Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/EE689902640411EE9439EC14C4F9AE02.roa
File: EE689902640411EE9439EC14C4F9AE02.roa (raw, json)
Hash identifier: 6HN7F/aQU4+MNeipvocfbpIjL1Z7JCcMhZt9J+91Tjg=
Subject key identifier: C7:18:6C:BC:4B:7B:86:17:C7:7A:09:6E:F8:39:57:09:FE:AB:D3:74
Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial: BC
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/EE689902640411EE9439EC14C4F9AE02.roa
Signing time: Fri 06 Oct 2023 04:58:04 +0000
ROA not before: Fri 06 Oct 2023 04:58:04 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 400377
IP address blocks: 103.230.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Nov 2023 01:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Validity
Not Before: Oct 6 04:58:04 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=651f93dc-20a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fa:89:2e:82:32:b8:17:97:e8:38:36:cc:c7:
41:d6:6c:97:f0:6c:35:3a:4b:48:fa:15:35:75:90:
b2:2c:2e:a5:c0:fa:4c:52:9d:2b:d9:99:79:2a:d3:
90:8b:bf:56:a6:1a:0e:3d:ce:a8:17:c6:e7:43:a2:
f4:cd:c6:3f:6b:f1:00:eb:9e:bc:a9:a4:33:e3:0e:
cc:fd:93:82:4a:2c:a4:79:33:66:17:29:51:78:b9:
4d:21:cc:81:3e:51:4d:4a:4b:eb:bb:a0:9d:23:12:
0a:6d:ad:b5:07:3e:51:fc:22:a2:2c:ba:47:e6:a3:
bb:f7:e5:a8:89:74:1e:5d:6f:1f:8c:6f:15:90:a1:
41:91:bb:a6:63:9c:ea:67:97:a5:6f:1d:68:11:b1:
de:13:e7:79:67:c7:fa:ad:4f:93:35:72:35:21:55:
cb:55:d7:01:a1:31:f1:bf:33:38:c1:59:03:ac:df:
c0:04:aa:ec:43:fd:fb:f2:dd:0d:d3:cf:a6:3a:d4:
fc:a3:dc:d9:ca:dd:52:6f:a2:77:a2:8e:ec:80:08:
11:d2:a1:b5:b6:1e:f1:05:99:7b:ca:b2:99:a8:29:
ec:d8:43:95:01:d5:70:70:a4:55:55:6d:f5:9f:40:
4d:e7:f3:54:20:e4:62:7c:6a:5b:66:12:73:da:dd:
2d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:18:6C:BC:4B:7B:86:17:C7:7A:09:6E:F8:39:57:09:FE:AB:D3:74
X509v3 Authority Key Identifier:
keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/EE689902640411EE9439EC14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.8.0/24
Signature Algorithm: sha256WithRSAEncryption
82:f5:e9:ca:e0:1e:71:d5:55:82:ad:52:cb:03:98:37:86:61:
e3:bd:29:8c:d9:a8:46:d4:3e:a8:96:0d:e3:a7:b7:89:1f:d0:
90:7f:f8:79:79:b1:e4:6f:f7:13:50:61:69:e1:ec:ca:85:8f:
38:a3:7d:b0:80:a1:a9:d8:b9:6a:4b:f4:65:43:e4:ef:06:ad:
02:52:60:5f:9b:b6:d0:3f:7a:1c:f9:2d:b5:fe:f4:d7:8b:91:
87:74:00:e2:de:78:ae:f1:94:ad:96:74:a2:8b:e0:17:14:4c:
1a:ac:83:86:fd:61:62:e8:1d:53:80:72:cf:da:f9:2d:78:ea:
73:4a:0e:62:c8:31:60:b1:c5:ff:3d:9d:f6:e7:ac:6a:a0:76:
a6:e3:52:f2:7c:2b:ae:7b:99:bd:7f:6a:93:7b:a5:cb:bd:9e:
68:b7:ee:03:70:c3:78:7d:08:70:67:e2:68:2b:ea:e4:c0:c3:
4b:f8:72:f0:c2:48:4e:af:80:20:24:6b:a1:07:0f:b0:74:ec:
fd:ab:18:9f:a8:f1:7a:f0:3f:85:c5:83:6d:eb:7f:02:46:c7:
4c:aa:d9:e4:91:2d:07:97:8b:a8:be:ab:7e:ad:54:ba:17:63:
f0:82:4a:84:ec:20:fa:a0:7b:57:a2:78:f7:30:af:0c:0f:74:
09:71:36:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:05 2024 by rpki-client on console-fra.rpki-client.org