Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/3A8A8C86B62211EE89D32B53C4F9AE02.roa
File: 3A8A8C86B62211EE89D32B53C4F9AE02.roa (raw, json)
Hash identifier: 4CiMjanP8eecaYBUJuqCcT5WEOWNKpb6ukG86098L+4=
Subject key identifier: 41:EA:2A:09:28:FB:38:B9:C0:46:5B:55:47:DF:C2:A4:0E:B2:AE:C2
Certificate issuer: /CN=A91BE096/serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4
Certificate serial: 0F90
Authority key identifier: 4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/3A8A8C86B62211EE89D32B53C4F9AE02.roa
Signing time: Tue 06 Feb 2024 13:19:56 +0000
ROA not before: Tue 06 Feb 2024 13:19:56 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 132429
IP address blocks: 103.20.232.0/23 maxlen: 23
103.75.20.0/24 maxlen: 24
103.75.21.0/24 maxlen: 24
202.61.106.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 06 Feb 2024 19:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3984 (0xf90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE096/serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4
Validity
Not Before: Feb 6 13:19:56 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65c231fc-0318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:43:15:4d:a3:2a:67:a6:af:e3:26:4c:4c:b3:
e3:5c:dc:69:78:c0:29:cc:61:71:81:44:8a:a6:92:
d1:81:be:88:a9:63:db:f0:49:5d:6c:91:f6:ab:39:
bf:6b:83:d8:0e:4b:e0:aa:01:0e:68:11:ac:4d:29:
a1:ca:3a:ef:92:fb:b2:b4:fc:92:89:b0:ce:ce:67:
74:a4:18:bf:36:b3:d1:41:11:e7:cf:5c:f0:ef:4a:
29:6c:14:8d:65:27:c0:b1:c8:c7:1d:e5:5a:0a:64:
cc:e9:8e:e3:6d:44:7b:96:f7:3a:3c:65:a0:66:ed:
b4:59:39:e9:af:ac:f2:c0:f1:5c:63:e9:55:46:f3:
f1:df:ee:ce:63:05:c4:21:95:c7:43:3c:c8:a8:fc:
e7:90:07:5a:c7:dd:42:b8:65:e4:5b:f9:37:ea:3e:
b8:26:5d:bb:48:7d:b7:a4:61:28:6c:3c:26:05:8b:
f9:87:3a:a9:e9:78:ba:d3:69:7c:2d:97:02:38:34:
b7:76:c1:8f:8e:31:33:d1:6e:ad:23:d3:44:9f:63:
cf:62:f6:c0:59:4e:d4:bf:62:6a:1d:43:c6:e9:e5:
de:57:c9:21:41:a6:47:15:89:66:04:d7:63:f6:9a:
b9:25:2f:17:c6:3d:c9:2a:0e:c1:2b:ae:08:42:ac:
01:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EA:2A:09:28:FB:38:B9:C0:46:5B:55:47:DF:C2:A4:0E:B2:AE:C2
X509v3 Authority Key Identifier:
keyid:4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/3A8A8C86B62211EE89D32B53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.232.0/23
103.75.20.0/23
202.61.106.0/23
Signature Algorithm: sha256WithRSAEncryption
08:30:ab:6a:f2:4c:d2:8f:e6:7a:26:a2:43:9f:fb:ae:c0:6a:
b5:cb:93:9f:b2:81:28:ba:59:3b:f6:d9:43:64:4e:a1:fb:cb:
fb:fd:8d:4f:91:a5:0f:2f:08:25:d6:b5:fa:47:7d:e5:de:b4:
b6:27:cb:7d:dc:48:b4:02:2f:91:46:5e:4e:1a:85:06:9c:54:
6a:7e:d0:9b:86:e8:83:e4:ce:60:ce:8e:b3:08:2e:97:cf:ec:
f9:0d:15:48:db:d6:b5:1e:17:4c:70:c4:90:c7:ef:c8:8d:32:
c7:91:5c:ea:31:bb:ab:b3:2e:68:5c:e4:aa:81:58:d9:ed:75:
90:44:e9:9b:a1:79:b4:d7:5d:f1:d5:c1:e3:67:34:3f:14:7f:
16:7e:bb:46:dc:86:45:05:90:db:ee:96:c4:43:c2:8e:b2:62:
ea:8f:93:d4:b1:cd:72:ec:65:fe:88:25:66:d2:f7:68:13:af:
80:6f:92:cc:e5:71:e0:94:b9:a4:01:48:4b:f6:d0:6a:85:17:
db:31:8b:d2:c5:12:1a:75:c3:aa:7c:3a:1f:36:8d:53:aa:bb:
8d:d1:9f:9c:fb:f3:3e:e6:4d:7e:bf:b6:be:ae:b3:f6:20:16:
4d:5f:29:3c:9f:ac:3a:9f:de:8f:57:36:22:d5:69:e1:8f:4d:
8a:14:85:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 00:16:51 2024 by rpki-client on console-ams.rpki-client.org