Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/8758DC7409F711EF84476F36C4F9AE02.roa
File: 8758DC7409F711EF84476F36C4F9AE02.roa (raw, json)
Hash identifier: EpYwoAPjQlfcTmQ3O18s088qQB7NvyslMX1K5tubJ8E=
Subject key identifier: 02:F8:D3:61:2C:73:98:DE:E4:2A:24:0E:6E:FE:7C:28:DA:51:4E:92
Certificate issuer: /CN=A915FECB/serialNumber=B4B4AB9F3CB04430FD64D4EE2ADD0845E44D57FF
Certificate serial: 010B
Authority key identifier: B4:B4:AB:9F:3C:B0:44:30:FD:64:D4:EE:2A:DD:08:45:E4:4D:57:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLSrnzywRDD9ZNTuKt0IReRNV_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/8758DC7409F711EF84476F36C4F9AE02.roa
Signing time: Sat 04 May 2024 09:20:20 +0000
ROA not before: Sat 04 May 2024 09:20:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 103.136.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jun 2024 15:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FECB/serialNumber=B4B4AB9F3CB04430FD64D4EE2ADD0845E44D57FF
Validity
Not Before: May 4 09:20:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6635fdd4-d753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:18:2f:76:15:84:d5:13:09:33:d8:f7:6c:73:
e3:33:ab:69:7a:55:49:d8:dd:24:a2:14:92:a3:d3:
ac:d9:27:6d:0d:e8:b4:09:01:3b:b6:88:fc:71:1f:
2f:0b:8f:4a:1a:5d:ca:54:fc:20:8d:5a:20:c4:1e:
0e:b1:5c:57:9e:64:13:ad:30:ff:5b:a3:30:8e:a7:
d5:f3:e1:b2:17:dd:ec:c4:3f:a7:b8:f0:c5:48:a1:
b3:65:9e:4c:9b:72:b4:ee:8a:cb:25:6b:59:41:da:
f7:7d:1a:bd:c9:f7:c9:b7:fe:9a:da:b0:17:bc:d2:
7a:3d:c6:84:48:3d:ce:ac:92:e9:7a:18:db:ea:d3:
15:b4:1c:82:63:97:a5:63:9a:55:e8:71:e7:98:a9:
aa:3a:65:b0:df:5f:27:1a:44:67:ca:9b:f2:66:dc:
26:14:b4:2f:b6:45:1f:32:81:bd:ed:d2:80:5d:96:
43:61:d5:d8:0d:ac:e2:90:68:e4:be:a6:5e:0e:c2:
8a:04:c9:f8:5c:d9:bb:29:7d:55:05:6e:15:44:86:
48:41:57:ff:68:78:ba:33:65:fb:e1:f6:c3:6b:9d:
cc:17:d9:a6:af:c9:29:0c:ae:59:15:01:3b:16:ad:
e2:0d:b9:52:9d:e0:86:ed:49:94:d4:3e:0c:5b:69:
d2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F8:D3:61:2C:73:98:DE:E4:2A:24:0E:6E:FE:7C:28:DA:51:4E:92
X509v3 Authority Key Identifier:
keyid:B4:B4:AB:9F:3C:B0:44:30:FD:64:D4:EE:2A:DD:08:45:E4:4D:57:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/tLSrnzywRDD9ZNTuKt0IReRNV_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLSrnzywRDD9ZNTuKt0IReRNV_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/8758DC7409F711EF84476F36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.70.0/24
Signature Algorithm: sha256WithRSAEncryption
56:92:ff:0b:ca:bf:b5:d1:21:aa:ed:47:37:d9:ee:53:d7:c0:
0f:fe:27:90:cf:ba:12:0f:12:cc:eb:08:eb:0b:59:45:42:6f:
a4:62:58:65:6b:5f:0e:2b:16:73:17:a5:5a:56:f3:6a:af:7a:
ba:e4:94:f2:14:8c:ea:13:9a:40:2b:6e:82:b4:49:2e:17:25:
61:f8:c2:61:03:59:c6:74:98:ce:15:54:e0:6c:a3:c6:da:64:
bb:62:e9:f4:2a:dd:a1:1d:93:e4:f6:92:b9:91:20:57:1e:22:
a1:27:34:e7:88:cc:8b:48:61:71:89:43:1b:39:0a:58:2c:bf:
cd:71:bd:54:70:f9:bc:5e:c5:05:3f:65:3a:26:cf:85:41:bc:
ae:46:7c:e4:aa:71:b8:60:9f:0a:32:84:8f:ab:2a:0b:c8:d9:
f6:0e:c2:0e:90:7e:f5:7b:6e:9e:77:22:3b:c1:a1:f0:77:07:
e6:82:34:9b:13:de:5d:50:7d:af:45:6a:2f:09:a6:ad:0c:9a:
a0:3e:7e:ef:79:a4:5d:52:f3:89:f8:11:b5:28:2b:75:47:5e:
96:68:45:59:a3:63:69:ea:1e:c0:7d:db:2e:3d:96:fe:3d:ba:
af:9e:26:ab:eb:4a:88:51:c1:f6:37:ed:cd:9f:5c:34:63:8d:
a6:fc:22:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-ams.rpki-client.org