Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/BFB70978C5D311EEA3804474C4F9AE02.roa
File: BFB70978C5D311EEA3804474C4F9AE02.roa (raw, json)
Hash identifier: +1XqcxpAmqgATcf8hRMXPILzQqOsAGFsUA/k4Cpq+gQ=
Subject key identifier: 27:09:50:7B:6B:8F:81:94:57:67:8D:51:51:8D:31:0D:E4:E1:99:99
Certificate issuer: /CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72
Certificate serial: 0650
Authority key identifier: 07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/BFB70978C5D311EEA3804474C4F9AE02.roa
Signing time: Wed 07 Feb 2024 16:12:54 +0000
ROA not before: Wed 07 Feb 2024 16:12:54 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 58601
IP address blocks: 103.104.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 16:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1616 (0x650)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D808/serialNumber=0725F2491801505185C9069A4013635C38B56B72
Validity
Not Before: Feb 7 16:12:54 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65c3ac06-da8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:94:e2:7f:17:21:84:c5:71:56:cb:1a:59:72:
e6:4f:9f:16:c5:2e:58:4e:9a:7a:1c:17:14:fe:e1:
4d:20:b0:69:4f:d7:ad:09:a4:90:99:9c:fe:f4:e7:
f0:b3:ac:68:2f:aa:dc:56:40:a6:75:ae:cf:92:9b:
b3:57:45:21:ad:a2:0c:a8:c3:03:3f:d1:36:5c:89:
27:17:b2:d0:9b:fc:9d:da:65:85:68:e6:84:00:1b:
29:f0:34:7a:4f:60:8f:4f:2b:27:58:cf:ce:4f:2e:
f2:4f:f9:a9:82:6c:42:f3:6a:7c:79:47:58:48:8c:
d0:5b:50:f4:96:7b:39:f7:06:70:d1:d1:ee:7d:99:
db:3f:13:95:4c:cf:81:76:47:f7:49:b1:7a:56:b3:
3b:e7:63:af:3e:3a:aa:22:85:a4:73:af:2e:ea:c0:
0f:a0:e8:8c:c1:ef:fb:85:c7:df:46:35:8d:b1:00:
58:fe:0f:f1:f0:6c:01:74:df:14:bd:7c:11:ad:1f:
e5:6f:d0:7e:0d:bb:05:eb:d6:17:f5:06:09:cc:67:
1d:ee:cd:1e:2e:b6:9c:7b:91:e2:c5:ec:2a:b0:a0:
dd:4e:9a:aa:33:39:b4:1e:98:93:12:7a:b0:b0:6e:
9b:5f:97:ab:91:b8:a5:cf:d1:c2:2e:d4:1a:9c:4e:
82:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:09:50:7B:6B:8F:81:94:57:67:8D:51:51:8D:31:0D:E4:E1:99:99
X509v3 Authority Key Identifier:
keyid:07:25:F2:49:18:01:50:51:85:C9:06:9A:40:13:63:5C:38:B5:6B:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/ByXySRgBUFGFyQaaQBNjXDi1a3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByXySRgBUFGFyQaaQBNjXDi1a3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D808/E26B4642F4B211E9BF3CE563C4F9AE02/BFB70978C5D311EEA3804474C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.141.0/24
Signature Algorithm: sha256WithRSAEncryption
27:a5:9c:dc:05:85:bf:95:af:64:e8:e0:bf:d6:7b:6b:2d:5a:
f2:d6:a9:95:f4:64:70:41:8a:fd:19:69:fb:1f:7c:e9:f8:3e:
35:1b:50:eb:7d:ad:50:ca:30:01:f0:5d:fb:9c:93:4d:1f:89:
75:04:eb:17:fc:14:3a:23:88:cd:84:bb:bf:aa:72:4e:03:70:
a8:dc:dc:0e:1f:df:bd:d5:b6:8a:b8:29:21:ee:7f:41:8b:15:
22:5e:b8:d5:a4:11:4d:a9:65:62:f0:1b:44:6a:46:14:d9:9d:
b3:ac:b5:f7:09:4e:cf:d7:57:87:a6:64:66:82:6a:04:9d:27:
e8:4a:f9:19:42:a9:98:da:75:b8:95:97:0d:32:a4:5a:1a:e6:
29:c9:87:67:23:a4:a6:eb:12:8e:1e:f2:b6:ff:c1:f5:d7:0a:
27:54:51:87:11:cd:bc:f6:a1:36:c1:e6:ea:f1:eb:7c:9e:f0:
66:23:d3:97:27:c2:5c:a6:20:33:d8:8d:82:3b:c0:1d:7e:d3:
73:aa:e7:c3:0f:91:c1:76:87:92:b5:41:a5:db:46:c8:2d:4a:
ac:88:39:e4:c9:35:42:d5:e3:e6:e4:31:74:f0:0d:94:a8:38:
8f:b9:3d:c4:2f:56:a5:8c:ec:08:6f:38:17:4a:c7:33:04:8d:
a3:27:58:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 19:53:56 2024 by rpki-client on console-ams.rpki-client.org