0:be:a4:63:a2:61:dc:81:0f:6f:2d:88:ae:40:
5c:bf:63:80:b6:9e:50:12:0c:31:cc:eb:3c:a3:21:79:b6:e8:
67:7f:a7:20:bc:99:d0:31:3b:65:7a:95:7f:7c:78:3d:62:ff:
76:93:84:cf:cf:16:45:70:f2:0f:5a:6b:82:d0:b7:a7:e0:39:
ee:a2:da:26:ab:9e:2b:b5:78:65:95:2d:15:5d:2a:28:76:69:
e4:a5:ad:a3:92:7d:da:7a:83:39:e9:ed:cf:59:2f:93:15:0b:
2c:e0:2a:24:c1:bd:b2:b9:c8:54:20:2a:cc:29:e5:a8:bc:15:
c1:3c:f9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org