Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194437/9EE26F901EBB11E98672BB64C4F9AE02/7B1F34FE1EBF11E98AA24870C4F9AE02.roa
File: 7B1F34FE1EBF11E98AA24870C4F9AE02.roa (raw, json)
Hash identifier: RAjPaN25uQB9B7uH9YzPEJVbt+LzoDIE020j5YWyze0=
Subject key identifier: ED:41:D2:62:35:3E:4F:67:AF:E0:B2:00:C6:BE:BB:5B:DE:E8:77:80
Certificate issuer: /CN=A9194437/serialNumber=0EDFF4FE44298576F6EF6D37671268026886818A
Certificate serial: 0F83
Authority key identifier: 0E:DF:F4:FE:44:29:85:76:F6:EF:6D:37:67:12:68:02:68:86:81:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dt_0_kQphXb27203ZxJoAmiGgYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194437/9EE26F901EBB11E98672BB64C4F9AE02/7B1F34FE1EBF11E98AA24870C4F9AE02.roa
Signing time: Sat 22 Jul 2023 17:54:50 +0000
ROA not before: Sat 22 Jul 2023 17:54:50 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 14618
IP address blocks: 103.238.156.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 31 Jul 2024 00:15:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3971 (0xf83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194437/serialNumber=0EDFF4FE44298576F6EF6D37671268026886818A
Validity
Not Before: Jul 22 17:54:50 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64bc17e9-d94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ee:29:0d:94:fe:db:95:7c:e2:dd:8c:f9:6c:
b8:17:36:6c:26:3d:42:3e:27:17:a0:4b:37:b5:0b:
1b:3b:57:9b:36:4e:d0:cc:32:c0:83:f9:92:f3:25:
4f:e6:fa:e3:99:97:a3:1e:f2:ad:cf:36:29:c8:0e:
28:63:b7:ba:4e:0b:a2:ab:8f:18:9c:7b:31:e0:24:
76:9c:02:92:1c:bf:90:4f:8d:ce:65:1c:53:3a:17:
26:72:41:1b:ef:71:28:69:65:0d:6a:f6:f1:57:37:
ef:ea:6b:2c:43:0c:8c:7a:8f:4f:0a:5a:7d:3d:af:
3e:a4:be:09:c2:44:fe:2a:62:60:c8:a5:4a:31:a7:
4d:fa:c1:d0:63:e8:bd:e7:5b:1a:ec:8f:6a:25:21:
5a:61:9a:b7:d4:e0:e1:21:3c:01:7f:f1:3e:1f:1c:
24:70:7e:db:ba:aa:48:be:72:1a:5b:c2:18:d9:f6:
45:39:54:20:30:7d:aa:b5:29:d5:34:c3:6c:b5:bb:
d2:ef:d2:b4:32:39:54:84:75:76:54:84:74:12:58:
05:6d:4f:35:e3:09:60:61:ec:76:f7:3c:d8:fe:a1:
c8:1a:6d:e2:96:34:5f:0d:67:c1:1a:04:a0:3f:85:
e7:e8:ac:32:02:4a:b2:65:fb:49:26:5f:8a:74:26:
54:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:41:D2:62:35:3E:4F:67:AF:E0:B2:00:C6:BE:BB:5B:DE:E8:77:80
X509v3 Authority Key Identifier:
keyid:0E:DF:F4:FE:44:29:85:76:F6:EF:6D:37:67:12:68:02:68:86:81:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194437/9EE26F901EBB11E98672BB64C4F9AE02/Dt_0_kQphXb27203ZxJoAmiGgYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dt_0_kQphXb27203ZxJoAmiGgYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194437/9EE26F901EBB11E98672BB64C4F9AE02/7B1F34FE1EBF11E98AA24870C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.238.156.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:1c:2e:41:68:ef:7a:b5:c9:c5:ab:14:09:75:03:85:ce:3c:
a5:db:7f:e6:58:15:b8:66:c1:c7:9d:f0:af:95:9a:d5:e5:7c:
e7:42:d7:48:b5:34:ce:1a:1f:8f:74:1b:d2:f0:ed:ae:ce:02:
e6:2d:08:c7:0d:ee:fa:2d:e5:b6:e2:03:34:7c:ce:a0:5f:4a:
c1:51:1a:f7:e3:a9:10:9c:0e:f6:7a:53:be:b6:a2:ab:d8:e0:
67:69:42:1f:6f:72:d4:65:33:e5:3e:91:57:7c:7d:a6:1b:7f:
53:0b:11:0e:1b:be:4f:df:3d:42:46:ca:d2:bb:89:f7:de:ae:
ae:e9:44:31:98:7b:9f:77:1a:e8:c1:f8:5a:01:02:31:5e:01:
93:c7:66:22:5a:55:10:e0:28:f6:cc:ec:5d:d1:81:ff:95:b1:
84:8d:c1:10:b4:ae:44:c4:d0:f2:c9:78:3c:26:5d:01:28:ed:
2c:e1:58:5e:11:86:79:b0:e9:fd:72:d1:6b:49:aa:e8:03:09:
45:51:34:ea:3c:c0:1b:22:46:1a:cb:f1:f4:3f:7e:60:29:93:
47:96:87:7e:b8:01:1c:81:50:86:0a:fe:44:35:7f:2e:fb:33:
fd:d8:d6:8e:47:91:40:e1:c2:a9:38:24:58:50:c9:8a:8e:a1:
9d:31:01:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:15:27 2024 by rpki-client on console-fra.rpki-client.org