Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/F44A5204EDBE11EE81831062C4F9AE02.roa
File: F44A5204EDBE11EE81831062C4F9AE02.roa (raw, json)
Hash identifier: rPIqN3g9M//pjM5GFM7nRYLtY525w98t/87GEsybN2o=
Subject key identifier: 7E:EC:C4:DD:45:A0:02:5A:B0:0A:BE:00:D0:DD:05:3D:A3:81:7F:CA
Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B
Certificate serial: 16
Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/F44A5204EDBE11EE81831062C4F9AE02.roa
Signing time: Fri 29 Mar 2024 11:24:49 +0000
ROA not before: Fri 29 Mar 2024 11:24:49 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 150113
IP address blocks: 103.190.232.0/24 maxlen: 24
2400:9320::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 May 2024 07:25:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B
Validity
Not Before: Mar 29 11:24:49 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=6606a501-9ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dc:c4:63:79:6b:0d:35:e3:1d:b9:76:c5:9b:
1c:68:c1:59:4a:a8:6c:d5:1d:c6:47:3a:f6:9b:76:
bf:25:17:a4:a1:5f:bf:37:6b:66:92:11:1e:9a:4f:
f8:58:fb:4e:fa:96:3d:a2:16:02:97:ea:c7:04:72:
63:c1:55:f4:f3:4b:7d:5e:34:d2:72:87:d6:53:18:
86:15:eb:71:0b:27:aa:50:ee:cc:2f:23:0d:46:a3:
ea:f5:c9:86:df:66:c0:5f:4b:46:47:60:6f:81:4d:
9c:91:e2:47:10:ee:4a:ea:47:30:ab:ef:29:2d:e3:
98:63:e8:cf:f8:93:75:92:f8:e3:56:6d:92:4c:45:
0f:e5:05:4b:d6:79:e8:80:12:c3:45:d6:ed:08:39:
e7:51:a6:a0:69:6d:29:77:ff:20:7f:83:7a:93:d0:
db:f1:79:d8:13:11:55:cd:08:09:71:f0:1f:fd:06:
6c:e9:fa:e9:6a:8f:45:75:2c:1e:fa:9c:ac:ee:82:
05:d3:49:99:7a:26:f9:29:42:fb:d5:79:8a:9c:72:
88:81:36:17:d4:d2:89:57:97:11:92:78:c3:88:5b:
d3:bc:a8:f7:8a:46:a5:76:31:48:7e:32:bf:7f:99:
32:5b:e6:7f:6f:ba:ec:1b:43:ff:29:df:17:ea:72:
1c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EC:C4:DD:45:A0:02:5A:B0:0A:BE:00:D0:DD:05:3D:A3:81:7F:CA
X509v3 Authority Key Identifier:
keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/F44A5204EDBE11EE81831062C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.190.232.0/24
IPv6:
2400:9320::/48
Signature Algorithm: sha256WithRSAEncryption
33:a7:bc:d2:cd:54:f2:eb:04:c4:d9:94:ad:44:84:fa:16:d1:
b7:26:4e:b4:f4:ed:17:6e:12:8a:5c:ff:42:0c:d6:a4:dd:ac:
f2:26:9f:ab:1a:83:e9:34:fc:b4:9d:83:cb:af:2f:ea:bd:93:
62:a8:75:69:d5:b1:09:af:96:1a:3a:6a:9f:b8:5d:6c:79:36:
70:40:4a:ca:73:ec:d3:ac:c3:42:78:36:a3:eb:c5:bb:78:64:
10:ea:c7:d2:cf:1e:8f:9c:67:9f:29:32:83:b4:43:3b:c5:60:
6f:27:16:9f:37:5c:62:9d:17:be:dd:d4:ff:69:c5:1a:ca:c7:
e3:d4:fb:8f:2b:52:bd:6a:be:98:2c:6c:1f:04:1c:ae:b3:87:
53:cf:b0:11:ed:fd:83:09:2c:17:23:71:e9:b7:13:f3:31:3a:
12:d1:1e:eb:c7:e9:8f:09:b7:85:d4:46:3d:a2:14:61:73:21:
51:c8:78:4c:8b:d4:ca:e2:3e:0b:98:f4:71:61:e8:97:81:3b:
ae:1d:83:7f:76:a6:33:44:b7:e7:b9:3b:08:27:92:0b:e9:92:
f7:01:32:f9:a1:e4:e0:82:d3:a1:14:aa:67:cf:13:04:6f:4d:
c1:7e:3f:86:39:8d:63:86:85:8a:de:22:92:45:e6:de:dc:28:
3a:09:c1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 10:55:45 2024 by rpki-client on console-fra.rpki-client.org