Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/65539CF6F19111EDA17E7775C4F9AE02.roa
File: 65539CF6F19111EDA17E7775C4F9AE02.roa (raw, json)
Hash identifier: 0Tl/tFyyCDYjiNAaC6XUmoZ+XsJ7o+Uw3TiEALdrJjI=
Subject key identifier: 9E:B4:9E:8B:A6:76:CC:76:DF:F6:69:42:B7:8A:4F:FC:70:80:F4:48
Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
Certificate serial: 0185
Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/65539CF6F19111EDA17E7775C4F9AE02.roa
Signing time: Sat 13 May 2023 13:23:49 +0000
ROA not before: Sat 13 May 2023 13:23:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149765
IP address blocks: 103.185.226.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 12:39:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
Validity
Not Before: May 13 13:23:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645f8f65-b8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3b:f0:42:9a:84:ae:33:a6:cf:e7:09:0a:39:
3e:2c:15:5b:9c:e9:0a:66:9f:48:4d:59:07:71:fa:
c0:81:7b:29:70:bf:25:da:a1:6a:4b:2b:a7:43:0f:
65:42:58:42:f3:fd:f1:34:d1:e6:0c:c9:1e:9c:fe:
e7:19:b0:d0:39:aa:b6:86:00:8c:81:68:c3:d9:bd:
de:ec:ff:be:c3:d6:d3:d3:0d:6d:9e:b4:7e:d4:e7:
ef:7f:23:a0:fb:a0:11:19:e0:41:cd:70:0b:7a:43:
e9:a9:de:4f:6b:d3:81:5a:8f:a3:b3:00:ce:6a:ef:
16:ea:c3:6f:a7:55:02:9a:42:d8:cc:5b:ef:81:4c:
7d:43:0d:5c:d0:4a:c2:ba:59:f8:f7:d7:2a:2a:09:
5d:1a:6d:b3:1b:a4:cd:3b:bb:35:6f:57:c2:b3:fa:
d2:02:a0:08:64:43:6f:5c:09:c3:dd:ce:88:8f:4c:
69:6b:f8:22:67:ee:e3:1d:c5:ff:9c:13:3d:66:2d:
5a:3d:8f:98:e0:33:3d:89:90:a3:d2:b1:7a:8a:ba:
91:9c:5f:84:3a:0a:77:7b:ff:fe:5d:13:64:dc:be:
cc:2c:62:00:a9:a9:9b:ec:17:09:62:27:53:44:99:
3e:50:4d:2c:73:7b:82:1b:eb:c9:e0:17:5c:9e:bf:
84:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B4:9E:8B:A6:76:CC:76:DF:F6:69:42:B7:8A:4F:FC:70:80:F4:48
X509v3 Authority Key Identifier:
keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/65539CF6F19111EDA17E7775C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.226.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:39:19:b6:b5:01:ff:0b:de:c6:2a:0d:43:7b:e9:5c:cd:e4:
09:d9:42:b4:13:10:5f:7b:ae:9f:b8:fa:ce:ef:31:24:7a:82:
0c:67:46:fd:21:3f:c6:52:99:d2:3a:a5:9b:1b:b7:64:38:3d:
65:3e:2d:6f:3c:1e:6e:ed:86:1a:0a:2d:83:09:c1:8e:d5:b3:
d9:fa:3b:e1:bc:7e:9b:51:6b:44:6e:4b:4c:6e:45:3e:98:b4:
79:7a:fd:52:1e:ff:6c:30:0b:36:0a:42:6b:a3:c1:5d:c5:61:
8c:ae:6a:eb:7f:1e:a9:b5:3a:95:45:7d:8a:f4:4b:10:43:53:
ba:4a:31:bd:63:8c:ce:bb:d6:f6:8f:da:bd:da:8a:c7:1f:30:
a6:f8:a9:92:1d:df:c1:fe:4e:fc:91:64:5f:1a:9d:45:89:8a:
e6:9b:51:f7:4e:e4:cf:70:2d:f4:03:99:72:d6:2c:70:6d:03:
f5:93:3b:5f:e6:89:a9:50:54:e9:9c:2b:e3:49:fd:61:78:39:
db:61:f3:34:e0:5a:09:c6:8d:5d:cd:d9:a4:89:08:aa:96:7c:
7c:a0:4a:9b:ec:78:79:aa:45:9a:7c:d0:27:ec:23:04:44:4e:
0b:8f:f4:54:b3:aa:0b:72:17:40:2f:0b:d2:f1:5f:a7:3e:ca:
6d:c3:fb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:14 2024 by rpki-client on console-fra.rpki-client.org