Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/82B97A84A89D11EBA307B461C4F9AE02.roa
File: 82B97A84A89D11EBA307B461C4F9AE02.roa (raw, json)
Hash identifier: FkV2+GRF4lzOEiujRAR7f79TvY6wGugCbwzRk9Zgw84=
Subject key identifier: C1:8D:1F:D3:03:13:1E:44:3A:77:E1:A3:69:E5:DB:DD:7A:1D:C0:63
Certificate issuer: /CN=A91ACF30/serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581
Certificate serial: 0683
Authority key identifier: D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/82B97A84A89D11EBA307B461C4F9AE02.roa
Signing time: Tue 04 Jul 2023 22:08:24 +0000
ROA not before: Tue 04 Jul 2023 22:08:24 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 132837
IP address blocks: 103.248.108.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 25 Mar 2024 00:54:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1667 (0x683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ACF30/serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581
Validity
Not Before: Jul 4 22:08:24 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64a49858-6f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:99:b5:a9:24:41:dc:c1:35:fd:4b:13:6e:
ab:02:7e:a8:13:58:53:03:6d:d5:a0:ca:c2:31:02:
cb:f7:e5:f8:b8:ff:95:a0:4b:fe:37:9d:9d:ec:12:
7e:e2:24:b2:14:1c:b0:de:95:67:9b:14:8c:72:27:
cc:3b:0d:d5:10:a4:ce:9e:8e:84:ff:40:e6:a2:06:
91:9a:6d:45:7a:83:51:09:58:bb:19:fc:16:20:2c:
d7:98:9e:a4:8a:7a:aa:df:df:48:2c:a7:02:c1:41:
89:e6:c7:37:8a:e5:3f:a2:03:0d:83:9a:17:41:98:
88:34:3b:33:6e:a6:9f:7f:d0:f6:de:7e:8e:58:d2:
33:b0:94:39:fc:a3:60:8b:6a:22:8f:0f:f3:60:49:
de:17:fb:26:a4:1e:b4:75:00:2c:21:11:30:3a:1c:
6f:c7:5f:f3:4a:bf:b9:fa:1e:16:54:a7:f1:55:67:
5d:36:62:6c:1a:81:21:f1:3a:36:bb:c6:e5:62:7a:
cf:53:e3:21:e0:ab:43:3d:cf:9a:01:eb:6a:dd:30:
fc:95:42:2a:09:be:f4:ac:93:10:e0:ab:2a:dd:45:
58:f5:b1:a1:ff:7e:f3:f9:52:e6:cc:54:97:54:12:
ff:fe:af:19:98:26:9d:4f:51:36:96:e6:89:65:55:
32:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8D:1F:D3:03:13:1E:44:3A:77:E1:A3:69:E5:DB:DD:7A:1D:C0:63
X509v3 Authority Key Identifier:
keyid:D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/82B97A84A89D11EBA307B461C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.248.108.0/22
Signature Algorithm: sha256WithRSAEncryption
07:8f:e3:c8:62:dd:2e:dd:74:68:ca:eb:71:71:05:54:01:c2:
81:1a:e0:c0:0b:7c:83:c7:aa:f2:32:4b:5f:62:25:b8:b6:f6:
c1:be:da:20:6a:b5:ac:51:d6:97:d0:0b:be:a1:ed:d2:cd:59:
89:51:71:ec:35:c9:2e:83:96:5c:40:65:29:f2:b8:cc:0c:5a:
40:44:c5:b7:83:e6:32:81:cd:a3:f8:60:ff:f8:b3:de:4d:8c:
26:d5:a3:c4:68:fd:97:19:1f:57:7c:d4:c7:4f:b4:f2:ad:33:
12:a4:15:b6:02:af:5f:a8:c0:19:cc:d2:95:79:f0:9f:4e:4d:
97:5a:35:bb:91:29:1d:5b:b5:ef:77:b7:05:cb:a0:7c:5e:f7:
b4:cf:f7:08:56:07:bb:40:db:d5:89:04:b9:fb:b0:03:d6:92:
3b:7c:14:48:ba:08:76:9d:10:c3:c8:99:ad:5e:f9:50:99:5b:
40:d8:ed:ed:a3:9d:9d:2c:d8:9f:4b:f9:89:de:e9:18:17:eb:
9d:c5:8c:8e:76:be:a1:ff:01:6a:0f:16:24:be:94:f3:00:b4:
82:e5:34:d7:5b:80:7f:e1:79:3c:90:5a:c1:23:82:0f:80:59:
29:61:8f:2a:4b:d4:9a:07:eb:35:9d:3e:59:7f:36:87:12:56:
f3:8a:3b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 04:10:50 2024 by rpki-client on console-fra.rpki-client.org