Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/EB775F748AC711ED8780A55FC4F9AE02.roa
File: EB775F748AC711ED8780A55FC4F9AE02.roa (raw, json)
Hash identifier: flT6rlcQzCMl1+Krxyy8zKB/GQ5JqN++uRc6eIv9WzE=
Subject key identifier: F3:4F:02:9C:2E:FF:90:B4:57:1E:AB:18:89:05:F2:BA:96:07:2E:EF
Certificate issuer: /CN=A91B7897/serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B
Certificate serial: 0131
Authority key identifier: 2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/EB775F748AC711ED8780A55FC4F9AE02.roa
Signing time: Wed 01 Nov 2023 04:55:22 +0000
ROA not before: Wed 01 Nov 2023 04:55:22 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 147050
IP address blocks: 103.141.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Mar 2024 08:24:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305 (0x131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7897/serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B
Validity
Not Before: Nov 1 04:55:22 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=6541da3a-f93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:55:06:34:a1:9c:e5:53:98:1b:c5:1a:2b:
ef:69:70:a6:f7:23:8b:ad:96:c9:99:32:25:5e:40:
35:2f:6e:61:67:18:f1:05:8a:e1:6a:98:38:23:3d:
08:a3:42:87:84:53:76:77:06:20:2c:c8:56:2c:ed:
6a:c0:41:ae:1a:53:3e:fc:1f:a6:69:54:31:c2:28:
3b:3e:d7:a7:ec:6a:72:06:a5:3a:11:12:40:fb:c7:
44:c0:5a:a5:24:02:a7:94:2f:4c:e8:b9:04:42:ac:
d3:0a:79:78:28:1c:40:91:28:d0:4c:fc:c8:83:69:
5e:63:4d:20:74:ef:74:91:08:9b:f6:42:32:ad:0a:
f8:1e:bb:bc:46:ca:bb:ed:98:32:55:9c:22:20:58:
82:6d:be:e6:65:91:3c:c4:47:bf:46:51:ea:f9:89:
90:72:e4:f3:9b:96:5a:29:4f:9f:48:19:4f:62:3a:
c5:b2:3b:de:fb:30:bf:1c:b0:eb:8b:c8:af:43:36:
ad:0e:5b:7d:78:ef:fd:68:3f:8a:a7:fd:19:e3:53:
c7:7d:7d:3b:f5:95:b8:c0:ae:7b:dc:d0:00:b9:49:
40:59:ca:0e:a2:8d:c1:ed:9f:47:37:1f:44:bd:c4:
0e:31:6d:1b:77:e4:4f:2c:ae:b9:c3:e0:39:c6:17:
6c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4F:02:9C:2E:FF:90:B4:57:1E:AB:18:89:05:F2:BA:96:07:2E:EF
X509v3 Authority Key Identifier:
keyid:2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/EB775F748AC711ED8780A55FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.201.0/24
Signature Algorithm: sha256WithRSAEncryption
40:68:73:ce:f9:f4:2b:eb:61:08:ff:a7:8e:d6:f2:1e:e9:fb:
2c:a3:0f:d5:c8:b2:c2:21:b8:a6:5e:61:c6:2a:aa:a1:4c:02:
e8:69:3f:40:a6:6a:66:49:fa:34:a2:c0:1f:5d:c9:7f:a0:bd:
57:af:71:7b:ff:23:4d:35:46:8c:1c:c3:08:4f:45:8f:f2:c3:
b3:65:27:10:ff:9d:35:94:d3:e2:c2:93:8e:ac:fe:2c:56:e0:
ea:19:d4:eb:6e:2d:7d:d2:50:9b:2e:c3:66:a1:16:f6:8f:eb:
43:bc:69:63:58:53:2b:d0:0f:c4:74:f9:b9:45:68:10:5c:7e:
cc:e5:6e:6a:d3:be:30:72:0f:ea:4d:f9:4f:ed:73:de:aa:0a:
e9:ab:6d:0d:17:f2:d1:d3:89:73:d8:f8:bb:ad:47:44:ec:ae:
65:46:f0:ab:db:e2:b0:96:80:3f:13:e4:71:d2:27:07:9d:62:
d0:fa:2d:fd:df:b0:f3:a6:88:a8:81:5b:1f:de:b5:33:de:e0:
97:f7:27:21:a4:8d:ca:80:bc:ab:8a:e2:10:2b:ac:17:b2:9a:
e8:24:ec:b6:17:96:74:d5:6a:97:2c:2b:ff:cc:ac:2d:14:81:
37:95:93:87:bc:a2:5e:c1:bb:eb:0d:66:12:19:88:9a:6c:7c:
d0:b4:fe:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 23 09:21:22 2024 by rpki-client on console-fra.rpki-client.org