Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/937E212A4A6B11EB9F7A5259C4F9AE02.roa
File: 937E212A4A6B11EB9F7A5259C4F9AE02.roa (raw, json)
Hash identifier: GI6gVxx+3SBzRacxk10Ful4/69mSmO6ZwJsJHQbmYtc=
Subject key identifier: F3:C2:A5:7B:ED:70:90:90:7F:AF:F8:70:E8:90:83:C7:2A:20:37:80
Certificate issuer: /CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
Certificate serial: 18A4
Authority key identifier: 6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/937E212A4A6B11EB9F7A5259C4F9AE02.roa
Signing time: Sat 20 Jul 2024 17:04:14 +0000
ROA not before: Sat 20 Jul 2024 17:04:14 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 135523
IP address blocks: 103.70.250.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 27 Jul 2024 06:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6308 (0x18a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A
Validity
Not Before: Jul 20 17:04:14 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=669bee0e-b90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:d2:18:52:10:14:8e:93:4e:f9:f3:5d:36:
08:df:14:d2:50:84:d0:c5:af:b1:49:dd:36:64:b4:
85:a9:61:a7:f8:fd:5f:f5:23:e5:2e:f2:de:fb:0c:
37:b4:e5:e5:96:06:05:90:fd:a3:e7:67:71:2b:34:
6c:ab:59:df:92:95:b2:cc:28:4f:db:01:8a:a3:1a:
72:57:42:ff:72:ef:63:ba:d8:df:72:5e:d2:67:e9:
20:12:c0:b8:2a:fd:49:9f:0a:41:40:e3:f2:06:1c:
68:69:00:8c:59:89:af:d9:dc:e9:7b:ef:dd:68:9f:
af:31:98:5d:4b:93:be:2d:a5:9c:9f:20:02:88:72:
b1:18:c5:ba:f3:c9:ee:fc:d7:53:e0:b0:42:50:c8:
38:b1:b1:5d:cd:c7:42:c2:f8:58:d8:ab:20:01:c0:
61:ab:c7:58:36:49:ae:a4:cc:ec:35:e5:17:a6:f7:
4e:cd:65:98:aa:bc:0f:69:17:7b:32:6e:d3:db:e1:
3a:26:5a:21:2c:0c:4b:0f:9d:71:c0:ff:bf:13:91:
19:0f:92:ef:c0:31:66:9b:35:8f:72:b6:11:ee:fc:
b2:7c:80:ae:a4:dc:55:b2:26:56:c3:f4:9a:8e:75:
ff:5f:1d:d6:3f:68:e9:87:4b:92:47:46:a9:cb:3a:
92:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C2:A5:7B:ED:70:90:90:7F:AF:F8:70:E8:90:83:C7:2A:20:37:80
X509v3 Authority Key Identifier:
keyid:6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/937E212A4A6B11EB9F7A5259C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.70.250.0/23
Signature Algorithm: sha256WithRSAEncryption
29:fb:dd:20:1c:d1:40:ee:93:af:8e:af:12:8c:f0:0f:1c:52:
36:eb:75:c7:8d:04:01:ef:eb:6a:11:7c:fe:28:c2:29:cf:82:
43:e4:74:e8:30:13:46:c7:55:8c:da:ad:a7:6a:09:65:8e:a1:
78:6a:54:00:1b:a9:f5:48:83:fd:0e:8f:55:f2:8d:8c:d8:b9:
72:0d:a5:c9:6c:db:5d:f5:10:6c:72:9f:e5:44:4c:1b:ad:31:
cf:28:19:e8:15:3d:9d:b7:8a:1b:9d:59:ac:b2:3a:e7:be:f3:
f1:20:4f:bd:53:e8:9b:6a:0a:83:ca:be:4b:3d:bc:b3:ad:7e:
54:29:04:9f:a1:3b:fa:a0:c3:73:a4:be:eb:0e:af:bf:21:62:
c7:75:86:06:8d:e3:25:bc:16:55:56:95:85:25:bf:60:d3:ba:
c2:77:78:2c:f6:df:08:c5:f8:5b:f1:8e:8f:60:8d:7c:59:80:
1d:1a:54:1a:1e:f8:bb:0a:c4:71:e6:a8:fd:03:8a:a2:e7:54:
e4:d3:b9:97:3d:a3:ed:e1:1c:f9:1b:98:68:36:00:26:d9:54:
19:e8:7a:a8:19:d6:91:48:af:df:c0:6d:69:4c:ba:b6:81:ae:
bb:1f:86:3d:25:f3:1a:4d:f3:7d:e9:08:09:37:ed:4c:5b:3f:
bf:8a:84:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 08:30:47 2024 by rpki-client on console-fra.rpki-client.org