Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915802B/330CC3C4605011EA95776754C4F9AE02/C8E98F38F50311EA81AA5820C4F9AE02.roa
File: C8E98F38F50311EA81AA5820C4F9AE02.roa (raw, json)
Hash identifier: KBYQqeZPHk/yHdrnU1QdVXV348h4wCjp5G7NHUWlbFA=
Subject key identifier: AA:78:B8:A5:79:6D:32:6B:C1:C9:28:BD:CE:6C:F9:7E:DD:13:3F:0D
Certificate issuer: /CN=A915802B/serialNumber=3A43780F6C432DEE474A8A9568590282DBEA5DB3
Certificate serial: 096C
Authority key identifier: 3A:43:78:0F:6C:43:2D:EE:47:4A:8A:95:68:59:02:82:DB:EA:5D:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OkN4D2xDLe5HSoqVaFkCgtvqXbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915802B/330CC3C4605011EA95776754C4F9AE02/C8E98F38F50311EA81AA5820C4F9AE02.roa
Signing time: Tue 02 Jan 2024 16:40:59 +0000
ROA not before: Tue 02 Jan 2024 16:40:59 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 137030
IP address blocks: 103.102.132.0/22 maxlen: 22
103.102.132.0/23 maxlen: 23
103.102.132.0/24 maxlen: 24
103.102.133.0/24 maxlen: 24
103.102.134.0/23 maxlen: 23
103.102.134.0/24 maxlen: 24
103.102.135.0/24 maxlen: 24
2405:e2c0::/32 maxlen: 36
Validation: Failed, certificate revoked on Sun 21 Jan 2024 12:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2412 (0x96c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915802B/serialNumber=3A43780F6C432DEE474A8A9568590282DBEA5DB3
Validity
Not Before: Jan 2 16:40:59 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65943c9b-cbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:70:d9:05:01:ca:b7:3b:09:3e:22:b8:6a:
23:79:5f:39:c9:f9:90:17:5c:5d:b1:de:be:ee:98:
05:fa:33:8d:f5:a3:ac:b6:a0:c4:2c:e9:73:46:9c:
a6:4f:52:fe:d7:2d:ac:e4:95:6e:ec:a3:a7:61:8f:
25:5c:09:bb:2a:6d:94:de:fd:7c:82:b9:0c:eb:92:
75:2f:97:2d:19:57:84:da:7b:10:49:9b:76:19:c5:
1f:9b:c4:92:74:c7:f2:8d:31:52:37:29:e0:a5:6c:
3e:2d:d9:24:3a:ea:d8:28:34:32:09:9e:3e:9f:73:
6f:ed:a4:c2:92:52:fa:23:85:eb:d2:79:b7:72:fd:
6e:12:eb:af:fd:11:2a:25:9a:7d:54:5b:3b:cd:1f:
b5:0b:c8:d7:51:5d:19:77:bd:cc:c8:82:af:24:ae:
eb:2a:8d:9f:9d:ec:52:b2:eb:34:40:64:a0:58:90:
8a:86:c2:bb:aa:62:65:fc:a3:4b:f4:16:1c:7f:f0:
26:a3:54:c6:24:d7:d7:91:59:0b:9a:13:e8:fc:b8:
fb:64:17:fe:39:cf:f3:9c:f3:a8:78:2e:e2:c1:ce:
e8:2e:ac:9d:2e:ef:15:83:c7:82:e3:2a:87:7c:02:
6d:c6:42:00:16:ca:f6:11:e8:10:f4:f4:20:d4:d4:
74:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:78:B8:A5:79:6D:32:6B:C1:C9:28:BD:CE:6C:F9:7E:DD:13:3F:0D
X509v3 Authority Key Identifier:
keyid:3A:43:78:0F:6C:43:2D:EE:47:4A:8A:95:68:59:02:82:DB:EA:5D:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915802B/330CC3C4605011EA95776754C4F9AE02/OkN4D2xDLe5HSoqVaFkCgtvqXbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OkN4D2xDLe5HSoqVaFkCgtvqXbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915802B/330CC3C4605011EA95776754C4F9AE02/C8E98F38F50311EA81AA5820C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.132.0/22
IPv6:
2405:e2c0::/32
Signature Algorithm: sha256WithRSAEncryption
a8:a1:f5:50:56:52:5b:c6:ad:40:b5:ce:e3:43:3d:9a:c3:87:
8d:1b:08:75:22:20:a8:f3:d6:3c:bf:6f:93:a8:e7:11:d5:f9:
06:84:1e:52:0e:34:08:cf:3e:3e:01:35:9e:8e:a2:96:40:0d:
7f:d5:d3:ea:73:cb:d9:7f:68:26:01:01:0d:ce:6a:9e:3a:d6:
19:1f:64:75:37:f9:dd:76:63:74:74:8c:b1:15:14:36:31:2d:
1f:ea:50:ce:70:c0:8d:f5:d2:25:62:e6:22:e6:26:a4:67:7b:
08:f0:94:85:0b:19:d9:13:68:2b:5c:66:48:e8:07:ba:81:f0:
56:ff:98:76:8d:97:53:51:55:ea:ec:60:71:9d:69:42:53:27:
fd:2f:35:2a:76:c5:e9:c3:16:69:95:8c:ef:7e:d5:aa:1d:a0:
b0:48:65:f5:b9:8e:ed:c9:3c:10:1f:79:e9:4b:ac:ce:e4:6d:
54:23:39:d5:49:5d:36:9c:0c:48:64:82:e7:7b:c2:ed:69:66:
bc:02:73:4a:72:75:bf:01:1c:96:fd:47:b4:f0:c1:d7:73:b4:
09:d9:6b:06:44:9c:f8:c2:79:12:f7:57:16:be:07:cc:2f:a2:
bb:2c:ea:44:af:82:8b:ea:b4:fe:56:82:5d:f2:5d:aa:95:ef:
c4:76:9a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 21 15:33:33 2024 by rpki-client on console-fra.rpki-client.org