Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/7F9BF8A0B62211EEB974F353C4F9AE02.roa
File: 7F9BF8A0B62211EEB974F353C4F9AE02.roa (raw, json)
Hash identifier: Z0WdqJT4WTb0vrvEUO7z2eIMrNNtGwTFMSbnT4t8uMc=
Subject key identifier: 94:65:99:FC:0B:C7:58:16:57:04:7C:20:22:8F:D9:69:47:51:27:51
Certificate issuer: /CN=A91BE096/serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4
Certificate serial: 0F83
Authority key identifier: 4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/7F9BF8A0B62211EEB974F353C4F9AE02.roa
Signing time: Thu 18 Jan 2024 16:56:18 +0000
ROA not before: Thu 18 Jan 2024 16:56:18 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 45355
IP address blocks: 103.75.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 13:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3971 (0xf83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE096/serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4
Validity
Not Before: Jan 18 16:56:18 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65a95832-0d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:0d:43:d5:d6:23:68:53:2d:a2:43:3a:4f:
c6:62:e4:41:95:14:6b:10:d8:a5:40:eb:34:b5:90:
fe:2b:11:4e:41:35:fc:1e:42:62:fa:22:a5:ad:95:
72:2c:da:48:bc:99:73:32:ec:f6:c0:38:8d:7a:be:
41:49:2d:6a:89:29:fd:84:cd:a7:52:e1:d7:e5:28:
5c:94:12:a1:12:2f:a4:f6:e3:19:68:38:19:a9:9c:
9a:46:c7:1b:7f:f3:07:aa:16:3d:47:0c:70:14:b4:
57:d4:43:5d:4b:94:72:81:5f:64:36:13:26:bb:c1:
41:d9:83:1b:d1:5b:89:32:52:10:b1:89:62:de:48:
f2:ef:4c:e7:60:78:3f:30:18:c6:1f:1d:b8:b1:ee:
96:68:55:7f:3a:9a:c6:67:08:54:a9:91:3a:2f:37:
0a:fd:ab:5c:ff:2e:14:6d:84:95:94:c2:40:fe:f3:
e9:d0:c3:79:92:46:45:44:c1:fb:4b:96:23:d4:9a:
92:ff:1b:a5:c4:5b:6c:5f:ea:74:c6:d2:20:ec:bc:
b8:47:83:fd:a0:9a:14:e0:8b:05:54:78:47:6c:b7:
6e:6c:0d:b6:a1:0e:28:66:a5:cf:5d:4e:d5:e9:74:
99:bc:da:52:b3:30:50:e5:e6:8b:f0:8e:89:4d:da:
04:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:65:99:FC:0B:C7:58:16:57:04:7C:20:22:8F:D9:69:47:51:27:51
X509v3 Authority Key Identifier:
keyid:4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/7F9BF8A0B62211EEB974F353C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.75.21.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:74:5b:16:ce:c2:8a:4c:21:cb:f1:19:9c:e7:95:29:28:80:
52:2e:06:c0:d1:a9:3f:d1:0c:b9:a9:52:02:f5:ac:76:db:f4:
e0:7b:b9:21:8b:ed:9c:14:cc:a8:80:d6:e2:8e:c9:df:e5:82:
e1:ae:79:95:0c:9e:81:db:39:ac:6b:37:35:96:fd:98:c8:1c:
d7:63:22:cd:6c:8a:7c:86:9c:68:ac:56:c1:9d:f8:0f:fa:49:
c9:50:1a:22:3b:51:61:a7:16:f0:ad:e6:91:96:d6:80:ee:ce:
00:4a:3c:0f:60:47:3a:66:56:24:13:1f:b0:8d:58:1a:30:52:
a7:63:6f:63:ea:57:b4:e7:c1:f7:63:41:b2:d0:86:d0:6e:32:
89:13:89:8c:68:d8:ae:e8:4b:42:41:3f:97:89:91:9e:d8:68:
b2:05:7c:92:f0:c6:1d:57:cf:16:b4:17:6a:f0:d4:88:d4:78:
dc:75:15:20:5a:50:e0:95:c8:e2:76:74:81:1d:ac:4e:e3:1a:
b2:ee:e4:86:46:10:e2:14:20:9a:55:06:2c:b6:24:77:38:cf:
00:d9:4a:53:09:d1:45:72:d6:84:91:a5:e0:f5:e0:7e:84:3e:
6b:92:8d:84:21:f8:59:46:33:f1:41:3d:42:1b:76:55:82:4e:
97:c7:56:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 18:09:33 2024 by rpki-client on console-ams.rpki-client.org