Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/A38EFACAED3B11ECABFC542BC4F9AE02.roa
File: A38EFACAED3B11ECABFC542BC4F9AE02.roa (raw, json)
Hash identifier: FwPXmSgjESoZYZBnj53VY/pjGJaRRDQYH97uIODj/YI=
Subject key identifier: D6:2F:E0:0A:AA:CE:CE:5F:D8:0C:41:40:4F:C0:C0:6B:7D:C9:51:62
Certificate issuer: /CN=A91422D7/serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8
Certificate serial: 01A8
Authority key identifier: 59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/A38EFACAED3B11ECABFC542BC4F9AE02.roa
Signing time: Fri 03 Nov 2023 03:54:35 +0000
ROA not before: Fri 03 Nov 2023 03:54:35 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 132686
IP address blocks: 103.73.236.0/22 maxlen: 22
103.73.236.0/24 maxlen: 24
103.73.237.0/24 maxlen: 24
103.73.238.0/24 maxlen: 24
103.73.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 05:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424 (0x1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91422D7/serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8
Validity
Not Before: Nov 3 03:54:35 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=65446efa-2eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:29:0f:13:cd:f9:b6:cc:0f:38:56:b0:d0:
36:18:26:43:e6:c6:b6:cd:64:10:6c:31:ab:21:cf:
dc:68:42:60:77:5a:05:fe:a1:7e:11:35:87:bf:d7:
78:16:e5:81:c5:a3:17:ed:7b:80:c8:ee:d5:dc:e8:
21:f9:a8:7f:f2:32:64:fd:12:9c:d1:fc:f5:21:6a:
dd:db:96:a2:47:c4:16:72:54:b0:f9:70:66:cf:41:
c9:90:d8:36:7e:5c:3b:1d:71:d3:97:09:f0:62:8a:
53:10:d2:6f:cb:65:2e:29:37:9a:2c:46:72:bd:ca:
41:3c:74:84:19:fd:16:5e:8e:a0:a7:79:3b:be:7a:
8b:31:08:3c:46:08:82:bf:f0:06:94:36:c0:6c:58:
90:5a:5a:16:64:c7:59:76:91:56:65:03:3b:0b:79:
c6:04:38:69:51:74:d1:14:85:d4:5b:4d:42:d0:e2:
6a:84:92:1a:7b:bc:9f:3e:47:82:eb:e8:48:b2:48:
b4:79:87:3d:6d:94:01:ae:b6:dc:31:a1:f3:0b:17:
4a:4b:50:73:4c:0b:ee:58:1f:56:23:db:a0:99:b4:
e5:63:db:3e:91:e8:b9:99:22:5a:f5:eb:a3:53:91:
f1:39:e1:84:9a:ff:8b:df:7b:12:69:bc:66:17:18:
b5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2F:E0:0A:AA:CE:CE:5F:D8:0C:41:40:4F:C0:C0:6B:7D:C9:51:62
X509v3 Authority Key Identifier:
keyid:59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/A38EFACAED3B11ECABFC542BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.236.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:b0:ba:49:13:f5:d4:5e:ca:bd:73:ca:74:b8:ac:21:dc:3a:
44:f6:0b:5c:ca:83:36:da:2f:40:eb:ea:05:a1:d8:6e:90:a2:
1e:2d:ce:c8:c4:5e:25:e7:8c:f0:6c:3a:da:b2:f0:2f:ba:20:
b9:12:be:e8:98:18:4b:2c:f3:fe:8f:73:f0:cd:53:df:50:68:
c1:49:90:c8:c7:47:30:b2:84:19:f8:b9:4a:83:07:ef:26:71:
67:a8:1a:82:27:7b:92:5c:fa:c0:05:58:e4:86:20:22:f7:c9:
2a:a9:58:bb:3b:be:5a:7f:55:68:9d:9a:a2:26:d1:21:ac:e5:
85:05:36:a3:d1:0f:bf:5a:09:df:12:ad:14:d2:db:9e:e4:5c:
c8:cc:44:f0:55:cd:49:b5:36:28:67:93:4a:14:44:59:79:0c:
ec:e3:e9:7b:f9:44:8e:b4:78:1e:35:d7:f9:be:8d:08:23:b2:
f6:c7:2f:df:5d:49:3a:8a:8c:f8:38:67:b9:49:72:5b:33:bb:
9f:6d:26:42:1e:8c:9d:5d:14:1f:8b:c4:16:90:5f:e9:53:55:
37:a2:d3:3e:b1:e5:79:e3:9e:50:5d:72:a4:ab:5a:00:04:08:
ca:8d:11:ef:49:cd:8d:ce:e0:06:d9:2f:08:0f:a8:63:2f:c7:
5f:c5:3d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 06:50:05 2024 by rpki-client on console-fra.rpki-client.org