Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/0EA363064D1A11EFA87FCE62C4F9AE02.roa
File: 0EA363064D1A11EFA87FCE62C4F9AE02.roa (raw, json)
Hash identifier: z6JgHz3J+SLBW51Do0XPkby+TSs+LbY1Me8nZ4lIhms=
Subject key identifier: A5:7B:9A:DB:18:E5:CA:1F:58:30:E8:AD:00:B5:19:38:BC:9C:D7:98
Certificate issuer: /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6
Certificate serial: E9
Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/0EA363064D1A11EFA87FCE62C4F9AE02.roa
Signing time: Tue 20 Aug 2024 14:32:47 +0000
ROA not before: Tue 20 Aug 2024 14:32:47 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 150774
IP address blocks: 103.238.114.0/24 maxlen: 24
103.238.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Aug 2024 17:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6
Validity
Not Before: Aug 20 14:32:47 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66c4a90f-789a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1e:ca:04:5c:ec:97:d5:76:7b:06:24:84:91:
21:3b:24:1c:85:01:5c:1d:44:a6:4a:d0:7a:f8:f4:
9c:6b:ce:91:1b:47:ff:fa:41:ac:98:9a:fe:24:e4:
0c:6c:8e:a4:3f:97:ac:e4:6b:fe:39:f2:2c:d0:11:
d0:b4:c9:e4:07:fc:d7:91:fd:3c:98:3d:1f:c2:be:
96:2f:b9:3f:e8:4c:6b:43:0a:33:de:ac:d8:98:db:
e5:c8:86:bd:9d:62:6f:29:98:15:24:0c:62:db:c2:
26:c8:fe:e5:6c:62:12:b8:44:4d:1f:6e:49:3e:0c:
ce:c3:b2:a2:c9:16:6a:c9:ac:c0:a5:20:d9:0b:05:
3f:93:8c:4e:0f:e8:9f:e5:bc:d3:49:09:70:7f:b3:
f3:af:60:ea:64:76:86:fe:4d:32:26:ee:a4:e1:67:
18:e9:f2:10:41:8b:de:6b:71:47:03:3c:ca:a9:34:
e5:76:25:65:e8:68:c7:be:f7:1d:1a:33:2a:1c:d6:
a4:87:58:69:9d:69:9e:27:4f:4d:a1:7d:15:36:a4:
be:4f:4d:ad:9a:ec:b6:c7:e4:a3:50:99:4a:12:e9:
7f:ee:a6:bc:4a:cc:c5:78:75:8a:59:35:7d:04:4c:
c2:27:1f:2f:a3:36:fd:6d:97:4b:fe:7f:14:23:13:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7B:9A:DB:18:E5:CA:1F:58:30:E8:AD:00:B5:19:38:BC:9C:D7:98
X509v3 Authority Key Identifier:
keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/0EA363064D1A11EFA87FCE62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.238.114.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:ca:e6:52:4d:f3:10:9c:5c:0a:b7:62:2f:04:43:52:c7:3a:
a4:ad:50:09:ff:81:77:84:44:d9:ea:5f:9b:1d:8a:b8:db:22:
7f:23:f1:b1:09:0c:7d:f1:49:ec:93:c5:31:0c:f2:3c:3d:2c:
67:02:55:1e:55:44:36:e3:24:8c:5f:46:ee:b2:2c:a0:b1:9c:
aa:03:f7:96:de:46:eb:b2:67:60:a0:02:d6:97:38:1d:a8:85:
0a:19:06:f5:7a:9c:cf:64:c2:f0:97:e2:12:7b:e5:09:d9:57:
7a:21:97:ca:ed:37:64:e4:72:eb:ba:89:0a:4b:13:80:0f:f4:
b7:18:f1:cc:91:b0:de:80:38:76:ba:10:63:39:da:b1:28:48:
f7:fc:96:12:e1:4f:c1:06:87:59:88:f2:a2:99:73:24:9e:6f:
3c:fd:90:30:f7:17:77:4c:11:40:4a:eb:c0:18:89:ab:f1:5f:
4c:63:2c:05:39:e4:87:4e:45:84:55:a3:85:87:ba:e6:39:d4:
3d:77:9a:b2:80:57:99:6b:7f:69:b6:26:da:82:18:74:ca:06:
df:6b:2a:45:47:28:35:42:0a:bc:e4:6c:77:08:ad:ce:a3:38:
e7:05:3f:33:8e:a9:0a:a8:d5:96:0e:96:c3:3f:52:e6:4d:7b:
5a:88:18:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 19:24:21 2024 by rpki-client on console-fra.rpki-client.org