Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/B73CD08E404C11EC93BD6124C4F9AE02.roa
File: B73CD08E404C11EC93BD6124C4F9AE02.roa (raw, json)
Hash identifier: I/ox3yxINgmg23YPzcIoMXwHfgzEFYMlegV2YGkYgsc=
Subject key identifier: A7:C6:D9:EA:9C:66:D8:D4:30:0D:FE:9A:1F:14:2E:48:A4:83:8D:9A
Certificate issuer: /CN=A91CA8EA/serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0
Certificate serial: 0368
Authority key identifier: B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/B73CD08E404C11EC93BD6124C4F9AE02.roa
Signing time: Wed 15 Nov 2023 02:13:31 +0000
ROA not before: Wed 15 Nov 2023 02:13:31 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 136897
IP address blocks: 103.175.196.0/23 maxlen: 24
2001:df7:fc80::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 Feb 2024 04:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 872 (0x368)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA8EA/serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0
Validity
Not Before: Nov 15 02:13:31 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=6554294b-30d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:61:b0:37:cf:36:c7:4b:01:cf:16:b6:d1:
47:13:9c:e7:0f:34:63:88:e8:67:df:6d:7d:50:d9:
ba:d3:bc:a2:ba:44:ac:02:7c:ec:d8:a7:8d:51:fd:
02:5a:3f:52:53:45:5f:49:83:2d:59:d6:50:35:6a:
0f:86:2a:92:97:6f:c7:45:a0:44:b3:25:47:c4:75:
89:0c:af:06:04:d0:22:74:85:16:c9:a9:6d:44:c5:
a4:7e:dd:a4:f9:1c:06:ff:0b:fa:f8:fc:f1:90:5a:
49:cd:2d:71:b7:c5:e5:1b:03:ff:e6:9a:b2:e4:24:
40:c2:3f:c8:37:1f:fd:9c:cb:e9:ea:02:cf:cb:41:
d1:26:de:9e:ca:e8:62:0e:22:03:d8:7a:b4:0a:3d:
75:e9:7c:b5:9e:f6:41:be:41:70:3e:d7:43:d9:34:
ab:71:20:c4:d4:7c:35:fe:a2:48:67:31:1a:0d:75:
22:db:e6:77:c3:29:31:bf:0d:3c:16:de:6f:d0:55:
d7:60:97:db:16:72:c5:cf:22:45:7a:b1:15:55:da:
66:e8:11:65:92:57:84:bf:84:af:63:65:6e:de:3f:
98:78:15:82:ca:b3:cc:c4:9c:c0:78:99:70:cf:07:
fd:c6:1d:36:83:aa:7f:b4:43:94:4d:f9:3d:f1:df:
ed:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C6:D9:EA:9C:66:D8:D4:30:0D:FE:9A:1F:14:2E:48:A4:83:8D:9A
X509v3 Authority Key Identifier:
keyid:B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/B73CD08E404C11EC93BD6124C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.196.0/23
IPv6:
2001:df7:fc80::/48
Signature Algorithm: sha256WithRSAEncryption
60:4d:35:1c:d9:7b:5e:ac:38:ad:e3:9d:6f:c7:09:6f:a4:b5:
cb:9c:49:e5:0a:6f:d2:c1:79:cb:4f:38:d9:15:f9:0c:3a:2d:
ab:84:06:be:e7:c5:0e:47:bf:dd:62:6a:91:72:a9:13:b9:90:
31:ad:e1:6e:93:38:2d:1a:72:6f:26:0b:db:97:af:88:fd:04:
61:fc:7b:1c:79:80:d3:f6:2c:d3:63:3f:f1:2a:8d:bb:3c:0c:
93:10:fb:4d:37:be:f6:e7:d9:56:01:e4:0e:bb:f0:95:f3:bc:
47:6a:65:fd:c6:8c:ec:91:24:b7:a7:79:66:b8:ea:2c:37:8f:
48:dd:c1:7e:12:9d:fa:dc:db:b0:bc:3e:94:32:4c:5e:fb:5c:
b9:84:3b:ee:fd:6f:89:7f:c7:a8:1a:e7:8f:8f:80:d6:3b:07:
86:fb:73:8f:3f:23:bb:eb:77:c5:27:c3:56:d3:a5:4e:7c:7f:
62:81:15:66:fd:2e:81:07:82:9a:5f:7b:f7:c3:9d:b1:63:16:
d7:da:13:ea:1e:57:aa:26:33:2c:14:78:e2:17:4a:85:54:2c:
e3:8c:7c:a1:95:7d:df:27:30:b9:3a:c9:11:a3:d9:c5:13:63:
07:e8:d7:90:24:9e:1b:63:5a:17:22:7d:03:e3:a2:a3:70:2d:
60:74:0c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 05:09:43 2024 by rpki-client on console-fra.rpki-client.org