Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/EDA3F2EAF8B111EEB62E0575C4F9AE02.roa
File: EDA3F2EAF8B111EEB62E0575C4F9AE02.roa (raw, json)
Hash identifier: pbmB9QIS+PjdZpJCEAG5Y9ipwwRN2G2cTmX82B9LcK4=
Subject key identifier: 1B:C1:30:CF:3F:F7:4B:60:B7:9B:2D:D1:97:5C:DE:A8:2D:86:91:64
Certificate issuer: /CN=A915FECB/serialNumber=B4B4AB9F3CB04430FD64D4EE2ADD0845E44D57FF
Certificate serial: FA
Authority key identifier: B4:B4:AB:9F:3C:B0:44:30:FD:64:D4:EE:2A:DD:08:45:E4:4D:57:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLSrnzywRDD9ZNTuKt0IReRNV_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/EDA3F2EAF8B111EEB62E0575C4F9AE02.roa
Signing time: Fri 12 Apr 2024 09:49:17 +0000
ROA not before: Fri 12 Apr 2024 09:49:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30938
IP address blocks: 103.136.69.0/24 maxlen: 24
103.136.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 May 2024 09:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FECB/serialNumber=B4B4AB9F3CB04430FD64D4EE2ADD0845E44D57FF
Validity
Not Before: Apr 12 09:49:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6619039d-1629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:85:94:42:f4:c2:16:4f:8c:d9:3f:e2:68:c1:
3e:15:e7:34:9f:14:21:c5:e2:3b:24:39:0a:48:c7:
7e:00:aa:7b:c4:0b:37:eb:cb:b0:b0:c2:1c:29:9d:
38:64:c4:7f:43:c7:85:c8:58:f9:f9:ca:0e:84:6e:
49:ba:9e:62:eb:27:5f:22:86:1e:02:8e:03:3b:ab:
e6:c7:7e:60:7c:98:bf:de:a6:1a:62:db:66:34:9b:
9b:77:d8:b8:f0:df:7d:81:39:29:27:e9:db:87:d5:
5b:3c:74:99:6e:9e:3f:44:de:1f:46:38:dd:8a:8b:
6d:48:77:bc:3b:68:9d:c8:61:10:22:85:fc:f5:4a:
27:42:77:c1:99:36:ac:43:cc:04:4b:d2:d7:2d:d5:
78:18:9c:5a:72:75:40:64:32:e9:57:ba:34:de:c9:
8d:14:59:2f:d7:a7:d3:e9:3b:83:1f:63:e7:99:45:
3f:77:8e:3a:91:bc:aa:3a:99:38:55:44:38:74:47:
a6:f5:3f:05:6c:fb:16:8b:43:6c:90:0e:48:94:3f:
8c:ea:41:26:80:0d:2a:81:b0:1e:f0:41:f0:c6:72:
5a:e4:94:5b:4d:22:3e:c0:57:b8:f6:18:db:06:df:
3a:7f:2f:12:70:15:f5:b9:11:5d:e6:eb:3a:81:05:
9a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C1:30:CF:3F:F7:4B:60:B7:9B:2D:D1:97:5C:DE:A8:2D:86:91:64
X509v3 Authority Key Identifier:
keyid:B4:B4:AB:9F:3C:B0:44:30:FD:64:D4:EE:2A:DD:08:45:E4:4D:57:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/tLSrnzywRDD9ZNTuKt0IReRNV_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLSrnzywRDD9ZNTuKt0IReRNV_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FECB/4D47DC868D0911EDB9790850C4F9AE02/EDA3F2EAF8B111EEB62E0575C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.69.0-103.136.70.255
Signature Algorithm: sha256WithRSAEncryption
17:15:8b:6f:18:7b:b3:3d:e5:86:7c:e4:17:bc:b0:6d:bb:6b:
22:80:48:e6:f7:2a:6a:db:81:b1:8b:c1:ff:dc:b0:2b:04:04:
7a:5f:e3:0b:60:d4:f3:e6:d5:3e:58:6e:24:b1:0c:62:07:a9:
ac:1e:4a:a7:f4:a6:6a:a8:c3:d0:a9:0a:be:af:96:e1:4c:80:
f8:08:64:e2:05:90:dc:0b:4c:9a:8a:19:08:80:d5:05:ad:9a:
97:12:13:63:5c:8d:f3:ed:df:c5:e4:16:f9:37:07:27:35:db:
c8:3e:ff:9e:70:6b:ba:fc:67:10:02:da:0d:36:0f:88:29:64:
ec:0e:5d:db:af:80:f3:17:5b:3d:b0:7c:30:4e:9e:7f:6e:51:
79:d8:78:69:80:6c:f5:17:81:08:ac:d0:59:5d:d4:39:60:23:
3c:6b:19:1d:da:10:73:94:99:2d:57:50:d7:6d:92:18:20:dd:
cc:40:f9:d4:75:1c:0d:59:53:bf:c6:95:f7:99:4e:89:0f:77:
98:56:c5:74:76:96:3d:99:e9:c7:ad:c9:f7:dd:25:bf:db:35:
11:63:88:dd:8a:47:31:d1:85:6a:34:bf:22:ed:c5:b4:9c:90:
bf:a1:78:db:68:12:1c:e8:d9:b3:d8:70:c2:38:a1:28:0f:75:
65:f5:db:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:29:32 2024 by rpki-client on console-ams.rpki-client.org