Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/B04927C462D111EEB797E270C4F9AE02.roa
File: B04927C462D111EEB797E270C4F9AE02.roa (raw, json)
Hash identifier: 8lwO4wKhM5TNrCOBEJuGb6vD4217u/Cpk1mb+FRkzBs=
Subject key identifier: 88:D2:66:FD:6E:87:84:3D:10:75:64:C0:18:0E:D4:63:CC:E9:FA:FB
Certificate issuer: /CN=A913C68B/serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1
Certificate serial: 02
Authority key identifier: F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/B04927C462D111EEB797E270C4F9AE02.roa
Signing time: Wed 04 Oct 2023 16:18:44 +0000
ROA not before: Wed 04 Oct 2023 16:18:44 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 137985
IP address blocks: 103.241.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Oct 2023 17:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C68B/serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1
Validity
Not Before: Oct 4 16:18:44 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=651d9064-e5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:9a:b0:46:3b:bc:a1:4e:b6:ae:2e:5a:af:
16:b8:81:15:d7:71:cd:4e:c5:fc:87:41:96:10:1e:
ce:36:a1:02:0a:3d:74:cd:ab:9f:f5:33:65:47:93:
3e:af:23:e0:64:9f:14:ca:ce:f6:d9:67:0a:11:5d:
15:15:09:8e:d2:72:fe:c0:ba:2e:0f:2e:80:0f:c7:
5e:9e:4a:c6:c8:43:6c:f8:e2:03:2c:f1:49:c0:bd:
3d:53:2f:75:0d:f0:63:10:99:12:21:95:ce:b5:6d:
68:40:aa:06:24:de:24:dc:2a:b4:2b:99:d7:f6:5e:
28:b5:1f:80:a6:1f:da:c9:f0:90:38:e6:8f:44:6b:
14:89:53:7f:94:08:88:03:a1:1b:b2:45:c0:c1:f3:
fa:f9:b3:45:61:69:e4:04:3c:f2:f5:05:b9:0f:0f:
b1:df:eb:09:06:fb:db:fa:ee:39:11:af:62:e7:91:
ca:3a:f5:1f:04:92:47:67:73:eb:30:0f:6c:4f:6b:
79:a6:74:8a:48:ed:5e:2f:71:64:5f:7d:ab:95:71:
93:f2:28:89:02:da:7b:4a:7e:7b:3f:d4:0b:46:61:
04:00:03:21:39:ba:8e:2e:8e:0e:20:5c:99:3e:95:
29:5d:bc:97:c9:78:11:63:77:62:b9:91:ea:14:1b:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D2:66:FD:6E:87:84:3D:10:75:64:C0:18:0E:D4:63:CC:E9:FA:FB
X509v3 Authority Key Identifier:
keyid:F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/B04927C462D111EEB797E270C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.241.195.0/24
Signature Algorithm: sha256WithRSAEncryption
74:b5:23:63:ba:28:f7:01:de:0f:3a:3f:bd:56:ec:2c:4d:86:
f7:8e:f2:05:e3:25:c7:fd:cc:6d:f4:58:30:4d:c9:c9:38:84:
4e:53:38:67:97:fc:0a:62:01:ed:35:f7:83:c7:1e:27:45:9e:
f2:5c:93:57:32:82:db:db:0a:f1:db:48:02:a8:0f:c0:89:1d:
1c:ed:3d:c5:78:8a:01:c1:40:8e:cd:9d:02:c6:49:e5:96:9b:
75:db:56:a4:20:de:76:b3:15:4d:81:6a:f3:49:4a:74:41:0e:
ed:3d:94:8d:ca:8e:01:42:6a:b6:03:af:2c:32:0a:dd:e3:71:
29:7e:6b:71:96:60:0b:53:cb:54:97:20:3d:ea:1b:e4:19:0f:
9a:b8:81:04:73:ba:c4:aa:c5:a3:ad:98:58:ee:e2:3f:c5:e9:
78:c6:77:3d:ac:02:c5:95:c3:58:18:b6:3f:df:c1:1f:fe:01:
47:ef:74:74:90:d7:10:ef:fa:c4:93:c2:36:06:fe:83:c3:fa:
7c:cd:72:d7:cc:9e:d6:52:43:cf:cf:8c:a4:3e:ed:37:bd:22:
9f:bd:76:36:94:d4:1f:74:9d:09:c2:33:da:27:7d:f0:d6:de:
22:55:e0:55:50:bd:da:88:72:37:c3:dd:86:bc:99:ab:9c:fd:
c8:ab:fd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-ams.rpki-client.org