Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/A69A7F62B64511EEAF585E33C4F9AE02.roa
File: A69A7F62B64511EEAF585E33C4F9AE02.roa (raw, json)
Hash identifier: cvjUGpTuB/jIDGy8dk4Gs8l8AkAqaHVOIs9kEhkRGq4=
Subject key identifier: 3C:BA:96:41:64:89:29:D8:38:33:0D:08:73:82:EF:FF:CA:B7:CC:F8
Certificate issuer: /CN=A919495D/serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C
Certificate serial: 03B5
Authority key identifier: 27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/A69A7F62B64511EEAF585E33C4F9AE02.roa
Signing time: Thu 18 Jan 2024 21:07:56 +0000
ROA not before: Thu 18 Jan 2024 21:07:56 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 141432
IP address blocks: 103.174.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jan 2024 11:39:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949 (0x3b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919495D/serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C
Validity
Not Before: Jan 18 21:07:56 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65a9932c-b25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:7d:98:09:6f:f1:de:ca:72:c0:45:9b:3f:
6f:9b:31:a9:9b:db:97:0e:78:aa:5b:c0:2e:66:31:
66:af:98:b7:f1:aa:1c:29:83:d9:c9:96:bb:17:b4:
eb:d0:ec:af:a6:df:4e:82:a7:7b:64:ba:57:e7:b5:
71:f5:6d:c5:9f:5b:f5:ae:14:43:12:d7:2f:9e:31:
db:a0:bd:db:ea:b3:70:54:20:06:7b:7e:4c:ae:58:
2d:ca:f5:8a:8a:7b:08:15:8a:57:75:85:9e:8c:62:
32:67:a4:44:5c:cf:d2:69:53:36:15:ab:6f:bd:0f:
97:b7:ef:4c:a1:b2:ac:2d:12:a3:bd:b7:e6:42:21:
09:bb:6b:04:f8:9e:3b:50:1d:36:79:75:a3:73:ad:
f6:fd:dd:3e:c7:70:b9:a1:15:ed:9b:35:a5:3d:e6:
54:a5:c3:b9:59:4e:e8:50:58:4c:08:61:bf:88:f6:
a5:10:7b:55:d9:5b:a0:e2:de:6d:b2:15:5d:9a:81:
8c:66:a4:e4:f0:c7:6d:6a:5d:42:2a:f1:dd:5d:51:
06:9b:91:3f:e2:31:15:cf:bb:55:9a:ef:f1:a2:e4:
f1:d2:15:91:8b:03:df:71:33:3c:7a:ed:a9:3a:8d:
7a:cf:44:09:97:3c:2e:90:35:d4:c8:54:4e:cb:dd:
5b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BA:96:41:64:89:29:D8:38:33:0D:08:73:82:EF:FF:CA:B7:CC:F8
X509v3 Authority Key Identifier:
keyid:27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/A69A7F62B64511EEAF585E33C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.207.0/24
Signature Algorithm: sha256WithRSAEncryption
94:fe:35:81:34:8f:6f:1a:1e:16:35:2e:70:68:ee:6c:99:5a:
c9:66:67:da:82:11:9a:c8:e9:47:45:c3:f6:ff:74:98:1a:15:
70:25:78:ea:0f:b2:5c:1e:b1:75:db:9c:ca:a4:30:1b:14:f7:
c4:81:7f:8d:f3:be:5b:08:bb:c2:31:e2:32:d3:7e:2c:28:80:
19:a6:5f:47:ff:06:45:09:3b:ac:f7:ca:7c:da:62:e2:4c:c6:
61:73:73:66:56:a7:99:65:0d:de:cc:a4:4c:41:e6:4a:27:ce:
32:56:27:5b:22:a7:7e:7c:d7:a0:3e:0f:99:67:6c:37:ae:2f:
e2:6a:5b:7a:6a:c7:5d:81:9a:09:3f:37:0e:8a:39:a5:cb:fb:
c5:c2:6d:62:7e:8a:34:8f:80:91:1f:7d:2b:73:e1:c1:93:60:
4a:c9:89:e5:5c:22:88:cc:94:50:b6:a3:b3:3e:52:8e:6b:f6:
1d:02:34:a1:88:8d:03:d1:9d:e2:d1:6e:c9:cd:84:84:63:ce:
a9:59:b2:25:71:35:92:bf:10:34:b2:13:aa:9b:92:16:ae:26:
30:1c:9b:fd:56:0a:ea:7a:65:fa:30:04:33:b5:11:26:fb:e6:
1a:58:52:ed:76:25:97:22:f4:f8:60:82:17:42:ee:d7:4a:f6:
c3:34:1a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 28 14:06:56 2024 by rpki-client on console-fra.rpki-client.org