Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/A403C658F1D411EEA74B8212C4F9AE02.roa
File: A403C658F1D411EEA74B8212C4F9AE02.roa (raw, json)
Hash identifier: mUWY4IsAoeT/cqDzSMDbUMfhSV1EH4vU9iSq9IkWZCw=
Subject key identifier: 89:16:D8:0C:DD:23:A2:00:44:9F:52:D9:95:BE:D1:B3:B2:CA:95:3A
Certificate issuer: /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Certificate serial: 01AF
Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/A403C658F1D411EEA74B8212C4F9AE02.roa
Signing time: Wed 03 Apr 2024 16:10:08 +0000
ROA not before: Wed 03 Apr 2024 16:10:08 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 38193
IP address blocks: 103.69.2.0/24 maxlen: 24
103.69.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 May 2024 19:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Validity
Not Before: Apr 3 16:10:08 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=660d7f60-4475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d5:08:e8:39:8e:5c:32:ef:94:f7:33:66:a6:
64:3a:23:08:69:8a:77:e3:3c:ff:5b:90:89:3e:15:
9b:12:f9:24:df:c8:50:14:f9:9a:f8:8e:71:4a:7a:
e6:0e:1d:15:2a:81:31:e5:c7:7a:61:76:e9:b2:b2:
e4:81:eb:fc:f7:ef:31:e0:38:ef:6b:9f:75:cb:c9:
e7:19:aa:6a:6a:87:91:6f:3b:57:78:90:06:ba:92:
3d:63:23:18:67:53:93:b7:3c:4c:d8:08:70:dd:c9:
e2:f1:2f:12:26:5f:60:99:52:c1:bf:7b:81:26:df:
c1:a0:35:d8:1a:21:f4:37:42:92:52:e4:da:70:5a:
9b:4a:ae:76:05:d5:c0:7d:cf:2a:04:1e:4c:32:6e:
f3:b6:6f:7d:4d:ee:2b:be:21:20:b6:3d:27:16:8e:
22:5b:17:32:b2:80:21:6e:fe:4b:23:a7:47:aa:ad:
9e:92:5f:5e:df:4f:3e:77:7f:bb:5f:f9:63:3f:c3:
ab:b9:64:89:09:76:0d:a4:84:96:40:f3:4d:06:c9:
bf:2c:a4:1d:42:0d:63:31:7c:2c:86:df:ec:e4:29:
29:40:95:31:0d:8d:b7:1a:c9:50:d5:b5:ba:7e:15:
6d:b8:72:43:f7:73:0d:2d:6d:6f:37:c2:a5:ec:99:
90:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:16:D8:0C:DD:23:A2:00:44:9F:52:D9:95:BE:D1:B3:B2:CA:95:3A
X509v3 Authority Key Identifier:
keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/A403C658F1D411EEA74B8212C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.2.0/23
Signature Algorithm: sha256WithRSAEncryption
17:ea:69:a7:f0:29:ab:50:81:3f:85:e9:bd:90:08:80:fe:74:
f1:ad:fc:0f:08:c1:42:4e:d5:da:92:95:18:50:e9:52:49:74:
49:ce:c7:db:4a:68:07:fa:1d:c2:0a:56:af:b7:7d:ba:e1:63:
c4:60:72:a7:34:c9:48:c5:4a:3c:ff:a0:82:81:73:16:f4:23:
ac:4c:6c:55:a7:55:2e:b0:2f:11:73:5c:f6:e2:2c:e9:59:cb:
53:ae:c2:40:5c:85:60:ac:68:17:d4:1d:cc:c1:d2:da:f9:1a:
d9:c1:52:a2:ac:7b:06:54:e3:ca:29:6c:c9:ef:fb:75:22:80:
3d:91:07:8f:fe:c8:49:b9:d2:8e:d8:57:5d:ae:39:99:47:1a:
5c:74:ba:32:1d:e9:ea:92:1f:21:13:8a:f8:c5:e0:6d:ee:e4:
e8:99:38:0c:a5:16:14:e7:d1:62:84:b2:27:df:4c:2c:eb:95:
37:e6:95:60:7d:4a:ea:a7:82:2e:44:43:d4:6d:5e:3c:44:5f:
fa:82:64:c4:ab:d3:1b:44:08:13:f4:3f:d9:c3:6d:65:d3:73:
7b:de:66:5d:d9:41:4a:38:93:97:20:1b:5a:26:f0:47:74:d9:
95:3c:8f:a8:df:f5:bb:8c:a0:73:45:4d:41:c2:2e:b3:71:9e:
eb:29:2b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:03:39 2024 by rpki-client on console-fra.rpki-client.org