Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/EE80F2BC899E11EE807C0012C4F9AE02.roa
File: EE80F2BC899E11EE807C0012C4F9AE02.roa (raw, json)
Hash identifier: 5G/bkukoMeQg6UBLz+3bn+uPrfc7Qrdc6O01xPVkQfQ=
Subject key identifier: C2:F0:62:08:81:2D:89:53:0D:47:58:AA:97:F6:59:18:D9:D6:2D:09
Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial: DE
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/EE80F2BC899E11EE807C0012C4F9AE02.roa
Signing time: Thu 23 Nov 2023 01:23:39 +0000
ROA not before: Thu 23 Nov 2023 01:23:39 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 393506
IP address blocks: 103.230.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 08:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Validity
Not Before: Nov 23 01:23:39 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=655ea99b-a143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b1:05:0f:79:c2:a4:24:ac:70:8b:11:c0:ac:
60:33:73:12:d7:05:38:6b:d0:5c:f0:4b:c5:1c:59:
c8:1d:08:65:d5:66:89:b3:9a:19:5d:8d:ed:82:82:
65:d2:aa:e6:6b:de:c1:d0:d0:a6:8f:97:33:54:56:
37:e9:68:a2:0c:1d:83:bb:b5:aa:88:84:86:0e:4c:
f7:06:17:1a:f7:35:7f:2b:e7:fd:3d:41:56:2d:22:
f6:eb:47:d1:c3:e8:ba:f5:3d:27:30:64:3a:25:f8:
7a:93:fa:f8:be:01:83:65:f4:f6:e2:aa:68:b6:36:
e1:7d:60:37:7b:85:98:c7:c1:94:26:cb:32:a3:cc:
62:c6:c3:17:2e:16:f6:af:b6:94:dd:5a:1d:69:cf:
db:21:a5:c8:65:75:04:b2:9a:f7:1a:1a:38:c5:3e:
3f:03:e1:1d:78:90:ae:ba:03:9c:2c:31:85:75:ad:
6a:d4:b3:34:f4:1c:25:55:b5:9a:0a:b8:51:98:85:
2e:12:00:09:05:b6:55:52:62:1c:5b:dc:9d:c8:64:
6b:e6:4f:43:20:a5:31:9f:46:53:af:37:57:f0:05:
f8:b2:66:c4:d2:f4:bd:fc:a2:0c:24:d4:98:c6:90:
28:1d:2e:a6:3c:1f:44:6f:56:a6:fa:54:52:df:55:
a1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F0:62:08:81:2D:89:53:0D:47:58:AA:97:F6:59:18:D9:D6:2D:09
X509v3 Authority Key Identifier:
keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/EE80F2BC899E11EE807C0012C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.10.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:b7:6b:bd:0e:10:15:ee:05:52:0e:c1:12:0d:39:49:df:ba:
f7:f9:c5:d5:dd:58:f8:72:84:fc:15:b0:a4:1b:1b:2f:b8:d6:
ef:a5:5d:2d:5b:de:b9:2f:c3:e8:2b:71:47:0d:78:7a:d0:bc:
d2:d5:f0:75:9b:85:3a:06:9d:61:84:64:1f:62:5f:4a:3d:a9:
66:d9:7a:37:35:a8:45:58:eb:87:0b:f5:c7:54:94:31:2b:2c:
f4:d2:0a:72:3d:ee:91:3d:78:8f:38:51:c8:0b:77:02:6d:3b:
40:fa:59:a4:fc:03:a5:22:fd:57:43:75:7f:82:cb:a8:34:84:
64:99:f2:c4:53:33:5a:3d:9f:43:5b:2c:ed:cb:b5:57:ce:21:
da:e9:a9:af:49:3a:6e:62:d4:27:1b:e3:58:fd:43:f1:fd:ff:
bd:54:08:4e:ab:ab:ed:1e:d9:f7:42:7c:25:09:de:e1:1e:f5:
5c:84:39:71:82:c3:5b:4e:c5:cc:30:cf:c6:d3:83:60:5e:a0:
a1:50:2a:e8:91:a6:56:c5:a0:5f:9e:66:92:5f:a5:39:50:c1:
1e:c1:72:b6:04:45:60:a7:6e:cd:63:c0:e7:cc:31:12:87:9a:
41:5b:bd:26:e6:cd:fb:be:95:ac:5a:f7:bb:30:59:d7:c3:9b:
0b:49:ee:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 11:01:11 2024 by rpki-client on console-ams.rpki-client.org