Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/10938572BC0311EEB473764DC4F9AE02.roa
File: 10938572BC0311EEB473764DC4F9AE02.roa (raw, json)
Hash identifier: TLCIBxt+n7gGibAd8zphGlVaxg9l5Vm/78lrvHvNzCA=
Subject key identifier: 22:56:BB:F8:39:E6:CA:A9:F2:C0:FA:6A:A4:E6:5E:2D:EC:3E:1B:EB
Certificate issuer: /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
Certificate serial: 04A5
Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/10938572BC0311EEB473764DC4F9AE02.roa
Signing time: Fri 26 Jan 2024 04:26:24 +0000
ROA not before: Fri 26 Jan 2024 04:26:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210107
IP address blocks: 103.136.149.0/24 maxlen: 24
103.136.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 06:09:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1189 (0x4a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
Validity
Not Before: Jan 26 04:26:24 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65b33470-3ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:50:44:0b:e8:24:d5:53:a3:77:61:67:36:d2:
c5:85:d7:7a:99:d5:37:e4:f0:a8:20:3a:51:3d:42:
c9:c5:09:5d:1f:28:37:5a:b7:e9:85:20:0e:d1:d6:
0a:75:ec:a1:f4:a0:67:62:6c:a1:34:15:1e:6c:5e:
54:d7:a3:f7:21:cc:82:63:e0:4d:56:06:6b:68:a6:
fd:e1:bd:ec:83:62:7a:7d:7b:bd:d5:19:ca:fe:ec:
db:2d:d3:b1:21:f4:c1:90:a4:fd:88:0e:61:67:18:
12:06:13:e7:b4:5d:a0:9d:38:21:8c:1f:a5:97:54:
92:7d:99:1f:0e:51:bc:e2:3c:74:f4:89:a0:d0:34:
b7:90:94:b8:1b:9c:27:25:6d:64:d0:32:33:d0:76:
48:bc:4b:bd:31:3d:85:59:08:17:b4:30:90:6e:db:
6a:26:63:5c:d4:d0:36:02:ff:53:33:66:8a:1e:5b:
31:99:2c:1c:0b:ab:98:50:cb:d6:09:95:c6:45:b8:
50:8b:1d:8a:b4:09:f2:73:95:1d:1f:d6:81:44:ab:
37:17:28:aa:f8:7d:c2:fe:4f:c3:93:fd:9f:a3:1e:
c9:27:5a:6a:f9:9d:23:8e:81:15:18:0d:dc:89:ab:
7e:d6:dc:92:ee:b1:55:03:42:b6:c4:c7:7c:ac:dd:
da:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:56:BB:F8:39:E6:CA:A9:F2:C0:FA:6A:A4:E6:5E:2D:EC:3E:1B:EB
X509v3 Authority Key Identifier:
keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/10938572BC0311EEB473764DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.149.0/24
103.136.151.0/24
Signature Algorithm: sha256WithRSAEncryption
f2:df:1d:60:7e:d6:1e:c1:7e:55:6c:10:23:48:2c:86:4c:2a:
ff:0f:8a:62:db:8f:ab:23:c9:4b:75:f9:57:02:e4:6e:d4:6e:
15:62:76:dd:55:54:af:0a:82:62:66:d9:17:90:f2:a0:5c:10:
85:73:09:67:96:11:4e:34:f5:fc:8e:a1:8a:cc:72:39:bc:8f:
d0:6c:84:81:f3:5b:62:2e:7e:b8:e1:4c:4d:ed:99:34:5c:7c:
91:e4:8b:bb:2c:c5:41:d1:80:5d:22:e1:69:d4:b4:1b:e1:3f:
e5:76:72:c2:60:1e:94:10:92:ab:ad:aa:b3:bc:8f:50:99:e9:
9e:d6:75:33:9d:bf:9c:03:57:0d:e3:20:31:23:35:8e:34:0a:
dc:3b:93:18:60:b0:9c:02:4a:27:4b:f3:d8:b1:74:3a:39:c3:
b6:87:1b:db:99:74:d6:7b:e1:e8:97:68:04:df:74:51:84:18:
1b:91:c7:03:65:f2:4a:06:ba:8e:1c:05:0a:84:04:2a:7d:50:
c8:4c:50:81:f3:2c:5f:55:fe:a6:60:33:1a:4e:fd:4f:85:9e:
66:6b:25:63:47:12:1d:7e:1f:08:37:11:d9:fd:0d:0e:a1:16:
e0:2d:1b:70:b3:ed:a6:c9:e9:10:ff:ed:34:2e:20:a1:0d:62:
f7:45:73:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:40 2024 by rpki-client on console-fra.rpki-client.org