Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/DE8AC6A036AE11EEBD365923C4F9AE02.roa
File: DE8AC6A036AE11EEBD365923C4F9AE02.roa (raw, json)
Hash identifier: 71qpJg0dLuUe2fXdpeUieB2CXMetmrtc9wmtFlr2uI4=
Subject key identifier: 64:2C:08:90:D0:8E:93:2B:72:46:F3:9F:0A:C8:C6:2C:2B:D4:D8:27
Certificate issuer: /CN=A913ABFE/serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73
Certificate serial: 19
Authority key identifier: E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/DE8AC6A036AE11EEBD365923C4F9AE02.roa
Signing time: Wed 09 Aug 2023 12:18:38 +0000
ROA not before: Wed 09 Aug 2023 12:18:38 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 140962
IP address blocks: 103.239.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Aug 2023 12:50:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913ABFE/serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73
Validity
Not Before: Aug 9 12:18:38 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=64d3841e-e524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:3a:54:41:3d:60:f3:03:47:17:bf:91:b4:
89:e1:3e:05:d4:5a:9b:32:ce:ed:c4:53:8b:83:61:
df:24:f6:31:45:85:86:24:30:dc:17:04:51:c7:a6:
23:09:e7:fd:3a:61:89:3d:c8:7f:ab:e7:de:36:fb:
61:74:ff:e9:11:88:09:0b:8d:e7:59:95:8d:ed:20:
a4:14:a5:bc:29:a5:14:4f:69:b6:dc:72:25:0d:27:
0a:c6:a9:dc:97:ec:37:06:f3:83:b7:91:76:09:5b:
c1:c4:7e:e5:d6:fd:b5:d3:c8:7f:ae:e9:b8:7b:60:
c3:6a:7b:5b:7e:56:e3:03:0b:84:8d:6e:67:7f:3d:
c1:b9:cf:a5:b4:20:0f:0c:5c:ff:0f:2c:f3:6e:49:
9f:3d:b6:1f:1b:56:a0:c3:fb:65:c8:57:1f:d9:e7:
56:39:fe:a8:ef:5e:ad:cc:a5:6b:d8:87:de:8f:8f:
93:2d:41:f4:cc:ba:3a:8e:0a:aa:1b:9b:e5:10:16:
10:06:d4:29:03:07:ac:27:5a:df:6f:f0:c1:36:3a:
15:22:02:6a:6e:04:ce:6c:5a:90:06:a5:38:57:9c:
26:ea:31:10:22:f4:58:89:92:ad:59:74:95:7a:4a:
76:02:a1:72:d2:ca:45:e3:82:29:71:39:0b:2f:31:
45:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2C:08:90:D0:8E:93:2B:72:46:F3:9F:0A:C8:C6:2C:2B:D4:D8:27
X509v3 Authority Key Identifier:
keyid:E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/DE8AC6A036AE11EEBD365923C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.239.83.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:47:a0:7c:a0:11:f3:15:75:d0:74:da:9b:19:bb:ba:7a:60:
ad:0f:92:15:8d:d1:3f:2c:3c:0e:7b:91:39:00:cc:53:fe:8c:
8d:1c:57:6a:79:39:e9:db:21:85:4b:b0:f1:ce:ff:6c:95:bf:
59:fe:d7:d5:00:d2:d8:05:65:ff:15:8f:6e:d1:73:78:b3:68:
69:57:8c:d3:ac:ff:4a:1a:0d:a5:3e:ce:ce:52:d2:8b:95:8f:
f0:a6:71:c8:aa:7c:cf:51:55:d6:ba:4a:dd:12:fa:22:3e:f0:
e8:9f:6b:6b:a3:59:02:a5:c0:ae:a1:10:6a:19:dd:34:7c:10:
32:8c:5f:e5:67:8c:00:f7:10:de:f5:ca:46:f3:16:bf:f0:71:
95:ef:f3:f9:1e:b0:43:b2:04:a9:02:9e:68:81:43:27:1c:30:
6e:9f:ba:b7:ff:c7:21:97:28:2c:64:d4:d6:67:12:24:e2:f0:
56:9f:e9:71:c8:e7:ef:63:9d:35:bd:48:24:d1:de:ca:04:ae:
f3:55:93:c7:6b:f1:26:01:50:fc:41:01:6b:3b:e7:10:54:58:
9d:d0:1e:40:90:4c:53:68:b3:2a:21:84:e6:5f:37:62:6d:c3:
ff:7e:37:e5:03:fb:41:e4:ad:10:e3:cf:65:a9:85:72:41:f5:
a2:d1:3a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-ams.rpki-client.org