Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/C9FE370ECB4D11EB8EE48035C4F9AE02.roa
File: C9FE370ECB4D11EB8EE48035C4F9AE02.roa (raw, json)
Hash identifier: TyLHpZxtrsbvNAjuHbPVOkbwAxDeJrj6EAR9jI37KvE=
Subject key identifier: 83:00:6E:F3:84:E0:9A:E2:E2:68:05:0C:B4:A5:B9:38:D1:71:A8:42
Certificate issuer: /CN=A91476F2/serialNumber=64B686B05DCBE8BEA92807532DE29A77905156F5
Certificate serial: 0462
Authority key identifier: 64:B6:86:B0:5D:CB:E8:BE:A9:28:07:53:2D:E2:9A:77:90:51:56:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLaGsF3L6L6pKAdTLeKad5BRVvU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/C9FE370ECB4D11EB8EE48035C4F9AE02.roa
Signing time: Tue 01 Aug 2023 01:01:52 +0000
ROA not before: Tue 01 Aug 2023 01:01:52 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 139640
IP address blocks: 103.66.56.0/22 maxlen: 24
103.228.168.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 May 2024 13:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1122 (0x462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91476F2/serialNumber=64B686B05DCBE8BEA92807532DE29A77905156F5
Validity
Not Before: Aug 1 01:01:52 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64c85980-6cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:41:7b:d7:4d:ab:cd:8a:5a:54:94:91:85:bc:
0c:41:16:18:b3:47:45:df:d3:d6:29:d4:18:94:33:
d9:9c:15:b0:2a:d1:d2:a1:36:75:7f:69:84:2a:72:
fd:69:c6:9a:c7:99:46:43:10:79:1a:dd:de:41:2c:
f8:59:1b:b3:56:c2:6c:c3:86:31:b6:cd:8e:7d:16:
c6:f8:91:49:8e:69:ae:5a:35:8f:c9:05:d5:81:85:
df:7d:c4:3e:84:28:70:d9:c4:8c:8d:f4:92:0e:3a:
37:6a:47:c5:51:b1:43:9f:45:0f:9c:a2:05:b8:f8:
b4:c5:60:43:22:26:22:d5:00:45:2b:a0:5f:6c:a0:
23:c5:dc:1f:8d:ae:bf:53:72:14:05:a6:5f:59:05:
e5:25:75:ae:e3:9d:ec:0a:49:bc:4a:2a:09:01:8c:
94:e4:eb:c7:0e:5b:e6:de:0b:82:a6:7f:30:99:b1:
d1:22:a3:60:ee:90:8a:43:79:33:b2:20:0a:a3:63:
ef:df:93:11:b3:33:59:63:5f:a9:7c:49:cf:58:3a:
35:49:46:c2:9c:1c:12:e6:73:e5:0e:b7:a1:2a:4e:
78:34:de:7b:80:42:bb:be:66:31:3a:44:09:95:8e:
a2:20:54:98:af:25:55:e2:a0:f2:2e:cc:93:af:5f:
d3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:00:6E:F3:84:E0:9A:E2:E2:68:05:0C:B4:A5:B9:38:D1:71:A8:42
X509v3 Authority Key Identifier:
keyid:64:B6:86:B0:5D:CB:E8:BE:A9:28:07:53:2D:E2:9A:77:90:51:56:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/ZLaGsF3L6L6pKAdTLeKad5BRVvU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLaGsF3L6L6pKAdTLeKad5BRVvU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/C9FE370ECB4D11EB8EE48035C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.66.56.0/22
103.228.168.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:b9:a2:0e:69:18:f1:b2:e8:51:90:01:7c:6c:ee:b3:c2:7c:
21:c3:9d:13:4a:16:cc:c3:7a:2e:ee:43:02:ba:c2:fc:6f:0a:
15:48:88:eb:20:38:58:34:6e:8c:00:f9:53:60:fc:9b:6e:cd:
0f:cf:4d:a1:60:c4:51:9c:19:5e:99:9f:f0:db:02:74:c1:0c:
21:95:62:05:55:30:6c:da:ee:b4:2f:43:77:84:8e:c8:11:09:
4a:81:35:6c:0e:eb:f9:a1:ba:f0:cd:ef:8e:99:67:39:04:0a:
d6:e6:4f:d7:ef:a2:f2:a4:c0:4c:cf:2a:8c:df:72:c7:c9:f8:
b0:91:90:a2:37:a3:4e:14:b0:3a:24:29:ce:8b:4d:90:d7:47:
90:04:21:d5:06:e8:2a:61:40:3b:db:ac:36:2c:8e:db:29:e3:
4e:0e:af:68:1b:a1:e3:ef:b7:10:f1:ec:d7:49:d3:7d:1a:6c:
4f:d5:16:dc:79:e4:9d:66:b1:6a:38:d2:5a:85:dd:f9:13:7c:
f0:bd:9a:31:db:b5:d3:6f:13:37:38:78:12:78:b4:47:c2:33:
28:3d:2a:f7:c2:12:b4:28:88:a4:58:f5:46:ca:b6:e0:c6:ce:
a7:64:69:e2:f9:46:05:c8:fb:bc:08:aa:0d:0f:85:98:f1:de:
11:77:bb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:04 2024 by rpki-client on console-fra.rpki-client.org