Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/3B748AF8A0C311EEA1735E52C4F9AE02.roa
File: 3B748AF8A0C311EEA1735E52C4F9AE02.roa (raw, json)
Hash identifier: IYrjgo693qii/wEIs3LLHHDnVMbRt4+JeR4lAIEGSZE=
Subject key identifier: 24:F8:51:48:06:41:11:B5:1E:85:B1:64:F7:95:87:90:03:EF:12:D3
Certificate issuer: /CN=A917638D/serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6
Certificate serial: 084B
Authority key identifier: F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/3B748AF8A0C311EEA1735E52C4F9AE02.roa
Signing time: Fri 22 Dec 2023 12:11:27 +0000
ROA not before: Fri 22 Dec 2023 12:11:27 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 136969
IP address blocks: 103.150.206.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2123 (0x84b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917638D/serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6
Validity
Not Before: Dec 22 12:11:27 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65857cef-9f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:80:4f:74:55:1c:5a:d4:fd:1a:89:c9:a3:c5:
a4:e7:a8:03:4c:19:37:f9:c9:62:a1:cb:09:b2:aa:
a6:ec:6e:c7:77:b6:cb:58:c2:8c:8f:0d:0b:83:e1:
fe:f4:a8:6e:b7:13:19:0c:54:17:7e:e6:34:38:58:
f9:20:49:62:4b:e0:71:23:f4:97:fd:5a:8d:8c:d0:
6e:8d:5d:bd:2f:7f:ce:44:9d:a1:9c:49:c1:9c:9b:
e4:4f:e5:b9:5e:3d:c4:da:92:0b:d0:c1:4c:65:ef:
f5:d9:78:d9:9d:59:00:a2:c9:96:e1:0f:14:ba:c4:
1a:de:e9:fb:b3:f8:31:b1:fd:c7:21:66:ba:07:22:
8c:04:5b:45:aa:32:ba:d0:c6:2c:80:e6:aa:c7:94:
34:ea:16:20:dc:fa:42:5e:43:7d:81:c0:ce:dc:b4:
9a:74:88:0b:95:eb:3c:a5:b1:89:7b:82:e0:1f:ca:
0d:dc:20:2b:74:2f:34:af:89:13:4a:53:dd:b8:b4:
a4:02:6a:90:1a:e9:5e:e9:97:48:8f:a2:0e:b4:d2:
f0:84:ea:a7:94:b8:3d:11:64:8b:16:25:a4:d3:25:
7d:42:b9:b9:85:6a:f9:c2:64:b4:39:1e:e9:8d:d2:
27:a7:96:2a:47:9d:87:49:95:98:be:e8:e4:1d:29:
de:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F8:51:48:06:41:11:B5:1E:85:B1:64:F7:95:87:90:03:EF:12:D3
X509v3 Authority Key Identifier:
keyid:F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/3B748AF8A0C311EEA1735E52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.206.0/24
Signature Algorithm: sha256WithRSAEncryption
15:86:74:bc:f3:53:91:34:a5:79:9c:a3:39:6a:a3:34:f4:1f:
63:70:7d:4f:fe:d7:b1:55:75:93:42:57:9a:cc:ba:67:e7:83:
86:54:4e:cc:5b:4a:61:c4:45:bd:52:d4:1f:6d:0d:1e:14:fe:
83:82:20:be:84:8d:53:91:34:31:96:b2:27:4a:1c:b4:7f:40:
bd:9f:a0:64:c8:14:ca:a5:b1:fb:0d:4c:bd:2b:64:0e:45:66:
ca:5e:d3:27:0a:b5:65:a6:55:a5:45:b4:d0:9a:f4:41:43:75:
a8:ae:5e:07:b5:3b:5e:f6:77:36:07:a7:60:39:3a:c3:3c:56:
0c:31:d5:a7:90:d9:f6:7a:6f:2b:88:95:42:b9:46:86:2d:3b:
17:e6:e9:33:4d:5e:e6:1f:5c:83:29:7f:45:c1:66:f5:98:fe:
db:63:54:4b:b1:8b:b4:c4:23:36:3b:01:f0:a8:44:ac:7c:0d:
d8:a4:0d:a9:1e:6e:e3:47:f6:15:4e:39:9a:be:db:b2:d1:9d:
9b:6c:09:08:8d:2d:9e:f0:67:42:64:75:0e:21:78:b7:e2:c2:
0a:77:7d:36:a7:61:35:02:f8:19:7e:09:19:36:43:2d:36:d3:
73:dc:08:0b:ef:37:6a:b2:c5:eb:43:03:aa:7e:5f:1d:25:4f:
b7:57:23:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 21:04:43 2024 by rpki-client on console-ams.rpki-client.org