Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/FD4D610271B811EEAEDED685C4F9AE02.roa
File: FD4D610271B811EEAEDED685C4F9AE02.roa (raw, json)
Hash identifier: yBOYO1met57cqh4u+c0q2xu4otSfrN9j/SDO8wt/4/o=
Subject key identifier: 67:03:26:94:D1:61:90:BC:F8:BC:8A:CD:D9:7D:70:41:A8:8E:CB:8C
Certificate issuer: /CN=A916600A/serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4
Certificate serial: 34
Authority key identifier: 38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/FD4D610271B811EEAEDED685C4F9AE02.roa
Signing time: Mon 23 Oct 2023 15:29:43 +0000
ROA not before: Mon 23 Oct 2023 15:29:43 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 151668
IP address blocks: 103.216.158.0/23 maxlen: 23
103.216.158.0/24 maxlen: 24
103.216.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Nov 2023 17:34:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916600A/serialNumber=38EC19DACA58C45D91C659D35FE4F26DD824ACE4
Validity
Not Before: Oct 23 15:29:43 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=65369167-6f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:c9:3b:ea:fd:45:80:f4:23:58:55:42:68:
66:47:45:d9:93:79:01:ee:10:47:da:dd:5f:c1:83:
3b:2c:5a:2c:dc:07:1c:76:d9:ec:9c:cc:b0:b5:dc:
53:92:7d:16:aa:67:67:24:e5:ec:68:16:24:49:f6:
19:cb:46:ad:f4:51:f2:3d:0c:62:f1:49:65:59:9d:
c2:52:a0:9a:ba:d1:63:ee:67:e3:a8:bc:25:59:09:
36:48:4c:e7:c4:e3:e7:d1:10:23:0d:d8:6e:b4:70:
7e:94:1b:f3:dc:b2:23:d6:d8:6a:ae:1f:0b:fa:93:
6d:18:ed:06:62:0a:11:f9:b7:8f:ad:cf:ab:cd:8b:
c7:0f:b8:a2:e1:c1:f4:b2:a1:56:9a:60:ac:fb:cb:
50:fe:9d:ab:5f:cf:11:49:77:12:a6:f8:81:51:1e:
93:d8:50:3a:06:4e:8f:69:19:8a:63:73:47:90:5e:
27:5f:b1:88:b6:3c:e1:aa:39:6a:ca:b9:3c:6c:c2:
16:7c:65:52:8e:6d:26:51:23:43:23:15:e1:12:3f:
9d:e7:f8:19:3c:23:f5:a4:40:f7:f5:15:98:cf:6d:
51:8f:fa:c7:ae:bc:ff:82:c7:c9:0c:2d:bb:e2:ce:
17:98:c1:c1:8e:ff:0e:0e:b3:d2:40:5a:43:29:cd:
67:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:03:26:94:D1:61:90:BC:F8:BC:8A:CD:D9:7D:70:41:A8:8E:CB:8C
X509v3 Authority Key Identifier:
keyid:38:EC:19:DA:CA:58:C4:5D:91:C6:59:D3:5F:E4:F2:6D:D8:24:AC:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/OOwZ2spYxF2RxlnTX-TybdgkrOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOwZ2spYxF2RxlnTX-TybdgkrOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916600A/9EA2BB7E3CD011EEAE554E73C4F9AE02/FD4D610271B811EEAEDED685C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.216.158.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:c6:f4:67:a8:d3:b0:94:aa:1d:c2:b3:d0:e8:f8:e5:4c:9c:
df:a6:02:7b:f7:a4:b5:9e:e8:e9:e6:ed:4e:da:f9:0e:ee:59:
e5:b7:c1:d2:f6:f3:cd:9d:e6:e9:0c:5b:30:3d:67:3e:65:6f:
80:35:8f:a9:36:ca:30:03:0e:4d:14:79:75:bc:15:98:fd:c9:
58:81:22:a6:c4:ff:5f:cc:bb:9a:69:0c:48:a3:c5:94:83:b4:
a1:51:4d:2e:fb:63:97:8f:b0:3e:fe:ba:31:8e:e7:66:8f:2d:
d2:bf:c8:f8:25:02:78:9a:d2:73:68:d9:93:95:97:fa:13:92:
f9:c4:77:9a:fa:50:5e:c2:2c:73:f0:c5:d9:fd:5c:36:7e:79:
54:6b:2c:73:ee:7b:26:1b:49:6d:34:31:34:0b:09:0e:67:ea:
99:39:e6:d3:a7:6d:df:85:86:73:8e:db:c1:1c:7e:dc:e6:79:
23:89:73:b2:89:b2:27:72:5c:be:12:16:43:65:90:1b:35:a5:
81:29:14:b2:95:c1:c7:5d:9a:0e:f8:7a:42:8e:4a:b6:79:61:
22:25:8c:20:19:d5:f4:b9:17:fe:97:3a:d7:22:b6:7b:cf:83:
7c:5c:c4:19:8b:5c:ac:09:26:2f:20:b5:4c:d6:67:c6:b1:15:
b6:3d:47:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:10 2024 by rpki-client on console-fra.rpki-client.org