Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91685DF/AB7357AECD6D11E9A6C26E46C4F9AE02/BBBF087805A511EEA86A0C2BC4F9AE02.roa
File: BBBF087805A511EEA86A0C2BC4F9AE02.roa (raw, json)
Hash identifier: 20mtwKSVXxBtQm6K7xmkXUqb1+F0ACEcJzSVPKdw0pk=
Subject key identifier: 99:AF:66:4C:4D:5F:BF:61:40:63:4E:FB:1F:C7:4E:97:63:BE:E3:07
Certificate issuer: /CN=A91685DF/serialNumber=BF237EE623BD2853AC04554EB812280434A85A8F
Certificate serial: 0BFC
Authority key identifier: BF:23:7E:E6:23:BD:28:53:AC:04:55:4E:B8:12:28:04:34:A8:5A:8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vyN-5iO9KFOsBFVOuBIoBDSoWo8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91685DF/AB7357AECD6D11E9A6C26E46C4F9AE02/BBBF087805A511EEA86A0C2BC4F9AE02.roa
Signing time: Thu 08 Jun 2023 02:39:47 +0000
ROA not before: Thu 08 Jun 2023 02:39:47 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 149768
IP address blocks: 103.134.216.0/24 maxlen: 24
103.134.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Mar 2024 06:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91685DF/serialNumber=BF237EE623BD2853AC04554EB812280434A85A8F
Validity
Not Before: Jun 8 02:39:47 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=64813f73-d822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:45:4f:b1:7d:bf:97:f8:e8:a7:d2:0f:9a:42:
37:be:06:30:06:88:be:71:06:71:8c:65:53:73:e5:
4b:1b:bc:c5:1a:b3:90:f9:af:0c:38:11:81:ee:b4:
2a:0c:45:22:97:d7:21:7a:3c:36:b8:b8:05:a3:34:
34:e9:e6:59:e3:41:a6:2b:28:b2:d8:10:24:25:ce:
ed:15:d5:26:98:b7:5d:78:ff:67:ae:81:0c:e7:48:
bb:ae:e1:8a:a6:30:33:67:0a:05:df:1a:d7:b3:7a:
f3:7d:38:39:79:c5:94:0a:4d:89:cf:69:fa:74:f9:
b1:fb:da:c9:99:9a:25:f9:fa:b3:45:0d:b4:bb:49:
92:86:38:f1:d4:97:27:46:04:3a:5d:09:05:7a:b6:
96:1e:bc:4a:e8:06:0b:aa:de:4f:6a:5f:18:ea:f9:
ad:67:25:62:42:2c:7c:a7:75:ff:25:78:29:7f:b4:
bf:2c:b2:f7:ae:4e:b6:ce:dd:a9:25:00:c7:94:c6:
bf:cb:e8:62:90:a7:96:e9:3b:10:8f:5b:3c:43:a0:
86:4e:62:93:f5:dd:4d:72:40:02:bf:51:12:df:f8:
9e:53:3b:96:39:5b:86:89:31:2f:54:da:8e:ae:9b:
4a:f0:90:0d:7c:a2:a2:1d:89:e2:39:e0:bb:3d:17:
c8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AF:66:4C:4D:5F:BF:61:40:63:4E:FB:1F:C7:4E:97:63:BE:E3:07
X509v3 Authority Key Identifier:
keyid:BF:23:7E:E6:23:BD:28:53:AC:04:55:4E:B8:12:28:04:34:A8:5A:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91685DF/AB7357AECD6D11E9A6C26E46C4F9AE02/vyN-5iO9KFOsBFVOuBIoBDSoWo8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vyN-5iO9KFOsBFVOuBIoBDSoWo8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685DF/AB7357AECD6D11E9A6C26E46C4F9AE02/BBBF087805A511EEA86A0C2BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.216.0/24
103.134.218.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:f2:96:3a:fc:65:b7:26:b4:61:5d:e6:fc:37:2c:2e:c2:97:
a4:d4:bf:87:c3:fd:7a:a3:21:14:fe:ab:77:c2:ff:9e:ff:55:
a9:75:a3:17:85:88:b1:ec:3f:1f:41:4f:fd:5a:00:cf:36:82:
85:ff:94:9a:8b:dc:1e:73:76:ef:d1:a9:49:e1:e1:6a:c7:63:
ee:6b:8a:a0:f6:81:a2:3e:bd:99:f8:c5:60:e5:2e:a9:79:53:
b3:57:13:60:01:c4:44:e8:82:b8:49:d0:1b:9e:f3:1f:88:9b:
84:dc:ed:41:61:2b:5c:1f:e7:e3:44:76:c0:77:c7:4a:7a:09:
44:3f:bd:47:dc:24:e3:8d:29:e4:83:2b:c8:b6:f6:0f:d5:1f:
fb:55:06:a0:28:5b:51:07:da:5c:3f:a9:02:a0:d7:35:b5:f1:
17:e8:73:c5:6c:76:76:e8:de:84:d9:03:38:0f:8e:1b:fe:dd:
c5:72:95:e9:6d:21:d6:45:65:82:fd:8f:7c:18:56:86:50:8d:
aa:9b:07:ff:98:31:b4:1a:d7:93:21:96:62:3a:73:e5:df:dd:
4b:b7:71:19:0f:d8:4f:b0:80:ff:42:1b:f3:eb:8b:f1:e6:67:
2d:13:6b:81:3b:89:68:6c:68:0b:ed:93:fe:f4:c2:82:e5:88:
b3:89:d0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 3 07:00:58 2024 by rpki-client on console-ams.rpki-client.org