Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/BEDA6E34B3B511EA8BFADC14C4F9AE02.roa
File: BEDA6E34B3B511EA8BFADC14C4F9AE02.roa (raw, json)
Hash identifier: 0LkYt0vFkwkvlouaKhET5HIGrWzvR9VOYDIE1Qb1L9A=
Subject key identifier: 06:E8:03:A5:F6:24:B9:43:D8:E7:91:AC:F1:AF:B9:C5:5B:F6:FB:D2
Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Certificate serial: 103E
Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/BEDA6E34B3B511EA8BFADC14C4F9AE02.roa
Signing time: Wed 14 Dec 2022 18:35:45 +0000
ROA not before: Wed 14 Dec 2022 18:35:45 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 132839
IP address blocks: 103.200.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 10:55:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4158 (0x103e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Validity
Not Before: Dec 14 18:35:45 2022 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=639a1780-5405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:90:86:93:9f:e2:f4:e6:eb:a1:7b:9c:59:0c:
d2:02:04:b4:1a:d8:1e:48:17:64:fc:96:7d:d5:3f:
a1:a1:82:b4:06:62:1b:df:65:9b:b7:63:69:1f:e1:
64:37:3f:3a:d5:ae:d7:88:ce:75:41:ef:19:b7:28:
de:b6:ba:39:88:70:df:88:b1:28:64:16:4a:4c:06:
a4:e2:08:cb:52:c0:9d:fd:f1:a5:92:88:7c:e7:3f:
42:b1:e1:06:80:bb:65:60:80:fb:13:bc:cb:d8:2e:
ad:cb:47:7d:bf:01:bd:19:79:34:08:1e:ac:de:b5:
26:48:18:df:38:11:1a:02:df:b3:99:b7:1c:e7:a2:
bf:ce:28:80:ee:9b:f0:6b:8b:98:4a:70:50:ed:70:
58:80:e1:45:3d:35:36:5e:ac:9b:6b:96:7a:a1:ef:
01:2a:ab:cf:0c:81:9d:9e:f2:9f:4c:b4:04:19:87:
6f:55:e9:db:f0:40:ad:19:f4:9f:5c:63:6a:0a:69:
79:cb:8f:05:d1:9d:e1:9e:a9:66:6d:57:bd:6d:f7:
3b:38:2e:05:32:ff:14:c4:98:a6:a3:f0:a5:33:43:
66:75:86:bc:b9:82:d7:43:20:30:b9:a6:1a:35:46:
99:c0:e2:da:a9:2e:e6:ad:4c:e2:c9:5d:fb:49:60:
09:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E8:03:A5:F6:24:B9:43:D8:E7:91:AC:F1:AF:B9:C5:5B:F6:FB:D2
X509v3 Authority Key Identifier:
keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/BEDA6E34B3B511EA8BFADC14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.200.114.0/24
Signature Algorithm: sha256WithRSAEncryption
32:59:15:8a:af:81:78:39:47:c6:95:b5:92:76:c0:27:2c:78:
b2:1d:84:c3:f8:75:f5:b0:b7:15:9b:d4:e1:29:47:db:48:00:
2f:65:eb:58:84:20:7e:20:a7:ed:dd:e3:fd:f3:0e:a7:fe:66:
0e:d0:06:5c:2f:cc:54:c2:d0:99:5b:be:f5:c0:25:96:f4:84:
77:18:3c:c2:ac:c5:12:57:71:4b:bc:7a:ac:82:0c:3f:8f:52:
70:09:0c:8c:6f:f3:66:ca:96:f0:9e:03:9a:cf:89:ba:fe:79:
e8:54:7c:e2:73:3e:c7:5b:ca:ed:d4:e4:95:05:8f:a4:f3:6c:
1a:a9:50:2c:7e:92:bd:c3:12:62:4a:e6:db:56:8a:d4:b9:55:
05:23:c0:c1:cb:08:01:cf:78:e8:e3:ed:22:6a:e1:cd:c6:b0:
11:cc:58:4f:30:07:90:9e:a7:33:4b:d8:b0:c9:cd:7c:3d:d7:
fa:d2:6e:86:5e:08:4d:44:5b:d0:0d:09:71:6c:b3:29:e2:a6:
f6:f3:7d:07:c8:db:0a:69:2b:cd:18:f6:1e:a4:8b:bd:26:40:
ed:a4:8f:61:50:6f:df:14:c8:45:b7:0a:b7:42:21:d6:57:5c:
ce:6c:09:ae:6b:98:79:44:af:12:8c:b7:98:61:97:fb:57:0a:
cb:10:ae:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 17 15:50:40 2024 by rpki-client on console-ams.rpki-client.org