Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/D6CAA51AF49711ED920FD57DC4F9AE02.roa
File: D6CAA51AF49711ED920FD57DC4F9AE02.roa (raw, json)
Hash identifier: sMAjR8aGlSEmiohSHpWJHH+RXV8EYEhop6zb7NoZszU=
Subject key identifier: BB:80:28:AC:13:5D:07:D9:E6:D3:A7:2A:86:3D:D3:04:27:B1:EE:7F
Certificate issuer: /CN=A91B0720/serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D
Certificate serial: 0292
Authority key identifier: 1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/D6CAA51AF49711ED920FD57DC4F9AE02.roa
Signing time: Sun 03 Dec 2023 15:09:49 +0000
ROA not before: Sun 03 Dec 2023 15:09:49 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 149058
IP address blocks: 103.138.146.0/23 maxlen: 23
103.138.146.0/24 maxlen: 24
103.138.147.0/24 maxlen: 24
2407:3b40::/32 maxlen: 32
2407:3b40::/36 maxlen: 36
2407:3b40:1000::/36 maxlen: 36
2407:3b40:2000::/36 maxlen: 36
2407:3b40:3000::/36 maxlen: 36
2407:3b40:4000::/36 maxlen: 36
2407:3b40:5000::/36 maxlen: 36
2407:3b40:6000::/36 maxlen: 36
2407:3b40:7000::/36 maxlen: 36
2407:3b40:9000::/36 maxlen: 36
2407:3b40:a000::/36 maxlen: 36
2407:3b40:c000::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0720/serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D
Validity
Not Before: Dec 3 15:09:49 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=656c9a3d-504a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4a:41:49:b6:d2:96:e4:3c:09:a5:40:09:e9:
f4:76:36:ba:30:ae:53:9d:e9:bd:59:8d:b4:d5:7f:
7c:6b:c2:fd:8c:ce:7f:98:60:2f:e6:31:f3:8f:b2:
12:bd:7e:7e:36:17:de:90:3c:67:ce:75:5c:e3:ff:
b5:13:5b:d2:b3:77:dc:04:ad:d9:88:79:a8:aa:94:
02:25:bb:cf:ce:e2:f0:28:59:52:01:ce:f1:36:f5:
29:99:2e:be:33:83:64:4b:46:ce:a6:d2:33:47:d0:
27:44:17:2b:a8:e7:c7:a2:38:bf:0c:13:4e:a6:36:
a6:ef:b7:c7:45:bb:c3:f9:2c:0f:ce:dc:bb:4f:e9:
a0:b6:59:23:7e:24:ed:01:84:37:e8:63:ba:0e:8f:
7f:14:9b:e7:ae:3a:2e:67:65:6e:90:0c:88:15:9c:
e0:49:91:da:69:97:5c:fb:31:2a:6e:48:ee:f5:25:
e6:0d:64:15:5f:85:59:a4:20:81:db:d7:b9:84:86:
52:89:13:70:16:f9:7d:39:56:7a:d2:ed:e3:58:ce:
09:be:67:d4:a6:ac:ce:5d:d6:a7:ff:82:b3:05:30:
f8:b9:5d:3f:a0:f5:0b:99:25:66:09:ea:d7:20:1a:
f4:89:96:66:d4:fa:2b:0f:6e:47:b3:c6:47:d4:c3:
96:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:80:28:AC:13:5D:07:D9:E6:D3:A7:2A:86:3D:D3:04:27:B1:EE:7F
X509v3 Authority Key Identifier:
keyid:1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/D6CAA51AF49711ED920FD57DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.146.0/23
IPv6:
2407:3b40::/32
Signature Algorithm: sha256WithRSAEncryption
5d:29:84:cd:59:b2:84:b4:72:36:d1:96:51:6c:12:1c:89:92:
21:59:1f:bf:e4:50:38:56:b8:b7:55:86:1a:24:42:63:58:c4:
24:e7:1f:58:63:d9:e0:22:b1:04:1b:54:6c:84:6b:5a:57:5f:
e7:48:8d:ca:74:3a:d4:05:a1:65:dc:10:d7:ba:54:b0:3e:75:
e5:fa:19:f3:d1:41:66:7a:cd:b2:fa:b8:58:a2:84:2a:92:95:
98:fe:52:e5:bc:c4:23:37:24:8e:a1:d1:35:3e:b5:14:25:e9:
d0:c4:cc:dc:8a:3f:85:e6:8b:71:4d:00:7e:27:d5:6f:ea:f8:
97:a1:7f:08:99:15:5a:e5:42:60:e7:6c:b3:20:a2:2f:61:93:
79:55:bf:0d:b6:b1:ef:e9:c1:61:ae:17:8e:8e:6e:75:92:92:
ba:14:04:65:16:c7:58:22:87:6c:cb:68:1f:bf:fd:a5:06:1a:
d6:f2:52:47:64:f1:c4:39:57:b5:4c:ca:71:62:07:c3:30:31:
53:ea:a5:78:e7:02:02:ec:38:d9:20:fd:a5:3d:a7:f5:0b:bc:
92:4f:aa:cb:b2:b1:22:33:be:03:ae:d2:1c:96:b1:73:ab:ea:
f0:f5:65:dd:95:2c:ea:ce:04:a9:50:f4:b0:f6:ad:53:3e:f2:
0a:c1:08:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 3 16:08:35 2023 by rpki-client on console-ams.rpki-client.org