Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AD0E/142820B20D5B11EBAD51CE36C4F9AE02/4EF3DCD8DECB11ED80F78C77C4F9AE02.roa
File: 4EF3DCD8DECB11ED80F78C77C4F9AE02.roa (raw, json)
Hash identifier: YAsdGgPvC2gFDTIAZ6DH3aQitMynCUYRQEVu//2Ac+E=
Subject key identifier: 0B:B6:9A:E9:13:63:EF:36:93:23:0E:EA:B1:DE:70:0D:7F:18:3D:A4
Certificate issuer: /CN=A917AD0E/serialNumber=C9BB92FAC6A5532E423556751D0EA72891E6DE7A
Certificate serial: 065A
Authority key identifier: C9:BB:92:FA:C6:A5:53:2E:42:35:56:75:1D:0E:A7:28:91:E6:DE:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybuS-salUy5CNVZ1HQ6nKJHm3no.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AD0E/142820B20D5B11EBAD51CE36C4F9AE02/4EF3DCD8DECB11ED80F78C77C4F9AE02.roa
Signing time: Wed 16 Aug 2023 22:19:44 +0000
ROA not before: Wed 16 Aug 2023 22:19:44 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 56110
IP address blocks: 103.118.16.0/24 maxlen: 24
103.118.17.0/24 maxlen: 24
2001:df5:c100::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jul 2024 10:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1626 (0x65a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AD0E/serialNumber=C9BB92FAC6A5532E423556751D0EA72891E6DE7A
Validity
Not Before: Aug 16 22:19:44 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=64dd4b80-5ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f5:ad:c8:29:84:4d:d5:ae:80:be:ee:73:63:
b8:53:b7:e5:d4:94:bf:c7:5f:18:67:e0:df:24:60:
86:32:d9:27:22:0e:b8:b1:24:03:5f:1a:ff:42:28:
6c:53:ba:e6:58:09:3c:68:e1:ed:a7:5d:37:65:94:
ce:50:16:9c:83:30:a4:c1:db:1d:2e:f2:7a:0f:a4:
00:59:24:cf:70:f3:c4:e9:6e:ae:ad:ef:10:33:fb:
bd:5e:1d:6f:ee:72:43:0a:d6:bb:d4:82:c2:df:92:
d7:57:f4:d0:39:01:ad:11:8a:27:fa:14:08:d2:e2:
9d:fd:bd:c9:98:1f:0d:9a:1f:aa:77:15:29:cd:8a:
34:2d:49:b2:b6:42:1e:54:96:bf:db:63:16:e8:21:
61:fb:0b:53:94:c9:b1:12:0a:3f:f9:a1:7a:0e:88:
9a:90:bf:d3:d4:e7:1c:a9:b8:f3:d0:6a:8c:2a:d8:
bd:e5:ff:23:f7:3b:f8:2f:83:4f:a6:22:45:09:51:
e5:17:b5:49:a5:64:8a:13:ef:b6:e9:1a:c0:55:00:
9c:14:9f:4d:1c:cb:a5:e6:43:b0:5a:d7:19:3b:e3:
2d:a3:49:a5:20:c7:66:79:8d:be:7c:f8:86:e8:79:
9a:54:cb:66:78:65:3f:c1:7f:86:24:b4:df:62:5f:
64:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B6:9A:E9:13:63:EF:36:93:23:0E:EA:B1:DE:70:0D:7F:18:3D:A4
X509v3 Authority Key Identifier:
keyid:C9:BB:92:FA:C6:A5:53:2E:42:35:56:75:1D:0E:A7:28:91:E6:DE:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AD0E/142820B20D5B11EBAD51CE36C4F9AE02/ybuS-salUy5CNVZ1HQ6nKJHm3no.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybuS-salUy5CNVZ1HQ6nKJHm3no.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AD0E/142820B20D5B11EBAD51CE36C4F9AE02/4EF3DCD8DECB11ED80F78C77C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.118.16.0/23
IPv6:
2001:df5:c100::/48
Signature Algorithm: sha256WithRSAEncryption
35:6a:30:f6:42:56:59:5e:3f:2f:40:09:da:c0:84:23:6a:0e:
c9:e0:96:02:ff:75:95:7c:a7:74:dc:6a:27:56:78:5e:8c:1c:
5a:8a:0f:47:25:41:90:29:91:e6:a6:9b:ab:60:17:f5:26:13:
de:11:3e:d9:69:8e:e6:eb:73:94:9e:b0:14:58:b4:5c:30:16:
1e:3e:37:b4:15:8b:cf:d9:b7:f3:c0:8c:e1:aa:9f:51:b0:f1:
4f:f3:b4:17:ba:82:7b:ff:39:80:3c:7f:10:3f:9b:65:cb:9a:
59:2f:60:15:64:c5:27:00:5d:11:2a:81:ff:82:17:e9:3b:d8:
e3:25:ce:f9:51:07:77:36:a5:34:cf:54:0c:b6:3f:ea:00:76:
99:92:71:6c:28:d2:02:37:7e:d9:84:f5:69:47:74:e5:8b:b7:
c1:51:70:3a:22:ec:77:a1:90:d9:21:55:c8:96:22:75:a2:32:
fc:70:57:cc:45:c7:e6:84:3d:e5:83:75:0f:31:c4:06:8a:5e:
e7:d4:48:40:b1:4e:e1:77:c2:50:2d:59:cd:06:41:e6:54:fc:
b0:91:45:b0:6a:a3:bb:fd:f5:63:e5:52:e0:fa:53:57:66:b3:
5e:aa:dc:2a:52:7c:05:8b:cc:2e:8c:eb:32:3d:c0:de:1b:c9:
e0:ff:31:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 11:40:31 2024 by rpki-client on console-fra.rpki-client.org