Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/F86919D0D10111EEB0AC962FC4F9AE02.roa
File: F86919D0D10111EEB0AC962FC4F9AE02.roa (raw, json)
Hash identifier: NMfpPXLu8yqpH6eomQ6GNbTIcI4hlOpyTztG7NVk+ug=
Subject key identifier: F3:4D:BE:32:1A:9D:BA:D5:E7:6C:84:CB:AA:E2:58:D8:3F:3B:3A:A5
Certificate issuer: /CN=A915290D/serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F
Certificate serial: 03
Authority key identifier: 6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/F86919D0D10111EEB0AC962FC4F9AE02.roa
Signing time: Wed 21 Feb 2024 21:41:29 +0000
ROA not before: Wed 21 Feb 2024 21:41:29 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 137739
IP address blocks: 103.133.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 18:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915290D/serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F
Validity
Not Before: Feb 21 21:41:29 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=65d66e09-4faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dc:69:bb:fb:27:89:b4:36:5c:5c:85:43:98:
36:9f:34:07:cd:52:eb:65:a1:14:00:41:ab:cb:ab:
c5:ae:b7:55:7f:36:5f:0f:33:c2:90:e6:d1:a0:69:
6a:cd:b9:90:4c:4e:95:7e:a2:51:bc:0a:98:68:4a:
7a:74:7d:aa:f7:f6:a9:05:58:05:a7:3e:5f:63:b9:
f4:8e:b8:2d:21:57:d1:10:c4:bf:2e:8f:5a:de:10:
ff:ff:02:05:77:d9:90:c4:4c:97:e6:ed:25:b7:c6:
b0:2b:76:1e:89:b2:98:63:40:40:5d:76:35:3c:d0:
df:d3:02:1e:cc:76:c6:c4:7f:33:c5:b9:9d:b0:be:
8d:4e:3b:8a:ca:81:40:b8:6a:fb:fc:c8:be:83:2c:
a5:31:1e:36:23:f8:89:90:92:96:ce:bb:65:9d:3d:
95:f3:21:98:6c:76:a6:ec:e1:22:95:43:11:7e:14:
14:56:f8:34:16:c3:63:dd:b3:2c:a3:e6:f2:22:d1:
ba:e8:97:67:3e:76:cc:14:19:67:74:5a:09:95:75:
0a:b4:b3:91:88:cf:96:3a:a4:68:ca:ec:11:9b:f6:
13:9c:47:68:d0:21:21:94:95:76:c8:fb:38:53:af:
8c:0a:23:55:96:f4:b6:3f:ee:4e:ef:38:80:d4:d3:
74:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4D:BE:32:1A:9D:BA:D5:E7:6C:84:CB:AA:E2:58:D8:3F:3B:3A:A5
X509v3 Authority Key Identifier:
keyid:6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/F86919D0D10111EEB0AC962FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.128.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:9c:70:de:e3:51:ef:c3:59:60:0c:3d:e5:90:c0:75:19:55:
c6:1c:81:9e:57:25:ca:dc:f7:87:aa:b9:d4:37:45:32:f7:1e:
34:f9:2b:0b:d6:10:92:a6:2f:64:7e:32:45:6c:d9:26:98:76:
5e:61:f0:e5:65:15:df:91:83:81:17:cb:66:a8:f0:6e:1f:31:
a1:b4:e0:1a:94:47:30:f4:1c:7b:cc:af:a8:4b:41:d3:f6:2c:
f5:7d:6b:46:9b:68:53:29:35:fd:25:90:f2:8b:43:3a:7d:ec:
02:81:3b:c4:35:1c:4a:91:52:ac:27:3c:b1:43:d0:d5:a4:47:
a5:b9:4b:04:9a:19:1c:13:7e:65:59:3d:15:44:81:a4:87:d0:
9f:74:46:39:32:7f:1e:9c:ee:8f:38:0e:57:9c:72:06:18:99:
09:e0:8f:9d:d3:94:05:0e:e0:61:b6:6e:4b:3b:a9:e7:57:1c:
d3:0e:50:b5:11:9f:00:d2:76:70:dd:c5:b1:a9:ed:62:92:cf:
56:a2:1b:fe:bf:5e:e9:0b:d5:57:91:7c:65:fa:da:7e:76:bd:
92:73:4b:25:c1:51:26:d0:b3:cc:8c:14:c4:67:6f:d4:c0:ed:
da:06:37:52:a3:aa:8c:42:e7:0d:9e:a4:87:b6:28:fa:9f:fb:
57:e7:85:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:06 2024 by rpki-client on console-fra.rpki-client.org