Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/E396EAA40ABF11EE98BEAB54C4F9AE02.roa
File: E396EAA40ABF11EE98BEAB54C4F9AE02.roa (raw, json)
Hash identifier: oBsjtYzZrkT1Tjpe077cB6t78WDrgTAlszfGALXWdsQ=
Subject key identifier: 25:95:D8:5A:14:0A:F1:07:1C:C6:8C:BF:A1:AA:04:A4:78:6D:83:8B
Certificate issuer: /CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9
Certificate serial: 04D7
Authority key identifier: B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/E396EAA40ABF11EE98BEAB54C4F9AE02.roa
Signing time: Fri 14 Jun 2024 12:00:22 +0000
ROA not before: Fri 14 Jun 2024 12:00:21 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 141681
IP address blocks: 103.161.242.0/24 maxlen: 24
103.170.17.0/24 maxlen: 24
2400:bde0::/32 maxlen: 32
2400:bde0::/48 maxlen: 48
2400:bde0:0:1::/64 maxlen: 64
2400:bde0:1::/48 maxlen: 48
2400:bde0:2::/48 maxlen: 48
2400:bde0:100::/46 maxlen: 46
2400:bde0:100::/48 maxlen: 48
2400:bde0:3000::/46 maxlen: 46
2400:bde0:3000::/48 maxlen: 48
2400:bde0:4000::/36 maxlen: 36
2400:bde0:4000::/46 maxlen: 46
2400:bde0:6000::/36 maxlen: 36
2400:bde0:6000::/46 maxlen: 46
Validation: Failed, certificate revoked on Mon 17 Jun 2024 06:15:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1239 (0x4d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9
Validity
Not Before: Jun 14 12:00:21 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=666c30d5-302e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2d:91:54:49:03:56:e0:80:2f:8d:aa:8c:f3:
c8:a3:86:a6:93:49:65:39:f0:73:9c:46:60:bb:a0:
f2:87:34:89:2e:a2:0f:9f:14:51:d7:b3:93:f6:dc:
30:48:b0:21:d9:4a:b7:0b:0d:cf:e1:8f:66:f3:48:
15:09:9b:fd:fc:2b:fe:a2:b0:ce:b6:f1:cd:6d:16:
06:f0:f7:8b:85:a5:26:7d:11:ba:39:37:73:3e:b9:
79:70:a7:02:f4:d0:a1:53:ff:a2:a7:41:1a:cb:ef:
68:ec:96:91:12:8b:c0:1d:03:cc:43:05:b7:d5:69:
dd:72:f0:99:0f:c9:a9:34:9d:8c:ca:8e:5f:e5:69:
de:6d:8f:87:99:84:8c:4f:c1:75:15:56:6e:61:3b:
1e:5f:5b:91:93:e5:60:dd:d6:3b:00:e8:d1:a6:a9:
26:9e:fe:b8:1c:41:97:0a:3f:de:46:59:c9:3d:a1:
5f:2e:6d:14:82:59:46:72:de:66:a2:0e:8a:41:99:
94:d9:24:64:ef:da:f2:e1:48:25:7a:64:45:a0:85:
d4:3a:65:bd:da:c8:2f:7c:9b:2f:b3:17:e7:d4:93:
6b:b8:7f:2e:f7:5e:3d:ad:a4:36:ec:ba:ea:4f:da:
d0:42:4a:4c:24:18:5b:b0:b9:77:d2:cc:4d:be:85:
55:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:95:D8:5A:14:0A:F1:07:1C:C6:8C:BF:A1:AA:04:A4:78:6D:83:8B
X509v3 Authority Key Identifier:
keyid:B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/E396EAA40ABF11EE98BEAB54C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.242.0/24
103.170.17.0/24
