Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/F44AD732343711EAB184600DC4F9AE02.roa
File: F44AD732343711EAB184600DC4F9AE02.roa (raw, json)
Hash identifier: uhctRei2lb+K2caPAHra8Ll/rfAPVck66RDgIMLP48E=
Subject key identifier: 27:2A:7C:1B:16:DD:2E:AC:2B:37:59:4D:16:FC:C2:82:1F:98:CE:34
Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92
Certificate serial: 1345
Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/F44AD732343711EAB184600DC4F9AE02.roa
Signing time: Thu 06 Jul 2023 17:14:20 +0000
ROA not before: Thu 06 Jul 2023 17:14:20 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 137862
IP address blocks: 103.115.240.0/24 maxlen: 24
103.115.241.0/24 maxlen: 24
103.115.242.0/24 maxlen: 24
103.115.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jul 2023 09:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4933 (0x1345)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92
Validity
Not Before: Jul 6 17:14:20 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64a6f66c-f427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:b8:90:2e:03:3d:a1:3f:73:5d:6f:38:60:
d6:9a:a2:13:19:23:5b:57:04:38:6d:2e:b9:fb:3c:
93:bf:9c:fc:98:b5:45:b9:6d:49:01:87:34:e7:42:
5f:2a:14:be:c1:67:49:ca:3b:f5:bd:e7:0c:74:bf:
fc:b4:b7:05:41:45:8e:bb:39:b5:5d:be:dd:cb:4e:
96:37:a5:9d:b6:3e:ab:57:21:3f:6d:3f:4e:08:25:
98:cd:76:7c:54:62:fa:aa:ee:07:35:98:44:36:52:
e7:6c:95:9c:68:f7:6c:90:55:9f:ea:de:3c:e1:e3:
9a:86:8d:2a:4e:09:db:93:3d:b9:42:85:5c:f6:2c:
3d:f1:0b:31:5b:10:b5:40:8d:04:0c:e4:3e:07:0c:
2b:d9:be:1e:92:64:b4:b2:42:8b:8a:33:17:ec:d7:
ac:9c:4a:64:05:77:6f:50:45:68:e5:13:43:a0:ac:
96:c1:88:f0:16:81:05:fb:81:39:45:8a:6f:a0:dd:
16:37:2a:8b:4d:3c:4f:17:57:97:e7:3f:d3:03:6a:
4b:3a:65:38:0b:b6:8e:4b:6d:ec:98:0d:77:28:57:
48:e6:73:20:5f:9c:d4:1c:d5:70:c0:2a:e9:65:8d:
b1:43:3e:8a:14:f8:5b:93:5f:2e:e7:0c:ce:9d:cf:
cc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2A:7C:1B:16:DD:2E:AC:2B:37:59:4D:16:FC:C2:82:1F:98:CE:34
X509v3 Authority Key Identifier:
keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/F44AD732343711EAB184600DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.240.0/22
Signature Algorithm: sha256WithRSAEncryption
98:53:d9:d3:5d:77:84:d8:d1:2c:08:40:30:5f:2d:bf:6d:be:
0f:ee:c8:f2:df:76:a3:8c:20:a2:9f:b6:2f:e4:54:68:16:83:
10:33:7b:3e:0b:42:55:58:7f:6e:67:c6:82:ff:8b:00:61:3f:
71:3b:0c:17:f0:43:b2:50:eb:d1:66:76:f5:c3:9b:7a:23:6c:
77:31:96:ce:56:41:07:8c:bf:20:a4:37:ed:0e:04:44:82:11:
8b:d1:f0:a8:b0:03:64:0d:bd:00:c2:32:10:58:54:c1:4b:c2:
01:54:a1:6e:c7:51:38:b8:32:04:8a:4c:41:90:0e:cd:72:52:
e1:59:f4:28:a3:9f:75:48:db:94:bc:4f:a8:ec:db:f8:5a:29:
bc:1d:3d:1d:da:ba:88:19:a7:f5:0a:5c:2d:c3:5c:8e:cd:68:
5d:b5:de:79:29:83:48:ef:b0:31:0d:78:83:65:fb:06:a9:5a:
81:c8:ab:24:5f:db:9a:10:c0:1d:ee:b1:ea:c0:d0:11:37:56:
33:8a:ba:24:e5:a3:64:31:8d:ad:c1:f9:4c:42:bb:08:c1:7e:
2d:d9:1e:30:38:ff:ba:8a:86:67:3e:cb:65:f3:0a:2f:ba:a4:
f4:15:df:0b:7f:e9:fc:2a:3f:65:28:64:ab:1b:1d:60:1f:4a:
46:fe:23:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-ams.rpki-client.org