Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/E4E3EAE2072811EDBA8A9D59C4F9AE02.roa
File: E4E3EAE2072811EDBA8A9D59C4F9AE02.roa (raw, json)
Hash identifier: LLNeZrW3CBCVXy28BfWv8VsAowPVfQUoEN7dlZ1GLmI=
Subject key identifier: A0:9F:4B:FB:CB:90:BE:59:1B:3F:0D:BD:B9:03:C0:58:34:F0:69:22
Certificate issuer: /CN=A91427AF/serialNumber=D80FA9FA841255D5BDA72E52EC04FDFED7FE2D5B
Certificate serial: 1344
Authority key identifier: D8:0F:A9:FA:84:12:55:D5:BD:A7:2E:52:EC:04:FD:FE:D7:FE:2D:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/E4E3EAE2072811EDBA8A9D59C4F9AE02.roa
Signing time: Tue 06 Jun 2023 18:27:07 +0000
ROA not before: Tue 06 Jun 2023 18:27:07 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 140096
IP address blocks: 103.116.72.0/23 maxlen: 24
103.116.74.0/24 maxlen: 24
2402:f740:2000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 23 Oct 2023 06:04:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4932 (0x1344)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91427AF/serialNumber=D80FA9FA841255D5BDA72E52EC04FDFED7FE2D5B
Validity
Not Before: Jun 6 18:27:07 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=647f7a7a-8ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:21:85:2d:00:3f:0e:b7:8d:3c:39:87:83:
42:6b:62:10:15:b5:4b:09:43:d3:c0:b0:46:ec:d5:
0a:9a:87:53:63:b0:e6:52:e6:c0:7c:cb:cd:d8:f6:
bd:f9:ae:ec:b4:cd:75:ed:7d:33:40:12:8a:16:37:
46:22:b6:25:95:ee:81:ff:1d:e1:37:f6:61:2b:bc:
bc:47:8b:d5:2d:1b:ca:45:04:17:5b:68:80:5e:63:
06:05:3f:0f:fb:86:b5:bb:fd:9e:68:aa:13:8b:bb:
87:4f:62:20:62:e6:e3:ae:e9:25:d5:7d:b8:69:42:
a9:4f:75:7f:4c:44:c2:62:36:98:e5:79:6b:27:ef:
28:02:8a:61:d3:f7:bd:b2:b0:34:dc:88:97:af:2a:
0b:3a:5b:a1:42:0e:8e:6c:3f:90:28:b7:3d:d2:e4:
5c:58:b8:61:fb:24:09:b7:3c:57:e2:83:1b:18:3d:
92:b5:82:da:a7:81:a9:20:ca:b6:23:d1:81:cd:ab:
20:20:e9:f9:52:9a:e7:e1:b3:48:2e:9b:12:58:fe:
bd:9d:51:27:e1:f4:81:f4:15:4e:2b:e9:fb:7d:2a:
0a:db:3c:85:ff:5b:a3:25:75:cd:00:be:a6:e9:1a:
40:1e:22:85:e7:80:9b:06:8b:d4:b1:79:56:10:ee:
4a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9F:4B:FB:CB:90:BE:59:1B:3F:0D:BD:B9:03:C0:58:34:F0:69:22
X509v3 Authority Key Identifier:
keyid:D8:0F:A9:FA:84:12:55:D5:BD:A7:2E:52:EC:04:FD:FE:D7:FE:2D:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/E4E3EAE2072811EDBA8A9D59C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.72.0-103.116.74.255
IPv6:
2402:f740:2000::/36
Signature Algorithm: sha256WithRSAEncryption
a4:fe:90:eb:11:c0:0e:fe:4d:59:c3:c2:e3:87:a6:67:ff:0d:
81:37:61:c5:6a:de:71:bc:d1:40:2b:a6:96:e9:db:fd:47:35:
ae:47:33:7b:5f:74:c2:26:ea:10:e5:e4:92:98:6d:e6:ed:15:
dd:79:a8:b0:57:b7:ce:b5:d9:08:95:7a:b6:a6:83:8e:69:f8:
0e:e2:59:3b:52:4f:8d:f4:91:d3:ca:e7:00:a2:24:f2:d0:34:
c5:94:24:02:6e:7e:d5:c6:4e:9c:33:a0:ff:9a:46:79:c7:ba:
49:9c:d3:38:4e:98:94:f3:ef:37:92:2e:d2:10:44:b6:64:59:
5b:99:0e:30:11:28:f4:55:c3:4d:a6:0f:3a:f0:07:a1:13:5e:
4d:99:c3:1f:17:cb:25:3c:98:be:4f:2d:1c:d1:f9:10:26:ba:
ed:6e:ce:b8:c3:29:f3:74:c9:a2:98:91:3b:25:e4:e7:e3:aa:
76:19:7b:a1:24:c0:e5:ef:b1:e2:b7:a4:53:8e:2b:60:3d:91:
4c:4f:94:d9:9b:38:f2:21:dc:25:6b:d4:1d:02:18:90:ca:7a:
9b:78:7d:50:ca:fd:c3:96:bc:a5:f9:b1:80:fb:d8:da:64:c9:
36:ae:22:8f:e9:6f:6d:2f:c0:a6:6b:fc:33:20:82:b2:39:f5:
62:82:82:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:04 2024 by rpki-client on console-fra.rpki-client.org