Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/0B6ECA9EBA8111EEB1E4A670C4F9AE02.roa
File: 0B6ECA9EBA8111EEB1E4A670C4F9AE02.roa (raw, json)
Hash identifier: V2bo9q/6zy4nMFVoLHLj3MbULxmsPIjGQhwTVjtwOOU=
Subject key identifier: 08:2B:31:80:28:7A:61:F4:B0:E2:F1:52:97:24:BF:97:46:64:3D:E7
Certificate issuer: /CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD
Certificate serial: 0ABF
Authority key identifier: A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/0B6ECA9EBA8111EEB1E4A670C4F9AE02.roa
Signing time: Wed 24 Jan 2024 06:23:53 +0000
ROA not before: Wed 24 Jan 2024 06:23:53 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 139325
IP address blocks: 103.141.64.0/23 maxlen: 24
2001:df0:f280::/48 maxlen: 48
2401:79e0:4000::/34 maxlen: 38
2401:79e0:8000::/34 maxlen: 38
Validation: Failed, certificate revoked on Thu 01 Feb 2024 09:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2751 (0xabf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD
Validity
Not Before: Jan 24 06:23:53 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=65b0acf9-9638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:b6:2a:86:53:f2:b4:ea:ef:42:57:89:4c:
5c:76:77:9c:5d:d5:5c:f7:79:92:b8:17:98:a2:cc:
37:59:6b:52:5e:98:99:93:ea:96:b4:ed:4a:14:08:
d0:ec:c4:41:c0:db:77:ae:05:d6:68:76:1a:58:de:
63:13:0e:b3:17:aa:07:5c:72:19:9d:c4:e3:c5:a4:
b1:fd:ec:a4:9a:c7:ac:a6:71:d2:cc:86:26:66:bd:
65:2b:12:82:79:f6:ef:60:b4:77:2c:21:60:15:d4:
43:38:cb:96:b2:86:f4:f3:44:59:06:fb:da:85:ef:
f4:0d:1b:9d:95:fd:5e:28:73:bb:d9:4c:6d:b5:35:
cf:c5:98:2f:1d:87:01:e5:82:e9:55:08:5a:52:94:
bb:0b:7a:df:56:24:fd:cd:95:ad:47:85:7f:6c:c9:
97:db:66:f2:26:25:b0:f0:93:34:42:b2:86:cf:e8:
47:dd:a6:5b:bc:ac:18:9c:d9:af:3b:dd:fb:9a:cc:
53:a5:66:2d:37:62:c0:9c:3a:58:85:7b:31:19:f8:
fd:66:8b:67:3c:5d:5a:7d:90:89:92:19:03:b5:df:
8e:87:c5:f7:6a:6d:34:35:ad:70:d2:c7:17:a7:9b:
65:d8:6a:25:72:8b:95:52:84:43:87:31:d3:57:d2:
c8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2B:31:80:28:7A:61:F4:B0:E2:F1:52:97:24:BF:97:46:64:3D:E7
X509v3 Authority Key Identifier:
keyid:A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/0B6ECA9EBA8111EEB1E4A670C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.64.0/23
IPv6:
2001:df0:f280::/48
2401:79e0:4000::-2401:79e0:bfff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8d:2a:d7:fb:36:98:28:47:44:f5:cc:7e:b1:67:59:77:cd:e9:
aa:0c:d7:8b:73:74:f6:dc:66:5d:42:55:5c:93:15:39:0a:1d:
ec:e0:c5:af:94:8a:fc:3a:7c:a3:8a:3a:42:d1:05:71:4c:c2:
12:a6:3e:d6:de:7e:f0:cd:5f:b0:c0:98:85:11:d7:5e:2c:f1:
a0:7b:0c:8f:37:af:74:31:1c:2a:67:71:8e:4d:81:61:da:a6:
c2:86:51:53:5d:08:e8:0b:88:c4:bd:b5:66:a8:88:be:a6:a0:
b5:c1:73:39:fc:b9:da:50:58:c0:2c:1c:68:c5:55:c3:a1:b4:
a3:e1:b1:d3:a7:74:b2:f8:11:da:77:7c:8e:83:18:70:3a:49:
de:bc:b6:fb:b7:4b:35:f8:d8:c5:f2:51:b4:5a:c4:e4:41:c8:
45:26:79:bb:7f:3b:36:bb:17:db:64:54:5a:ff:b3:2d:d9:07:
79:56:19:4e:2a:c8:51:8b:08:ae:55:01:58:97:b1:0e:92:84:
f1:85:e2:2f:bd:a2:8c:01:de:34:70:dd:5c:c5:f0:b5:d5:ab:
aa:89:26:45:84:bf:31:ce:ce:29:99:96:c0:90:9f:1e:76:89:
95:44:b9:ff:e3:c4:87:d2:27:78:7a:e4:e2:e9:5a:ce:08:1d:
e8:d4:81:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 13:29:02 2024 by rpki-client on console-fra.rpki-client.org