Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05C65EE2C5A111EEABBF9124C4F9AE02.roa
File: 05C65EE2C5A111EEABBF9124C4F9AE02.roa (raw, json)
Hash identifier: Gc3DtRNCKjye94scxi+k6h3BF0HJQORv6jO6C+Ff+as=
Subject key identifier: 4F:B9:3D:7E:2C:F4:A6:F8:BF:D0:61:76:72:BB:EF:4D:86:EB:E8:48
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8290
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05C65EE2C5A111EEABBF9124C4F9AE02.roa
Signing time: Wed 07 Feb 2024 10:09:47 +0000
ROA not before: Wed 07 Feb 2024 10:09:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137684
IP address blocks: 103.119.245.0/24 maxlen: 24
103.119.246.0/24 maxlen: 24
2001:df1:7cc0::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 08 Feb 2024 07:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33424 (0x8290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 7 10:09:47 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65c356eb-1a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:41:23:84:4a:d5:31:84:ed:c6:33:7a:6a:7f:
84:58:93:99:0f:b4:78:21:61:0c:70:03:af:0b:ff:
a1:7e:9d:c7:f2:e3:5d:54:33:b1:2f:76:56:c2:64:
d5:84:9d:40:e5:9c:11:5d:a5:02:ba:d7:ae:ce:5f:
0e:89:1f:b0:f4:08:98:48:37:0a:fd:4b:db:b3:71:
54:85:97:fc:13:54:4c:84:4e:a9:b5:f9:ba:75:47:
94:0d:95:cb:24:e8:27:ac:18:44:89:03:09:1e:0e:
dd:07:a2:ec:e0:be:53:e3:d9:63:4d:9e:cf:39:b8:
bf:15:c4:2c:cb:1b:93:21:9a:8f:03:6c:cf:56:c1:
de:a0:bd:21:4e:f8:5a:60:5c:67:ac:b1:4e:e9:9e:
21:68:f0:a9:2d:89:fb:44:79:9d:92:25:77:7e:a4:
b1:c5:82:c8:9e:59:eb:ec:fc:b8:0e:36:bb:ff:a1:
8c:9f:21:8c:f3:1e:72:cf:bd:eb:18:f6:52:5d:26:
d1:12:86:c7:29:c3:c3:71:4f:d7:41:65:6a:88:56:
c9:d4:aa:33:a6:91:07:3a:0a:dd:fb:97:66:f9:88:
2a:7d:31:b8:6c:6f:04:66:6a:6b:7b:d7:80:e5:f7:
b6:fd:1b:13:c5:6b:c9:98:67:ad:b1:61:4e:1d:6a:
85:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B9:3D:7E:2C:F4:A6:F8:BF:D0:61:76:72:BB:EF:4D:86:EB:E8:48
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05C65EE2C5A111EEABBF9124C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.245.0-103.119.246.255
IPv6:
2001:df1:7cc0::/48
Signature Algorithm: sha256WithRSAEncryption
88:89:bd:ea:c2:1d:51:cc:22:4b:a1:56:ae:e4:8c:16:20:96:
d5:80:1c:55:7c:1b:e1:23:cf:52:dd:bd:c8:b8:e5:ed:90:f7:
40:7d:21:f7:40:22:ec:be:45:89:72:e9:cb:e1:bc:0c:06:7e:
d2:a1:ff:87:36:a8:5c:9b:84:e2:0e:21:e4:84:f1:71:8f:37:
73:26:ea:82:f7:b0:e8:86:81:99:d9:2d:a0:6f:be:65:e0:3d:
b1:9a:3e:71:b9:65:f6:41:86:bb:24:69:1c:9b:6c:6a:6f:f9:
d2:41:6f:49:84:71:ef:98:14:01:67:d6:5b:45:cb:9d:7e:51:
60:49:80:b9:89:d7:82:61:e6:e4:d5:79:6a:41:9f:9a:3e:ad:
3e:1e:6e:43:05:93:43:7e:37:5b:70:94:32:37:a4:96:04:11:
70:6e:6a:10:ab:56:0f:7f:3a:9b:ea:8c:e3:4d:e6:f4:41:c6:
8e:0c:a5:05:11:51:a0:48:c9:07:68:97:22:af:a6:54:46:d2:
e0:bd:d4:a8:39:0a:08:0c:6b:e9:57:0e:a9:db:46:59:29:ee:
58:d9:0d:64:92:d6:77:42:4e:0b:e4:33:8d:bb:0f:62:73:a5:
34:21:7f:17:8c:fa:78:81:37:1a:07:7f:cb:9d:b9:39:d6:c4:
95:9a:58:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 10:48:40 2024 by rpki-client on console-ams.rpki-client.org