IPv6:
2400:bde0::/32
Signature Algorithm: sha256WithRSAEncryption
34:85:3b:d0:87:1a:a4:fd:bf:66:76:c6:21:13:03:fb:26:b3:
a5:e5:fe:38:ef:03:45:f2:43:51:ee:d2:14:79:1c:cc:e8:a4:
c7:f7:cf:99:60:a1:e7:4e:d7:41:af:26:9d:9d:29:88:38:14:
41:f4:ed:28:89:f4:43:1e:f1:99:88:d8:af:5a:de:cd:6d:38:
a0:22:c0:3f:86:e1:35:7a:d4:f3:0f:4b:22:3b:64:7c:db:f2:
48:4f:23:89:f2:13:16:a5:72:40:ba:0d:1f:30:b9:d4:9a:29:
38:5b:ec:1b:26:fa:29:3a:20:f3:c7:a7:18:56:16:d9:2b:03:
c7:ed:6d:be:41:06:fe:e0:ab:7f:3a:f1:33:8a:7f:be:40:e5:
d0:ae:5a:9a:38:9d:31:67:70:0d:f1:18:c5:90:58:dc:56:02:
1d:6f:c7:0b:db:d0:80:a6:6d:00:8e:83:79:61:7e:af:68:c5:
39:53:0c:b6:61:1f:88:d0:15:d6:1f:94:74:91:1e:e3:35:4e:
e7:3f:ce:06:d1:7b:7f:a0:65:cf:32:d6:21:c4:92:e0:e3:ba:
0d:19:cd:46:f5:2d:8c:e2:2f:37:6a:2e:9e:f4:cc:98:ba:a2:
92:20:09:fd:ec:74:d4:e4:39:30:58:40:76:a5:55:39:28:c6:
06:2d:b2:c3
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEJGMDQxMTAvBgNVBAUTKEIwMUU3QzFFREUxMDIyNTFFRTYwNzQxRTJFMTlGMDYw
MzAzRDcxQzkwHhcNMjQwNjE0MTIwMDIxWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjZjMzBkNS0zMDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoC2RVEkDVuCAL42qjPPIo4amk0llOfBznEZgu6DyhzSJLqIPnxRR17OT9tww
SLAh2Uq3Cw3P4Y9m80gVCZv9/Cv+orDOtvHNbRYG8PeLhaUmfRG6OTdzPrl5cKcC
9NChU/+ip0Eay+9o7JaREovAHQPMQwW31WndcvCZD8mpNJ2Myo5f5WnebY+HmYSM
T8F1FVZuYTseX1uRk+Vg3dY7AOjRpqkmnv64HEGXCj/eRlnJPaFfLm0UgllGct5m
og6KQZmU2SRk79ry4UglemRFoIXUOmW92sgvfJsvsxfn1JNruH8u9149raQ27Lrq
T9rQQkpMJBhbsLl30sxNvoVVHwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFCWV2FoU
CvEHHMaMv6GqBKR4bYOLMB8GA1UdIwQYMBaAFLAefB7eECJR7mB0Hi4Z8GAwPXHJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkYwNC9EQTUzOEE1NkVB
MjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUlsSHVZSFFlTGhud1lEQTlj
Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NCNThIdDRRSWxIdVlIUWVMaG53WURBOWNjay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEJGMDQvREE1MzhBNTZFQTI4MTFFQjlBRTYwQjc0QzRGOUFFMDIvRTM5NkVBQTQw
QUJGMTFFRTk4QkVBQjU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBABnofIDBABnqhEwDQQCAAIwBwMFACQAveAwDQYJKoZIhvcN
AQELBQADggEBADSFO9CHGqT9v2Z2xiETA/sms6Xl/jjvA0XyQ1Hu0hR5HMzopMf3
z5lgoedO10GvJp2dKYg4FEH07SiJ9EMe8ZmI2K9a3s1tOKAiwD+G4TV61PMPSyI7
ZHzb8khPI4nyExalckC6DR8wudSaKThb7Bsm+ik6IPPHpxhWFtkrA8ftbb5BBv7g
q3868TOKf75A5dCuWpo4nTFncA3xGMWQWNxWAh1vxwvb0ICmbQCOg3lhfq9oxTlT
DLZhH4jQFdYflHSRHuM1Tuc/zgbRe3+gZc8y1iHEkuDjug0ZzUb1LYziLzdqLp70
zJi6opIgCf3sdNTkOTBYQHalVTkoxgYtssM=
-----END CERTIFICATE-----
Generated at Mon Jun 17 09:01:58 2024 by rpki-client on console-fra.rpki-client.org