Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/5119D422133711EEB9992178C4F9AE02.roa
File: 5119D422133711EEB9992178C4F9AE02.roa (raw, json)
Hash identifier: /e4+OYUfE/mOib+9fQSltHUiuBgX9mZbc3BDE6CUghc=
Subject key identifier: 85:D8:ED:F5:A2:F4:51:CA:5A:E7:BA:CC:82:74:93:3B:E4:E7:E8:1A
Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
Certificate serial: 25
Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/5119D422133711EEB9992178C4F9AE02.roa
Signing time: Tue 22 Aug 2023 12:26:41 +0000
ROA not before: Tue 22 Aug 2023 12:26:41 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 7720
IP address blocks: 103.158.116.0/24 maxlen: 24
2401:e60:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 28 Sep 2023 17:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
Validity
Not Before: Aug 22 12:26:41 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64e4a980-c7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f3:d3:d3:3b:e5:be:a8:ac:ec:11:de:50:e8:
f6:b0:a3:2a:08:a0:8b:74:0f:10:35:e4:db:26:c8:
16:a7:4d:27:bf:73:bf:98:8a:32:73:7e:26:a2:5e:
06:c7:9c:b5:6d:02:8d:1a:9f:44:64:44:42:68:2b:
1d:88:a4:6d:68:62:85:3d:29:bf:70:ac:0e:5b:1f:
ea:38:86:45:9d:fe:24:78:c9:7c:75:d9:fd:b6:94:
49:a6:85:1f:d7:47:09:3e:ac:58:e8:8f:1d:65:e9:
f2:eb:30:50:da:ad:41:4e:e8:f1:01:6b:7b:69:3b:
79:20:1c:78:98:f1:3e:72:c7:7a:af:d4:72:e8:de:
76:aa:e3:6b:a8:80:d8:56:6c:65:88:57:d9:2e:1d:
34:29:01:55:8a:4c:98:8e:f4:b3:75:b9:16:a9:ca:
99:77:de:d6:31:7b:2a:38:7a:9c:9e:bc:58:ec:7b:
9b:39:12:e7:6c:d0:3e:dc:ef:48:04:a6:3c:86:3c:
15:25:47:ff:db:5d:3e:16:27:b6:16:eb:ef:83:e5:
be:b2:42:40:67:03:aa:3c:fb:9e:16:e7:d8:17:9f:
03:cc:7a:0c:fe:b7:33:4b:ef:22:7a:04:da:7f:5a:
00:5a:d7:1e:67:87:16:15:d7:b8:d8:a5:7c:42:2a:
6a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D8:ED:F5:A2:F4:51:CA:5A:E7:BA:CC:82:74:93:3B:E4:E7:E8:1A
X509v3 Authority Key Identifier:
keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/5119D422133711EEB9992178C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.116.0/24
IPv6:
2401:e60:1::/48
Signature Algorithm: sha256WithRSAEncryption
9e:f9:e9:3c:ac:0e:fd:6e:18:48:17:42:42:29:35:d7:70:0d:
9b:02:d6:74:af:3d:2d:9c:21:fe:96:c8:f1:22:2a:b8:ce:a3:
d6:e4:22:20:77:8d:da:6a:2c:17:61:b0:37:34:98:4b:43:f9:
c8:55:11:d1:b6:8a:d5:ad:03:15:2b:60:62:9f:61:3f:8c:06:
48:fb:64:9f:2f:dc:e4:cd:d0:e1:97:43:45:58:09:41:18:ab:
1d:7d:7e:06:8f:a1:ae:bc:03:23:e5:df:97:14:a0:ad:27:bb:
64:3e:db:78:ef:46:39:23:07:97:2d:a1:3c:ba:ec:10:36:f5:
6b:51:2f:e4:72:c7:e2:c4:33:12:79:3e:d3:d3:e6:da:6f:56:
3a:f5:50:ef:3a:e9:9a:f1:dc:57:6b:dc:c2:ea:13:f4:12:c1:
30:4e:f9:13:a9:97:95:40:e7:9f:10:88:90:e4:c0:61:86:df:
02:19:ba:e2:21:31:fb:0c:58:8c:38:ae:dc:3f:42:af:9f:a6:
3c:c2:dc:54:bc:28:8d:fe:7e:c0:1f:eb:a3:aa:35:57:6f:91:
e6:46:65:33:0c:10:4b:55:e6:d1:aa:d5:db:df:3c:3f:0a:72:
89:08:55:ec:62:7b:6f:e0:6a:1b:1b:53:12:db:e9:a9:88:b2:
2d:58:94:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org