Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138FCA/BACF23FE35E311ED81A3DD32C4F9AE02/FB624B9299AD11EE84953682C4F9AE02.roa
File: FB624B9299AD11EE84953682C4F9AE02.roa (raw, json)
Hash identifier: u4fjeM49GfvCEMQpLoOU2cMHK9XwtQkiFONToP3ExJM=
Subject key identifier: 81:6E:C8:58:F4:94:CF:3A:B3:4E:2D:1D:DB:4D:2F:72:8A:47:6E:37
Certificate issuer: /CN=A9138FCA/serialNumber=C199597C4E78CD35ADF1AFDCFD4161174606A649
Certificate serial: 0116
Authority key identifier: C1:99:59:7C:4E:78:CD:35:AD:F1:AF:DC:FD:41:61:17:46:06:A6:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZlZfE54zTWt8a_c_UFhF0YGpkk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138FCA/BACF23FE35E311ED81A3DD32C4F9AE02/FB624B9299AD11EE84953682C4F9AE02.roa
Signing time: Wed 13 Dec 2023 11:51:42 +0000
ROA not before: Wed 13 Dec 2023 11:51:42 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 137443
IP address blocks: 103.79.120.0/22 maxlen: 22
103.79.120.0/24 maxlen: 24
103.79.122.0/24 maxlen: 24
202.91.36.0/22 maxlen: 22
202.91.36.0/24 maxlen: 24
202.91.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138FCA/serialNumber=C199597C4E78CD35ADF1AFDCFD4161174606A649
Validity
Not Before: Dec 13 11:51:42 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=65799ace-6351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0c:b6:af:c2:c2:a0:0a:6b:da:70:35:a2:d2:
8c:0d:61:f3:fa:83:3d:c3:1d:e2:74:e1:88:dc:c5:
96:19:56:6f:7e:4f:b1:6e:36:b7:f7:d4:5b:c1:e4:
97:2e:23:ce:e0:7f:a6:54:a4:90:e8:22:b9:14:7f:
9b:44:90:0f:b5:07:d9:20:37:aa:fb:b6:0d:32:d9:
4a:d7:13:87:6c:3f:1b:f7:bc:3a:95:83:7b:eb:84:
ed:93:07:8c:30:36:94:4f:cd:51:33:3a:6e:4d:fc:
00:c6:71:a5:cf:00:e9:ed:be:33:a3:f9:60:ef:86:
7d:3e:8e:2f:d0:f1:95:6e:33:fd:c1:3b:15:1d:bc:
8b:c6:74:2d:2e:d5:02:f2:9d:9d:54:ad:78:31:f2:
f3:6f:43:31:26:0d:08:be:b3:4e:75:9f:f0:02:6d:
e2:f1:e7:5a:7b:8c:3a:93:38:8e:49:e6:31:89:c1:
f6:d4:4f:13:b6:d8:fd:4d:b8:16:a6:2f:df:9c:fb:
55:a3:79:2f:e5:ec:48:53:a5:1d:60:0c:2e:cb:9c:
6b:6b:33:7f:db:90:bd:12:58:8a:25:3e:72:fe:0a:
74:bd:80:17:49:69:5d:30:a9:81:ab:7f:6a:71:f1:
3c:48:8c:a6:20:97:10:59:54:42:b2:58:d7:22:fc:
01:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6E:C8:58:F4:94:CF:3A:B3:4E:2D:1D:DB:4D:2F:72:8A:47:6E:37
X509v3 Authority Key Identifier:
keyid:C1:99:59:7C:4E:78:CD:35:AD:F1:AF:DC:FD:41:61:17:46:06:A6:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138FCA/BACF23FE35E311ED81A3DD32C4F9AE02/wZlZfE54zTWt8a_c_UFhF0YGpkk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wZlZfE54zTWt8a_c_UFhF0YGpkk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138FCA/BACF23FE35E311ED81A3DD32C4F9AE02/FB624B9299AD11EE84953682C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.120.0/22
202.91.36.0/22
Signature Algorithm: sha256WithRSAEncryption
77:2d:80:9e:a4:79:65:9a:8f:90:94:ac:80:11:b8:4d:70:43:
dd:b7:39:16:35:70:c8:25:d5:45:30:65:31:10:89:95:d0:80:
41:47:2a:7e:ed:37:e9:e3:66:c7:57:cf:63:cb:a2:af:46:d4:
4a:d6:d8:94:17:c8:95:86:1c:49:da:c6:eb:1c:eb:6f:85:06:
1d:57:41:49:49:c3:6c:b2:ea:99:ce:22:ec:65:89:37:13:99:
c3:a7:27:2c:ff:51:5e:e2:3a:20:0b:c3:cb:76:27:d2:06:b5:
76:69:b3:5e:d3:d6:da:cf:9d:69:f1:34:15:73:ee:a1:66:33:
27:64:ab:43:94:d2:b4:78:3c:b5:c6:e4:ed:5c:e2:1c:1a:ef:
cb:29:2b:c3:a4:89:a5:7c:09:cf:5f:55:df:f7:c7:fb:44:33:
d0:f0:b4:63:00:b3:bc:b0:e5:43:96:3d:a1:bf:61:7e:29:d2:
56:fb:a1:e0:77:9f:3e:c1:ab:21:a1:de:3a:e3:bf:3c:72:9a:
d4:60:cf:68:0b:86:4d:fa:29:fb:11:13:f2:21:1c:7b:c9:f6:
c0:45:eb:5d:51:d4:6b:c1:33:03:98:ce:12:79:26:2a:f0:54:
99:2f:2e:f6:e1:2d:ef:d6:30:6b:08:27:46:d3:9f:74:47:0f:
e8:d1:2c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 07:42:19 2023 by rpki-client on console-ams.rpki-client.org