Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/EDD80C7EB6D011EE9DA6D784C4F9AE02.roa
File: EDD80C7EB6D011EE9DA6D784C4F9AE02.roa (raw, json)
Hash identifier: JphVCDg/iZYkkLLNuNydCg38xIsvt3ZqZ0qZQ4omzEA=
Subject key identifier: 13:93:D0:DE:6A:01:2C:7F:CA:A5:83:16:07:FA:E1:2B:82:47:38:50
Certificate issuer: /CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199
Certificate serial: 8D
Authority key identifier: F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/EDD80C7EB6D011EE9DA6D784C4F9AE02.roa
Signing time: Fri 19 Jan 2024 13:44:56 +0000
ROA not before: Fri 19 Jan 2024 13:44:56 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 40676
IP address blocks: 103.197.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 02:57:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199
Validity
Not Before: Jan 19 13:44:56 2024 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=65aa7cd7-58f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6c:e1:4e:dc:19:8a:a5:55:1d:9d:ac:0a:f5:
f9:14:6e:df:07:b7:2a:8d:2f:a5:db:91:65:ae:f5:
6f:41:88:14:44:31:6f:9b:cf:16:c0:b9:35:ff:7e:
86:ac:5d:48:96:0b:79:2c:ec:ba:25:72:66:e6:c5:
77:06:08:76:4a:3a:85:5b:d3:e5:a2:37:ab:56:bf:
a1:24:7a:64:2c:8e:18:73:56:ba:20:1c:5d:f9:d9:
b8:c4:81:40:ec:71:cd:02:fb:d3:08:af:01:00:9e:
83:52:fc:e2:af:f6:9d:03:cb:6a:ea:ba:ec:39:ee:
73:64:96:31:19:35:de:c6:7b:40:1d:4c:bf:7a:25:
63:fa:10:47:58:52:42:d5:cf:07:90:89:1e:7e:d6:
5b:cc:51:c7:e7:ee:fa:dd:3d:2e:c4:be:2a:b8:97:
14:0d:3b:1f:eb:71:58:75:a4:de:b5:6f:25:20:c5:
e3:56:0b:83:f5:47:a8:16:fe:26:5d:40:dc:27:13:
54:18:d9:fa:6d:20:ca:72:17:19:6e:05:80:cb:da:
e3:63:c7:45:c0:e3:5a:03:51:40:55:06:69:98:5a:
56:d6:ea:fd:1c:7b:c0:eb:f7:87:c1:c8:02:73:29:
50:5c:db:b7:fc:c5:ba:54:af:f5:de:fb:b9:91:61:
f9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:93:D0:DE:6A:01:2C:7F:CA:A5:83:16:07:FA:E1:2B:82:47:38:50
X509v3 Authority Key Identifier:
keyid:F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/EDD80C7EB6D011EE9DA6D784C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.197.85.0/24
Signature Algorithm: sha256WithRSAEncryption
55:09:aa:63:48:40:8a:57:d3:0a:67:8a:d2:85:09:59:ec:4b:
32:8f:79:2c:54:b3:a7:d8:90:39:8b:d8:b5:95:91:3c:e2:f1:
a1:61:32:c6:30:36:c3:f3:7d:06:ee:70:81:cc:40:56:2f:72:
f1:d5:a3:0b:a1:cd:b4:a9:a0:56:0e:c5:49:f3:b5:ec:ce:f5:
3e:15:1f:41:9e:38:c0:4a:b1:03:0e:12:ee:7e:a0:2a:4d:be:
aa:a4:25:f8:83:2b:e4:3d:a3:58:19:8e:4a:24:8a:51:54:8c:
06:07:4a:c3:69:8c:37:d7:90:27:fc:ef:e8:48:b8:6a:f8:5d:
2e:70:9f:1a:36:97:d2:82:b6:cf:6b:ff:9d:b0:71:79:e2:27:
f2:9e:1f:60:b5:09:5d:8e:fb:d7:8e:d3:09:c4:9c:14:2a:12:
16:03:db:49:1a:5e:22:eb:34:1e:13:60:21:38:a2:41:b9:98:
64:2a:f1:20:73:40:63:cb:cd:74:1a:d7:d2:e0:bb:a5:13:35:
42:83:df:1c:64:ae:e9:1b:75:e8:9a:9e:87:e0:9b:5c:8e:3e:
c7:c4:81:21:f8:8f:dd:84:79:42:d7:56:54:86:af:90:5d:5d:
0a:c3:b6:6e:92:53:b2:a2:df:7c:bc:1a:c8:14:10:3a:5c:40:
c5:98:f2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-ams.rpki-client.org