Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/0CF8405C95CD11EA8D1B0C65C4F9AE02.roa
File: 0CF8405C95CD11EA8D1B0C65C4F9AE02.roa (raw, json)
Hash identifier: L2FQdcEAehehi36iTYlNTu2HzMsF5TyknQqhhyP6lwI=
Subject key identifier: A7:8D:08:D5:5D:AE:2C:B2:A6:07:0A:46:A4:28:37:EC:7B:D9:7D:1A
Certificate issuer: /CN=A91C08FA/serialNumber=A11E2C2179B36A9647B951FC602D779307BFAE6E
Certificate serial: 089D
Authority key identifier: A1:1E:2C:21:79:B3:6A:96:47:B9:51:FC:60:2D:77:93:07:BF:AE:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oR4sIXmzapZHuVH8YC13kwe_rm4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/0CF8405C95CD11EA8D1B0C65C4F9AE02.roa
Signing time: Sat 20 Apr 2024 21:40:01 +0000
ROA not before: Sat 20 Apr 2024 21:40:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9876
IP address blocks: 103.8.140.0/22 maxlen: 24
103.15.126.0/23 maxlen: 24
163.47.236.0/22 maxlen: 24
202.56.32.0/20 maxlen: 22
202.56.48.0/21 maxlen: 24
202.137.240.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2205 (0x89d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C08FA/serialNumber=A11E2C2179B36A9647B951FC602D779307BFAE6E
Validity
Not Before: Apr 20 21:40:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66243631-f8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:fa:90:b1:80:43:e0:7d:da:7e:d5:e8:7f:
0d:5e:4d:1a:99:bc:42:9b:e2:00:39:98:85:2f:db:
ae:bf:e8:59:82:d1:a1:32:c8:e0:d8:2c:f6:23:66:
a2:fd:ef:91:80:c1:a3:6f:c4:aa:6f:97:86:3e:16:
45:b8:ef:a0:67:da:a5:de:9c:ab:c6:24:b1:ca:26:
dc:66:74:ee:02:14:da:24:45:54:b8:eb:e9:17:b0:
78:c1:cd:10:f8:95:03:f6:29:4d:e3:76:05:1a:dd:
50:bb:a6:7e:36:72:3a:12:12:86:8e:dd:20:b5:76:
21:9d:64:c3:82:3b:6e:a2:cd:0e:a3:da:c5:a6:d9:
9f:05:83:59:b6:60:3b:1f:4c:f0:34:95:b7:dc:5a:
36:13:7d:63:53:12:9f:be:97:1c:a9:ca:c8:a4:c6:
9d:15:86:fa:26:59:cf:5d:57:87:e2:e9:35:f8:fb:
66:b0:95:74:45:05:06:39:93:36:bd:4d:3b:70:d3:
65:40:0d:82:bf:6a:b5:fb:fd:08:0e:72:7d:ea:11:
92:e6:6d:a7:3a:41:7d:1e:47:53:97:a1:59:42:a0:
a3:28:e4:a2:f7:16:55:df:0e:4d:b0:21:15:15:e0:
12:37:57:b4:e0:2c:23:63:8c:cb:f6:1f:23:6e:c7:
c2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8D:08:D5:5D:AE:2C:B2:A6:07:0A:46:A4:28:37:EC:7B:D9:7D:1A
X509v3 Authority Key Identifier:
keyid:A1:1E:2C:21:79:B3:6A:96:47:B9:51:FC:60:2D:77:93:07:BF:AE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/oR4sIXmzapZHuVH8YC13kwe_rm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oR4sIXmzapZHuVH8YC13kwe_rm4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08FA/ADCB15FE95C311EAAE620149C4F9AE02/0CF8405C95CD11EA8D1B0C65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.8.140.0/22
103.15.126.0/23
163.47.236.0/22
202.56.32.0-202.56.55.255
202.137.240.0/21
Signature Algorithm: sha256WithRSAEncryption
12:03:25:e7:e7:22:ca:7a:63:ce:c6:36:05:0f:d5:7d:19:ce:
08:05:0f:23:1f:48:af:ed:d6:52:53:3f:0e:9e:19:18:56:62:
90:cd:9e:44:68:f2:25:18:a3:67:8d:ed:23:20:d4:55:ce:09:
09:13:4d:8d:e3:7f:fb:3f:c2:d6:55:72:99:40:a5:03:14:8a:
26:d5:31:4e:02:88:06:0c:4d:59:69:05:cb:97:50:c5:46:26:
4a:73:a3:53:c8:f7:bf:13:55:51:b9:bf:dc:60:4c:1f:7b:5d:
f4:86:dc:ee:5c:94:57:76:61:79:12:0b:72:b6:e7:f3:f2:7a:
d8:92:bb:ec:cf:7d:7a:79:72:a8:26:2f:b0:4e:fc:a7:ae:81:
63:68:f2:58:89:6a:6e:88:2e:69:44:41:38:01:38:36:e7:0a:
8a:e3:a5:3a:e0:cf:c7:3d:2d:83:e7:ba:bf:32:34:a6:ad:ac:
e6:e4:b4:53:cb:40:88:82:c3:24:c5:60:d0:ba:6a:aa:f1:65:
32:c3:45:29:17:c4:73:54:e8:bb:e8:48:2e:de:ab:5f:16:ac:
42:f3:19:82:bc:e6:7f:0d:92:58:22:7d:ad:f8:83:3b:bd:b1:
d3:ab:18:0a:14:a2:75:67:4a:94:43:c1:6e:25:5c:dd:50:72:
bb:da:ef:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:24 2024 by rpki-client on console-ams.rpki-client.org