Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/8102B67267D111EBB5863C6CC4F9AE02.roa
File: 8102B67267D111EBB5863C6CC4F9AE02.roa (raw, json)
Hash identifier: 05xEJnBlkpYBgCHD9ykwgrcpyexQtJp0OwD59igelq0=
Subject key identifier: 49:E4:46:D3:CF:4C:D9:57:7E:A2:A5:CF:61:DF:2D:DF:6F:9E:95:E2
Certificate issuer: /CN=A913EE77/serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC
Certificate serial: 05DE
Authority key identifier: B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/8102B67267D111EBB5863C6CC4F9AE02.roa
Signing time: Mon 04 Dec 2023 20:48:26 +0000
ROA not before: Mon 04 Dec 2023 20:48:26 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 140222
IP address blocks: 103.144.104.0/24 maxlen: 24
103.144.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Mar 2024 06:15:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1502 (0x5de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EE77/serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC
Validity
Not Before: Dec 4 20:48:26 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=656e3b1a-9a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:9b:5a:ab:d4:e2:a0:8f:f4:52:8c:eb:b5:
ac:44:78:7d:f6:c9:b8:87:e1:19:10:65:7b:d0:2a:
27:52:11:a6:8a:f8:8d:fd:e6:0d:3e:5e:47:dd:e7:
56:99:d4:9d:ab:9f:15:c4:a2:a8:58:7a:04:50:e1:
b2:91:65:21:73:45:8b:a2:1c:fd:95:8d:c3:bb:27:
c8:90:e4:86:c6:b4:94:cd:7f:38:3a:07:54:06:f3:
57:d1:ff:0f:d7:d1:e8:77:10:2d:74:5b:65:41:69:
6e:d3:b2:58:6b:da:ba:e5:a5:88:1b:e3:0f:ae:c9:
61:02:2e:71:1a:ba:5c:97:63:a1:93:91:04:e7:d6:
2d:02:94:22:dd:c4:6d:9b:75:dd:89:43:38:42:86:
08:21:02:9f:17:72:84:3c:c2:a2:c9:e3:39:f6:c2:
05:98:1f:12:2f:ac:98:e5:fa:a8:40:0f:fd:bc:e9:
55:ae:ae:30:78:9e:60:33:f3:bd:b4:1b:6f:af:e0:
f7:00:76:ea:6c:13:b3:98:9d:6a:9e:b0:c5:41:cb:
9c:ea:55:b9:dc:62:7d:43:d8:a1:af:6d:37:74:69:
8c:4f:65:d7:50:2c:22:81:ff:3e:b2:cd:b0:65:73:
b7:75:3d:3c:e2:80:26:80:68:a9:a1:67:83:38:ef:
23:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E4:46:D3:CF:4C:D9:57:7E:A2:A5:CF:61:DF:2D:DF:6F:9E:95:E2
X509v3 Authority Key Identifier:
keyid:B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/8102B67267D111EBB5863C6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.144.104.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:48:e3:d1:21:fb:fa:13:8a:31:f4:a2:df:b1:8d:79:02:b7:
31:d6:ec:8b:06:02:8a:93:12:85:ba:12:97:f9:55:53:df:b8:
91:5d:91:fd:5e:51:58:15:42:d5:c6:b4:58:31:da:ff:cb:37:
71:f3:4e:02:41:6b:ff:c4:28:00:4c:95:e1:35:0c:69:28:c8:
c2:c2:79:81:fe:12:30:bb:a4:b3:31:c0:0c:af:fe:3d:69:b8:
10:ff:d8:38:ea:92:95:47:9d:ce:77:64:3a:db:3b:cb:f1:d9:
10:51:20:a1:bb:90:d6:09:48:78:f4:d3:56:9b:84:82:c7:bc:
62:69:7b:5f:96:41:f5:c7:86:99:0d:85:e7:27:c4:20:bf:52:
f6:37:cf:fa:fe:81:3e:47:cf:6b:67:cb:13:9f:2d:b8:13:eb:
26:2b:95:13:72:b6:17:34:d6:6c:4d:ca:08:66:93:37:c7:08:
7d:98:06:e7:98:5b:6a:1e:cc:dc:86:16:e0:45:9a:57:5b:31:
d2:eb:dd:e5:90:8a:9f:f9:35:1a:10:1d:21:2c:05:e4:cd:73:
d2:d3:ed:cf:b5:59:87:3c:8f:15:05:eb:72:46:90:7e:c6:10:
2e:0c:db:e9:c9:11:6f:bf:ef:68:b6:e8:41:1b:75:6b:81:72:
db:c4:e5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 10 09:04:48 2024 by rpki-client on console-fra.rpki-client.org