Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/C50BC9EAC0BB11EDB310CF2FC4F9AE02.roa
File: C50BC9EAC0BB11EDB310CF2FC4F9AE02.roa (raw, json)
Hash identifier: QHnzDjraOBjT+qMoaogudO79AFOrES6BGakGFrXO42M=
Subject key identifier: 25:04:46:4F:51:26:A0:1D:01:B2:59:44:AB:35:41:5D:CE:78:32:04
Certificate issuer: /CN=A91B0720/serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D
Certificate serial: 0230
Authority key identifier: 1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/C50BC9EAC0BB11EDB310CF2FC4F9AE02.roa
Signing time: Fri 09 Jun 2023 05:16:29 +0000
ROA not before: Fri 09 Jun 2023 05:16:29 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 139042
IP address blocks: 103.138.146.0/24 maxlen: 24
2407:3b40::/32 maxlen: 32
2407:3b40:8000::/36 maxlen: 36
2407:3b40:b000::/36 maxlen: 36
Validation: Failed, certificate revoked on Sun 03 Dec 2023 15:07:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0720/serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D
Validity
Not Before: Jun 9 05:16:29 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6482b5ad-2e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dd:de:20:e9:64:dc:e5:5b:59:84:e7:e0:22:
1d:7a:a7:93:76:1b:20:ea:4e:d8:af:e0:04:10:98:
fe:ba:b0:f6:43:07:35:ea:5f:da:19:1d:15:63:77:
3e:eb:84:9d:15:fc:f0:8a:45:fe:ee:39:98:a7:65:
3e:8c:78:cd:0e:fd:90:7a:4b:c6:39:1c:fb:57:32:
8d:c9:15:91:c4:2b:19:ab:dc:90:87:53:2e:f1:f9:
70:16:06:c2:39:54:fe:f0:51:98:93:30:92:3f:63:
08:68:b1:59:94:20:34:41:81:e7:72:70:72:a2:0c:
36:6b:94:6d:3e:07:46:2f:4d:74:d1:84:ef:14:ea:
88:52:e9:7b:74:40:72:17:5f:ba:c6:1d:32:74:39:
fd:36:b3:50:61:ca:df:03:e0:e8:39:f4:c1:d9:98:
3d:22:7d:48:f3:57:95:59:3e:87:45:8f:92:c3:1c:
78:21:f8:7f:40:89:93:5f:62:08:2d:9e:32:75:81:
74:0b:6f:21:c0:93:c3:4f:87:ac:7f:0a:39:db:8b:
84:d5:5a:7f:7c:22:27:a5:a0:83:11:f5:30:eb:9a:
13:07:bb:be:c4:c4:7c:e7:c7:67:db:e4:b3:99:cd:
6d:6a:08:30:14:da:5f:a1:fb:83:88:5a:8f:95:f9:
3c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:04:46:4F:51:26:A0:1D:01:B2:59:44:AB:35:41:5D:CE:78:32:04
X509v3 Authority Key Identifier:
keyid:1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/C50BC9EAC0BB11EDB310CF2FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.146.0/24
IPv6:
2407:3b40::/32
Signature Algorithm: sha256WithRSAEncryption
cc:00:f7:30:af:7f:fa:cd:67:0a:11:f5:16:73:0f:05:c0:f2:
82:ac:43:59:67:4d:58:9e:48:c9:b5:5d:98:44:9b:71:8c:a2:
00:0a:e8:54:0b:6c:33:44:9f:78:d2:43:76:54:f0:9a:37:63:
16:97:30:e2:fb:63:df:67:95:8e:54:f3:40:b2:4f:e8:b8:4c:
d4:f2:ce:30:34:7f:ae:13:dd:b2:3f:00:c7:71:dc:5e:52:46:
2b:a5:67:dc:a0:a1:dd:79:12:ca:37:6c:15:ca:b4:60:2a:47:
f4:0a:e6:02:dc:4c:2b:2a:45:60:ba:ec:2e:10:bd:3a:bd:5e:
20:13:dc:b4:e0:e8:f3:71:57:bd:50:53:ad:43:d5:76:90:f2:
2b:ac:5a:8a:58:63:02:51:f7:4d:52:6a:40:51:64:14:42:6d:
c7:34:83:5e:d3:40:1f:a5:86:ba:9b:68:20:4b:fb:26:f4:b4:
2a:af:8f:a8:63:04:b8:82:e8:f6:40:44:77:c7:70:b1:03:fe:
1d:a7:cd:19:05:3b:27:dc:96:37:19:85:c2:da:75:d6:f7:d9:
5d:aa:fd:8f:3b:a8:83:cb:ab:25:b1:a3:e2:44:7f:12:dc:2f:
9f:6c:af:d7:36:ff:45:99:26:d1:82:52:08:fe:1b:9d:c7:a6:
b2:2c:ca:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:56 2024 by rpki-client on console-ams.rpki-client.org