Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/39558202335611EE9389892BC4F9AE02.roa
File: 39558202335611EE9389892BC4F9AE02.roa (raw, json)
Hash identifier: EMFZkig+LDv4ZuIyghspx3I7ew5EKuCwR7ZC/BCQ6zc=
Subject key identifier: C8:A9:A5:CB:36:15:38:2C:9F:C7:52:FF:E2:29:7D:87:FA:71:82:53
Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
Certificate serial: 04
Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/39558202335611EE9389892BC4F9AE02.roa
Signing time: Sat 05 Aug 2023 06:06:32 +0000
ROA not before: Sat 05 Aug 2023 06:06:32 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 103.207.60.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Aug 2023 02:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
Validity
Not Before: Aug 5 06:06:32 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64cde6e7-c193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b0:15:72:70:5d:43:58:0f:d9:38:9d:46:83:
b1:88:76:01:0f:9b:8d:32:5e:ec:75:ed:63:09:ff:
8b:42:c8:be:5d:4e:14:5b:08:49:98:3e:c2:d7:e1:
d4:2b:52:f3:d1:db:30:fa:d1:91:21:ab:36:2c:7e:
03:29:14:59:63:9c:f7:c8:28:12:d4:aa:68:16:5a:
21:b2:6a:2d:fd:df:8e:d0:d7:21:62:9c:88:d1:24:
ad:d1:30:c6:e6:c4:73:d1:83:64:80:3e:bf:b7:88:
c9:f6:8a:e3:fb:dd:e4:e8:ec:4b:57:83:76:28:44:
aa:92:0f:c0:97:62:69:27:9a:19:17:23:02:fb:57:
f9:e4:98:2b:eb:89:6a:53:3f:b7:23:b7:87:51:e1:
cf:7a:09:0e:d4:5e:ad:2d:0c:9c:a5:1a:ff:b2:91:
16:7c:6f:57:26:d8:53:6f:bb:10:46:34:ec:a5:4a:
9a:f4:55:81:5d:b7:c3:b3:77:d5:47:83:26:69:9d:
7a:ce:a6:61:2f:fd:ae:23:1f:59:44:06:d0:46:b9:
fb:03:99:5c:34:b1:ac:3d:51:7a:35:9b:66:74:8b:
f8:64:a3:f6:7e:75:e6:83:84:e1:83:50:35:6a:26:
da:bd:5e:a8:c6:52:f8:bd:a0:c5:53:88:a7:96:a4:
28:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A9:A5:CB:36:15:38:2C:9F:C7:52:FF:E2:29:7D:87:FA:71:82:53
X509v3 Authority Key Identifier:
keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/39558202335611EE9389892BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.207.60.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:d8:af:d7:62:a0:83:1d:c6:0c:c0:02:b0:61:b8:24:f5:b0:
9e:e9:74:aa:5e:ff:fa:0e:89:29:8c:ec:b0:bc:c7:28:d6:1e:
b6:4e:e8:16:d1:02:5f:91:34:f1:ce:96:07:05:7a:05:c6:93:
99:a4:44:74:35:85:fe:3d:49:2c:12:25:1b:20:f3:b5:7b:97:
60:a0:4a:97:15:cb:55:85:29:64:4b:52:b7:2b:e0:88:a8:fe:
ad:4a:f5:bb:72:19:0f:5d:3d:2f:59:58:74:5e:e3:06:c3:d3:
a3:eb:75:a2:29:a5:91:94:bb:3e:de:79:4b:3d:09:19:a1:6d:
5c:ef:37:4b:cb:f1:e3:19:6f:39:0b:86:75:63:70:1f:ea:a9:
3b:b1:68:7e:b6:93:b5:ee:57:3b:9b:8e:8f:ab:5b:86:22:09:
28:5f:01:39:a6:f8:4f:ae:52:81:ef:b9:1b:62:e1:82:9f:8b:
6a:e0:a4:e5:63:93:5d:32:e2:94:0b:93:ee:c5:38:fa:3d:e6:
51:19:52:07:e9:39:9b:b8:ef:fc:e9:2d:de:02:ac:39:f6:f2:
f8:87:84:4f:42:c6:a6:1c:50:25:8d:9a:fc:84:5e:7a:d1:66:
3b:12:15:c9:9f:06:75:51:85:5e:27:b7:e4:35:aa:ac:89:d9:
ce:18:6f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:29 2024 by rpki-client on console-ams.rpki-client.org