Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/BB9F5C5EDEAC11EEBD451B10C4F9AE02.roa
File: BB9F5C5EDEAC11EEBD451B10C4F9AE02.roa (raw, json)
Hash identifier: NztI54t37+HyUC/qCcaAVbAR27NJF+V97ue948IGV1E=
Subject key identifier: 18:22:3C:D4:89:8C:80:97:39:54:79:D3:3F:69:D4:29:DB:74:38:16
Certificate issuer: /CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199
Certificate serial: BA
Authority key identifier: F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/BB9F5C5EDEAC11EEBD451B10C4F9AE02.roa
Signing time: Mon 18 Mar 2024 07:27:38 +0000
ROA not before: Mon 18 Mar 2024 07:27:38 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 49217
IP address blocks: 103.197.86.0/24 maxlen: 24
103.197.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 02:22:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199
Validity
Not Before: Mar 18 07:27:38 2024 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=65f7ecea-5955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4e:df:c9:e8:15:4b:bc:55:e9:9a:18:f0:d2:
2a:8c:01:51:a4:79:2c:b0:02:b5:63:21:e3:15:12:
70:e5:fc:db:b9:f0:35:63:d7:42:ce:6c:26:6a:3d:
f9:b0:31:07:21:f8:ec:76:b7:e9:3f:3d:3c:52:9d:
9d:c1:1a:ed:3a:46:ac:f6:9c:38:30:68:09:20:f4:
05:44:b6:10:12:ef:e5:6a:dd:16:f8:b5:78:30:b7:
bb:08:72:56:64:47:a1:b1:75:c4:8e:c8:6a:f6:49:
17:c2:45:81:33:41:f8:e4:82:54:da:80:73:4b:4c:
e6:e3:36:43:7e:bb:0b:0e:ef:47:88:ab:34:f4:52:
3d:a8:41:21:d6:2c:91:04:95:07:b9:01:b1:e3:f2:
a3:91:3a:95:e4:7b:33:4d:3f:eb:aa:72:3d:7d:ad:
14:c0:f3:67:10:1a:0b:4f:05:db:e0:22:ab:80:74:
6e:4c:af:fc:a1:a3:e4:88:9a:10:24:87:18:ea:6b:
01:2e:30:dd:64:68:c1:3f:16:b8:32:0e:ca:40:c5:
e3:cc:9f:5f:45:f9:e0:9a:a1:4b:5c:57:3b:59:23:
99:7e:6d:19:70:cb:99:3f:5f:8c:8d:22:52:42:77:
ba:7f:de:bb:ea:a5:38:e8:c5:d1:04:e1:a8:e6:00:
72:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:22:3C:D4:89:8C:80:97:39:54:79:D3:3F:69:D4:29:DB:74:38:16
X509v3 Authority Key Identifier:
keyid:F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/BB9F5C5EDEAC11EEBD451B10C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.197.86.0/23
Signature Algorithm: sha256WithRSAEncryption
08:fc:3c:93:01:41:a6:ca:91:3b:93:4c:c8:d0:7a:5c:4e:78:
ee:9b:bd:a0:84:f9:5e:10:63:b9:b0:34:0d:63:fc:99:c6:1a:
64:36:ce:97:4c:52:0f:0f:c6:42:5c:f4:1b:c3:bf:48:14:2e:
85:5e:6e:db:21:4e:95:8d:d8:f1:35:78:12:c9:e3:1f:be:ea:
de:12:41:00:e6:d3:43:be:e1:f9:c8:88:08:76:b3:49:cd:0f:
d5:44:eb:a5:c9:e2:b3:ee:f9:8c:d9:a1:df:3e:52:a8:80:ce:
66:8c:2a:ae:85:90:a5:07:a0:12:26:43:39:0b:44:5d:7a:c7:
bd:58:40:0b:ec:db:5c:32:6a:5d:3f:d2:31:24:8a:8e:f9:e7:
ca:98:f0:be:a6:f8:43:5a:e9:b2:6f:d1:02:9d:ea:aa:2b:ed:
4d:c1:2e:29:8a:c8:3b:c2:60:35:02:26:6b:fc:8b:4d:bf:64:
47:05:be:50:fa:20:97:83:5b:7a:35:cc:0e:aa:9e:32:c0:fb:
53:86:d9:e5:3a:80:7f:d3:57:22:d0:0c:db:fe:06:19:23:fc:
92:5b:17:3b:48:71:41:25:12:a4:da:4a:57:1a:70:85:b9:f2:
9a:79:16:da:57:47:1f:0d:e8:a5:82:fb:5e:51:3d:b6:50:b4:
3c:93:31:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 21 06:38:16 2024 by rpki-client on console-fra.rpki-client.org