Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7FB6490497EA11EE96FDD15AC4F9AE02.roa
File: 7FB6490497EA11EE96FDD15AC4F9AE02.roa (raw, json)
Hash identifier: MX2j2A8vI4+dwS0Q02HhBVljbMuU7levXDBwLFodTBQ=
Subject key identifier: DC:40:5A:CA:C2:78:72:73:D2:87:DD:E1:D3:80:BB:B4:DA:3C:6B:85
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7FB4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7FB6490497EA11EE96FDD15AC4F9AE02.roa
Signing time: Mon 11 Dec 2023 05:59:52 +0000
ROA not before: Mon 11 Dec 2023 05:59:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137159
IP address blocks: 103.108.12.0/23 maxlen: 23
103.108.14.0/23 maxlen: 23
2405:ad40::/32 maxlen: 32
2405:ad40::/40 maxlen: 48
2405:ad40:100::/40 maxlen: 48
2405:ad40:200::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 Feb 2024 07:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32692 (0x7fb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Dec 11 05:59:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6576a557-1713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:42:ed:a1:50:ac:01:6b:c1:03:1a:cd:3a:
43:64:72:dd:21:3e:94:9e:1f:ed:9c:00:73:79:7c:
d4:06:f4:98:a6:ae:63:65:c0:08:fa:79:98:02:8d:
44:2a:55:75:bb:94:47:b9:5b:10:ec:39:75:fd:41:
b0:f8:b0:68:e4:6d:a7:94:14:a8:29:c5:0d:e7:e0:
37:61:a9:8a:9c:95:c4:fc:98:ad:88:df:69:f4:d9:
0f:1c:ac:9d:b2:a4:d3:ed:ca:84:21:f8:0a:2a:c2:
9a:19:f3:03:b9:d2:7e:cb:6f:46:f4:7d:8e:bf:92:
70:71:e6:15:6e:b5:fd:25:42:45:ef:54:f3:78:53:
ec:82:73:14:e2:bb:cc:92:22:6f:35:a8:11:11:72:
c8:19:9c:b7:62:7f:1e:80:2b:57:f9:8e:51:a7:bc:
d8:52:e8:00:19:1c:ad:a2:1d:4b:f7:b3:a2:91:38:
3b:36:c9:63:ed:14:4c:ec:e0:12:78:3e:45:8d:eb:
8b:f9:1d:da:f3:f9:ed:46:39:36:22:4e:33:e9:1f:
f2:ab:20:7d:1c:31:13:2b:45:c7:b1:58:37:66:b4:
ef:1e:8e:25:90:a0:55:63:69:48:07:65:41:a4:09:
61:93:95:78:10:ad:1d:b7:f2:cc:42:2e:f5:fa:e3:
44:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:40:5A:CA:C2:78:72:73:D2:87:DD:E1:D3:80:BB:B4:DA:3C:6B:85
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7FB6490497EA11EE96FDD15AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.12.0/22
IPv6:
2405:ad40::/32
Signature Algorithm: sha256WithRSAEncryption
23:85:d2:53:ed:f0:0d:15:5a:90:f9:50:4d:a4:37:0b:2e:dc:
f9:1d:f5:64:1a:c6:c0:62:60:23:03:b1:09:bd:c1:45:d1:f5:
3a:70:5a:27:f8:9c:46:d6:bf:76:4c:9f:b7:b6:9e:c8:5b:f6:
84:dc:d7:a7:f7:0a:d8:8c:81:3a:a3:69:31:51:91:3c:22:3e:
2d:55:16:74:09:e4:7a:ea:25:47:cb:ab:9b:9d:c1:d5:97:d2:
f9:e4:42:67:b2:2d:57:9a:1c:ec:ae:c5:b1:a7:43:84:e1:46:
68:84:d2:a6:b7:7d:a2:35:4b:e8:c1:2c:06:94:43:83:51:e1:
94:cf:fd:51:c0:61:43:2a:43:64:c2:ac:a7:01:3e:09:7a:f7:
dc:29:a7:f8:5a:2a:6c:72:91:a4:95:fc:e1:f4:df:9a:e5:da:
1c:3d:4e:0f:1e:0b:23:56:9c:c3:44:63:1b:ee:85:83:08:6f:
3c:cd:82:98:e9:cd:c3:eb:c5:98:51:19:c1:7b:69:38:c5:1e:
5a:83:68:de:1f:03:c1:c0:20:91:31:73:d0:6d:92:b1:91:7b:
18:df:b4:06:dd:4d:b3:ef:77:0f:ab:6b:7f:83:c7:75:31:db:
94:e3:15:bf:55:6c:b7:05:fc:72:34:72:02:01:8c:0a:39:3a:
3d:8e:6e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 09:43:31 2024 by rpki-client on console-fra.rpki-client.org