Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D70E8D24B45A11EEB0794B22C4F9AE02.roa
File: D70E8D24B45A11EEB0794B22C4F9AE02.roa (raw, json)
Hash identifier: GLZkPB4s7VJNVRFMxmffbUddYatVuMnc8Ihl2J/dl+k=
Subject key identifier: 2C:C4:AB:BD:D3:A6:42:6D:94:18:79:92:74:D5:62:4F:D9:92:F4:33
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8189
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D70E8D24B45A11EEB0794B22C4F9AE02.roa
Signing time: Tue 16 Jan 2024 10:34:34 +0000
ROA not before: Tue 16 Jan 2024 10:34:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134042
IP address blocks: 103.61.196.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.68.32.0/22 maxlen: 24
103.138.78.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 09:29:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33161 (0x8189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 16 10:34:34 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65a65bba-3090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:56:e0:24:eb:90:8c:4c:68:20:19:38:5a:d6:
d6:8a:68:70:30:3a:4e:f9:04:53:38:d1:21:24:d3:
e5:3f:0d:16:ae:90:db:71:65:42:26:57:26:02:f6:
6b:f2:d3:fc:7f:f0:7b:e1:df:ca:37:ab:8b:49:ef:
19:df:fe:4f:2f:2e:49:12:de:20:ac:18:57:d9:ba:
9b:84:ad:7d:f1:60:a3:ea:12:4c:fc:fb:be:0c:ae:
28:c1:a3:d3:37:11:96:b6:54:0b:08:32:10:fb:5b:
b1:8f:52:67:ba:f2:df:16:43:ad:eb:24:cd:16:53:
48:88:87:35:b3:9d:bc:fa:91:f7:52:11:8d:e3:86:
fd:a6:53:84:e8:05:d4:85:23:c5:b1:12:86:14:fe:
7d:a9:03:86:03:96:c5:63:e2:34:47:ab:4e:11:af:
da:0b:7d:c7:5a:c8:79:6c:9a:3f:92:92:1f:c8:70:
c6:d7:6a:f3:7e:b7:19:ff:ef:c4:ad:90:bc:ff:80:
cb:46:e4:63:13:a3:c5:11:93:aa:ce:f9:55:8f:99:
c3:54:e8:a3:c0:22:35:c5:bc:29:c0:a5:96:ab:53:
08:e8:c2:ac:7a:e8:43:a6:6e:0b:84:5e:93:57:a9:
ca:40:8b:14:f2:f7:6f:0e:61:12:17:74:e1:6b:f3:
86:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C4:AB:BD:D3:A6:42:6D:94:18:79:92:74:D5:62:4F:D9:92:F4:33
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D70E8D24B45A11EEB0794B22C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.61.196.0/22
103.68.32.0/22
103.138.78.0/23
Signature Algorithm: sha256WithRSAEncryption
21:0c:99:c0:43:5c:99:e1:f3:66:9d:82:df:1f:25:6d:fd:62:
0b:be:4a:a4:f6:43:e1:84:a2:22:86:2e:6b:73:6f:13:9c:b2:
74:2c:b8:69:3f:9b:4b:f7:db:5e:da:cd:0a:8a:d9:3d:ac:b6:
c1:c1:f9:80:3b:d2:b6:4a:41:4c:cb:83:02:f7:60:8d:f0:0f:
3c:5c:96:35:d2:7b:c2:6e:2b:6a:05:03:9b:5e:1a:89:28:89:
72:1e:73:03:20:a9:f0:b6:9a:e4:ff:60:82:77:90:ef:fa:60:
97:ea:1f:28:37:aa:da:aa:4e:e4:59:8a:1b:79:b0:ed:f6:8e:
1b:43:a7:0c:6c:00:43:c9:95:95:58:d3:68:b4:66:79:c9:5f:
2b:cc:05:e7:a5:11:fe:69:db:02:b3:6a:04:20:fb:a8:62:38:
f3:58:f7:05:15:1b:6b:4d:02:19:bb:01:84:89:ce:91:5c:fd:
8a:9f:14:48:fe:81:ca:b4:d2:c8:71:ce:7c:d6:a9:8c:4c:52:
a2:0c:5d:f9:48:4e:e3:c2:7b:e8:88:20:67:42:ba:b6:19:50:
67:21:4a:c5:92:ff:b0:67:5d:e5:fb:fd:64:f3:b9:c3:4b:6b:
42:83:6a:e3:35:65:dd:7c:dd:d2:40:6d:05:26:04:d6:cd:6e:
2c:51:d8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 12:05:17 2024 by rpki-client on console-ams.rpki-client.org