Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/49B77DC2667211EEBDC73D3EC4F9AE02.roa
File: 49B77DC2667211EEBDC73D3EC4F9AE02.roa (raw, json)
Hash identifier: FRBu805WTyRDwFBwuSATTzWSfcXn36GQUtiz0iHDBe4=
Subject key identifier: 2A:F5:22:C0:FC:1D:FC:66:82:98:3D:B1:D1:17:4F:57:A7:44:F7:99
Certificate issuer: /CN=A913D65B/serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41
Certificate serial: CD
Authority key identifier: 58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/49B77DC2667211EEBDC73D3EC4F9AE02.roa
Signing time: Wed 31 Jan 2024 06:06:03 +0000
ROA not before: Wed 31 Jan 2024 06:06:03 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 137939
IP address blocks: 103.82.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 15:11:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D65B/serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41
Validity
Not Before: Jan 31 06:06:03 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65b9e34a-2be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c5:b3:77:fb:ef:01:2b:29:af:cc:83:f1:46:
1b:84:06:fa:21:b0:07:3e:4e:f5:95:1a:3e:45:55:
bc:d2:4f:34:6b:59:5e:07:0c:42:84:0b:a7:d8:14:
9f:ac:4c:a5:d0:5c:3a:41:a0:52:da:c7:bd:7c:eb:
f0:f0:42:7a:be:ee:e2:37:00:97:9e:88:7f:f6:59:
47:04:9c:24:e4:40:ce:ef:c8:26:7b:97:6a:a9:7b:
29:38:39:6a:f4:dc:da:fc:d5:6b:c0:f6:85:d2:d0:
5a:85:20:47:00:91:97:24:1d:58:59:0d:4f:87:60:
ba:e1:40:ee:a3:9d:34:4b:6b:bb:97:d7:4c:ca:21:
aa:d3:b8:b3:df:47:05:2b:ae:6b:43:18:85:d4:bc:
8f:cb:f0:21:02:0a:fd:31:43:cf:04:76:5c:55:40:
7d:91:6c:f1:a6:3d:b0:94:b0:28:e9:75:f4:72:77:
eb:05:6e:34:df:05:ad:75:10:3d:91:d1:72:d1:91:
ac:0e:c5:ec:ca:8f:5a:fa:3e:40:19:06:ec:50:ac:
3c:bd:dc:a5:bd:64:19:89:52:4e:4d:68:85:dd:45:
2e:d5:5b:70:82:83:f0:0d:0a:1c:ef:b3:b0:f2:b1:
92:c7:63:b3:18:32:9f:db:fa:5c:61:b2:40:56:ea:
7c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F5:22:C0:FC:1D:FC:66:82:98:3D:B1:D1:17:4F:57:A7:44:F7:99
X509v3 Authority Key Identifier:
keyid:58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/49B77DC2667211EEBDC73D3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.95.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:78:02:26:57:39:4d:28:a4:36:19:69:d5:f1:e1:7a:4c:f3:
31:35:83:51:17:22:60:e0:21:e7:f4:b5:fd:3a:7d:0b:35:e0:
d9:9a:e0:65:2c:89:18:70:c9:97:62:e1:48:7a:1d:50:cb:94:
c9:85:4b:62:54:97:1e:46:a8:dd:74:7d:69:a4:d9:46:29:3c:
c2:eb:1c:05:57:23:11:85:af:00:e7:33:85:d5:0c:0b:11:99:
1d:89:6e:cf:7c:e0:25:4a:54:3d:42:b3:76:63:11:84:ec:97:
e0:c2:f0:c0:31:e3:f8:15:85:17:60:1a:e5:a1:3e:3e:e2:d3:
36:0f:8e:24:5d:94:09:95:9f:3a:70:7c:86:f9:52:58:91:0f:
8d:b3:34:46:1e:95:e6:18:da:64:11:c7:6b:f7:23:67:c1:81:
f5:fe:af:b1:22:cd:e8:e9:d2:b7:5b:db:32:57:e2:35:28:f8:
ca:bc:2f:17:f3:b9:ad:bd:fe:3f:37:cf:be:4c:92:ad:c7:d2:
5d:11:ac:f2:ef:05:2b:30:64:70:a4:f4:bc:a5:bf:68:8c:f4:
c9:ff:0d:e9:1f:58:65:6a:53:63:ff:d9:c7:e0:29:3a:5a:5d:
f6:a6:2d:11:81:ee:68:a3:c8:e1:68:b9:a3:db:a1:c8:a6:d3:
a1:8c:7b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 20:17:00 2024 by rpki-client on console-fra.rpki-client.org