Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/881CC07081EA11EEA1D2483BC4F9AE02.roa
File: 881CC07081EA11EEA1D2483BC4F9AE02.roa (raw, json)
Hash identifier: UIoOu+W8usZepl0F3JKR9GZltG6HgGfKi+Xrwdy0wWk=
Subject key identifier: E0:E2:FC:3A:E4:F1:18:69:00:2C:26:48:32:F3:95:9A:E9:57:4B:6B
Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial: D6
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/881CC07081EA11EEA1D2483BC4F9AE02.roa
Signing time: Mon 13 Nov 2023 06:04:40 +0000
ROA not before: Mon 13 Nov 2023 06:04:40 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 397423
IP address blocks: 103.230.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 10:59:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Validity
Not Before: Nov 13 06:04:40 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=6551bc78-7cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ff:29:b1:4b:2c:ef:de:3b:b6:85:ee:c9:a9:
22:e8:99:38:9a:39:f1:c8:92:ab:e7:7e:08:0d:82:
3e:40:62:01:79:02:78:c1:94:aa:5d:27:02:86:3f:
24:37:bb:45:b9:32:45:6a:20:e5:55:20:38:52:2d:
fd:08:a3:3c:e4:ef:57:99:12:4d:69:6d:17:cf:2d:
29:8f:59:ed:6a:e7:10:74:b6:9b:c1:cb:bd:4a:5b:
83:0b:0b:de:6d:ae:83:19:e5:78:b7:51:75:7a:b0:
3e:ed:36:22:80:23:6a:5c:a5:68:0a:e1:f9:27:9d:
04:f8:89:b8:27:c7:7d:6a:6a:5b:2c:40:20:ec:55:
80:ae:e2:18:35:12:94:04:c9:8e:ba:ed:1d:b5:a3:
80:f4:2a:6d:4a:9a:41:61:20:d1:36:f2:22:b9:95:
f7:75:eb:a5:bc:e9:d8:8c:83:c5:69:4d:0c:37:f4:
41:60:d3:6a:b5:5b:d4:96:e4:5a:54:59:54:ae:70:
fb:cc:3d:54:ef:68:97:7c:53:e6:51:d8:d1:b9:de:
0e:32:ee:8e:fe:9e:95:18:65:01:8d:b0:d2:9a:3d:
13:fc:56:14:d8:b1:c0:b9:a5:e9:64:3d:13:0f:a5:
53:88:c5:dc:ff:c0:b6:9f:8c:86:9a:bc:7a:8e:ef:
c0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E2:FC:3A:E4:F1:18:69:00:2C:26:48:32:F3:95:9A:E9:57:4B:6B
X509v3 Authority Key Identifier:
keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/881CC07081EA11EEA1D2483BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.8.0/24
Signature Algorithm: sha256WithRSAEncryption
02:3c:72:3a:51:65:f5:ef:17:00:1e:ab:b1:38:73:36:4f:2f:
70:02:b9:2a:4b:38:c8:30:57:e5:d4:71:82:7d:1d:d8:2f:bb:
68:04:90:44:fe:21:37:41:a1:67:38:a5:b8:18:9c:98:44:11:
35:ab:6d:ab:0a:70:f0:3a:89:2d:98:b3:4e:54:14:ae:0f:be:
da:12:46:b0:b2:b0:dc:d9:07:b6:61:0e:5c:6a:92:51:8c:18:
2c:d3:2e:60:bf:48:fb:43:dc:3b:ce:e8:a1:55:6e:b5:dc:7a:
27:be:fd:d2:30:11:05:c3:14:c8:d9:8e:6f:54:78:77:cf:b7:
21:02:7d:dc:8f:f9:b4:17:6f:17:0e:b1:4c:48:ec:0d:3b:6d:
0b:c2:6d:ec:26:b7:32:3d:b0:9f:ba:f0:aa:59:73:54:f2:17:
72:ba:35:b8:51:e6:4e:a6:6f:36:66:d7:7d:8f:50:2f:e6:3b:
9f:cc:d6:61:df:0c:3b:89:5a:79:82:03:d9:b9:d0:64:82:37:
0f:b3:16:fd:28:4f:d5:88:bb:3d:10:ce:00:08:ba:89:ee:54:
2b:20:52:36:9c:06:93:ff:01:fa:3d:77:37:30:29:32:09:62:
2e:e0:55:26:54:46:f0:d3:2e:cc:32:b6:8d:58:64:48:f9:37:
1f:68:72:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:05 2024 by rpki-client on console-fra.rpki-client.org