Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/B49EBD0698F111EE8EA32673C4F9AE02.roa
File: B49EBD0698F111EE8EA32673C4F9AE02.roa (raw, json)
Hash identifier: DAwVT15mccs7fl73iJsFn+M8nXPAMjkItYRwEVdONIw=
Subject key identifier: F3:8C:75:AC:53:82:41:28:91:8D:2C:94:8A:F1:6C:7D:F4:CD:9F:2D
Certificate issuer: /CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199
Certificate serial: 6F
Authority key identifier: F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/B49EBD0698F111EE8EA32673C4F9AE02.roa
Signing time: Tue 12 Dec 2023 13:23:58 +0000
ROA not before: Tue 12 Dec 2023 13:23:58 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 33983
IP address blocks: 103.197.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 04:15:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199
Validity
Not Before: Dec 12 13:23:58 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=65785eee-e459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:d8:e5:b6:fe:e2:5f:80:c0:4e:a8:2b:11:
3b:ee:cf:83:38:9a:38:b7:07:86:53:68:9c:80:07:
95:cd:59:83:13:44:6a:52:c9:6c:64:17:46:ba:c0:
3c:6e:89:94:bf:33:c9:3d:30:62:05:58:86:9e:a0:
e3:16:cc:a2:fb:ae:69:34:14:8f:0b:e3:de:42:14:
68:12:e3:e2:2b:8f:5d:9b:07:c2:91:0e:e6:67:75:
73:bc:3d:d8:5b:43:4d:04:a2:e8:3b:7d:6c:8e:00:
32:29:97:7b:1c:42:28:ce:14:db:04:0a:16:5c:20:
7c:d3:ee:42:37:13:05:38:dd:62:4d:18:2c:da:63:
f1:84:64:23:ad:6a:43:24:97:e8:81:a7:d4:4d:ba:
e2:7c:f5:74:f7:99:cd:bb:ea:40:06:32:5f:4a:e8:
15:22:ef:ea:24:45:af:07:f1:b6:6e:36:0e:b2:27:
fd:fa:48:b7:0b:43:65:62:24:1c:3b:d3:0b:55:52:
d9:15:93:41:4c:50:67:ab:e3:d9:43:98:9f:0e:e6:
11:d2:f3:ff:43:34:9f:de:3c:29:1d:fe:54:90:77:
9b:3e:4d:71:8d:46:37:e7:1e:9d:f2:1d:76:e7:2f:
96:5f:ba:96:75:9d:d6:52:8d:ce:a1:2f:c4:22:31:
b0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8C:75:AC:53:82:41:28:91:8D:2C:94:8A:F1:6C:7D:F4:CD:9F:2D
X509v3 Authority Key Identifier:
keyid:F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/B49EBD0698F111EE8EA32673C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.197.85.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e6:e4:f6:7d:df:d6:87:a7:05:6a:b1:80:99:6c:60:ec:44:
c6:9f:f5:6b:62:cc:a4:ec:04:13:dd:e1:2d:5c:3c:69:f7:27:
69:48:46:43:88:0d:3a:19:a3:54:b6:42:0c:b0:d1:1a:04:fe:
72:8d:37:b6:da:79:9d:c5:99:b6:85:56:6a:17:eb:3d:4e:4c:
44:2d:cc:60:e4:70:f4:ad:91:03:b7:34:ec:0d:6e:fc:82:4c:
93:2d:42:86:09:36:fb:58:1d:9d:66:e9:4c:ba:72:a9:4c:41:
32:59:bd:28:88:c3:63:86:af:5e:c1:eb:15:2d:bc:40:ae:a2:
29:76:ef:4f:09:69:dc:cd:d7:93:d7:6e:bd:99:b1:9e:9b:8f:
13:37:79:ab:25:ce:b9:e1:c1:9b:d8:3b:3d:b7:57:be:ad:bf:
eb:50:a6:74:04:6a:c9:71:45:43:83:ed:45:09:64:5e:2d:55:
30:20:1b:33:8c:b1:58:bb:1b:31:59:07:2f:66:90:2f:ed:77:
b8:b5:50:9b:8c:51:4a:80:43:b1:fe:c0:f3:8d:af:b1:1d:0c:
2f:48:2b:20:17:8c:84:a2:f8:96:61:bc:0d:0e:36:8a:c2:b6:
e8:c3:7b:45:6d:f3:38:f6:ec:d9:e9:b8:d8:76:3f:13:b3:dd:
78:81:c2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-ams.rpki-client.org