Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/0204FD5A2E5311EC9FD3C928C4F9AE02.roa
File: 0204FD5A2E5311EC9FD3C928C4F9AE02.roa (raw, json)
Hash identifier: 7PE7DYYa7meRaR1aaNr3FRKTsIxNAK1UDss4nQGKt8k=
Subject key identifier: 23:66:5A:A4:41:FC:C6:18:A3:B3:CB:3B:5F:09:DC:C0:00:6E:A0:A0
Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Certificate serial: 0397
Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/0204FD5A2E5311EC9FD3C928C4F9AE02.roa
Signing time: Thu 16 Nov 2023 06:42:25 +0000
ROA not before: Thu 16 Nov 2023 06:42:25 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 17483
IP address blocks: 103.73.220.0/24 maxlen: 24
103.73.221.0/24 maxlen: 24
103.73.222.0/24 maxlen: 24
103.73.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Oct 2024 10:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 919 (0x397)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82
Validity
Not Before: Nov 16 06:42:25 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=6555b9d1-4a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:2e:7c:b4:64:76:93:a4:ad:7e:a9:9a:6d:
3e:d3:e4:9d:e3:fc:95:2b:ca:5f:7f:da:a3:d6:12:
06:72:44:3b:54:ef:89:fd:e5:df:03:60:15:d8:dc:
bf:be:64:69:de:99:87:ba:e1:46:59:d4:83:48:36:
88:13:c6:ec:b4:eb:10:f6:6d:64:ac:ac:77:34:13:
7a:52:35:a8:95:8a:57:54:a4:bd:b4:95:04:f8:e0:
ca:aa:9f:60:f7:61:53:ff:e2:ef:0f:00:f3:c7:92:
a3:af:a5:1a:92:ad:2d:7f:7a:e0:0f:d4:bc:ec:3b:
19:df:16:82:51:c6:63:05:b2:da:25:23:f8:53:67:
2f:1b:db:56:cc:18:72:c7:18:9b:30:f5:41:dd:1c:
b6:f5:58:df:b6:e7:49:31:38:b3:1c:37:63:1c:93:
5a:2a:11:9e:47:7a:08:8f:78:ac:85:39:78:5f:65:
d2:ba:63:86:5d:47:d1:98:59:18:19:69:78:10:b4:
33:d8:b7:9c:f9:dc:88:c2:ca:14:df:cd:71:56:cf:
4d:94:d8:80:27:6b:58:c6:88:a5:31:95:b6:44:d7:
3b:80:64:7f:4d:0f:de:36:0b:6a:c4:bd:7e:14:04:
02:d7:18:88:a7:eb:e1:a9:7a:05:10:25:fd:09:ed:
1c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:66:5A:A4:41:FC:C6:18:A3:B3:CB:3B:5F:09:DC:C0:00:6E:A0:A0
X509v3 Authority Key Identifier:
keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/0204FD5A2E5311EC9FD3C928C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.220.0/22
Signature Algorithm: sha256WithRSAEncryption
67:94:4d:12:57:01:ec:a4:38:05:13:d8:b5:97:be:5a:ee:dc:
c0:95:7e:9d:dc:a8:2e:ae:99:6a:45:45:14:21:ec:35:1d:08:
8b:6b:0a:95:5f:c0:58:6f:3a:86:35:a2:1c:b2:d1:50:0e:18:
aa:f8:53:54:cd:40:c7:60:cf:a5:2a:ca:34:6a:fb:20:3b:9e:
ab:de:99:7d:91:d0:42:3a:78:11:bd:47:92:ea:3d:48:6a:5c:
7c:5b:9d:bb:2c:c7:4f:d7:97:71:65:3f:8d:b9:73:1b:46:b3:
85:b3:db:c8:14:d7:ef:8d:03:f4:95:32:ae:3a:42:5c:d5:d3:
f7:d2:aa:32:85:cf:92:13:ee:e2:34:bb:51:e5:f3:cf:3e:17:
2b:e3:05:cd:76:8d:94:be:fc:61:4a:a8:88:65:b4:0c:0d:c5:
e7:91:2b:57:4e:54:64:1c:c3:72:89:9a:c5:9f:55:80:6a:6e:
e0:93:56:d3:9c:84:58:b1:4c:e3:98:ce:9b:a7:91:e3:38:02:
ac:89:58:0e:37:37:5b:e7:6b:eb:ef:ba:64:3d:d6:ce:82:5c:
e2:3b:d3:79:c3:51:41:93:c3:58:8e:61:08:2b:9a:be:b2:09:
9e:f5:4d:97:c3:e1:02:31:74:00:92:a9:db:68:cd:c9:65:36:
39:84:42:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 14:39:05 2024 by rpki-client on console-ams.rpki-client.org