Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D49BC/87F5E1663F1011E981126018C4F9AE02/07A0E9283F1211E9A1B8771AC4F9AE02.roa
File: 07A0E9283F1211E9A1B8771AC4F9AE02.roa (raw, json)
Hash identifier: YL+yiwTAzbDDI+B5xygyw/iTywypV0xv3d0hvl5twuE=
Subject key identifier: 7D:20:D6:FF:F3:7E:81:DF:9B:C0:EB:86:CA:AB:AB:FA:A3:3D:F4:09
Certificate issuer: /CN=A91D49BC/serialNumber=09C32AB54B84A39B57C14D61BC639530E7B5BD1C
Certificate serial: 0F6D
Authority key identifier: 09:C3:2A:B5:4B:84:A3:9B:57:C1:4D:61:BC:63:95:30:E7:B5:BD:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcMqtUuEo5tXwU1hvGOVMOe1vRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D49BC/87F5E1663F1011E981126018C4F9AE02/07A0E9283F1211E9A1B8771AC4F9AE02.roa
Signing time: Tue 30 Apr 2024 18:27:02 +0000
ROA not before: Tue 30 Apr 2024 18:27:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 17887
IP address blocks: 103.213.204.0/22 maxlen: 22
103.213.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Aug 2024 02:46:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3949 (0xf6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D49BC/serialNumber=09C32AB54B84A39B57C14D61BC639530E7B5BD1C
Validity
Not Before: Apr 30 18:27:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=663137f6-d318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:7d:0d:30:71:07:c2:f9:26:9e:f7:db:ca:
25:69:49:af:a6:01:b1:05:2a:e9:0e:3b:e7:c0:4a:
9a:0f:1b:15:24:c3:a3:f9:97:60:de:5f:1c:d9:d9:
8a:2c:1b:3f:d5:65:5c:74:44:a2:3b:c6:7d:af:be:
df:13:d6:c3:14:fb:e8:43:7d:12:27:37:3f:61:5c:
c1:8b:d2:7a:22:e1:cd:1e:45:c2:62:48:c4:b5:48:
c0:23:5a:96:7a:76:57:ab:fc:8d:ba:5c:07:71:4d:
55:77:a1:05:ed:d5:89:0a:b6:0a:c8:2c:43:ad:42:
3c:ca:96:82:bd:f3:ab:ec:64:54:8f:31:8d:d0:43:
e8:7e:d7:00:25:40:bd:9d:6e:5f:a4:2d:bc:8b:bf:
3a:3d:0d:38:3e:58:37:76:63:d9:bd:89:b9:67:21:
7b:b4:c3:94:8a:ef:b9:14:23:39:20:75:b1:4d:52:
79:8d:53:f0:69:79:54:2e:c4:8f:cf:3f:9a:34:ce:
3a:f8:a3:91:9c:e5:e4:b8:9f:92:07:11:a8:90:c0:
26:2c:69:40:7d:3f:c3:c3:58:e1:f4:94:e9:6a:03:
46:d0:0e:5c:93:6a:df:03:af:18:dd:93:ef:07:5d:
a3:14:c0:18:9d:37:e3:91:7b:04:ed:21:ef:f6:0f:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:20:D6:FF:F3:7E:81:DF:9B:C0:EB:86:CA:AB:AB:FA:A3:3D:F4:09
X509v3 Authority Key Identifier:
keyid:09:C3:2A:B5:4B:84:A3:9B:57:C1:4D:61:BC:63:95:30:E7:B5:BD:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D49BC/87F5E1663F1011E981126018C4F9AE02/CcMqtUuEo5tXwU1hvGOVMOe1vRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcMqtUuEo5tXwU1hvGOVMOe1vRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D49BC/87F5E1663F1011E981126018C4F9AE02/07A0E9283F1211E9A1B8771AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.213.204.0/22
Signature Algorithm: sha256WithRSAEncryption
22:cc:a8:42:dc:28:1a:8d:08:6f:c0:9c:ee:45:66:d8:76:b0:
34:83:86:b8:b9:cc:89:d5:95:39:a9:73:82:c3:fc:63:6c:ab:
ec:60:68:b9:5a:a3:8c:b8:21:5f:88:9b:a7:60:3a:95:4a:eb:
13:24:25:7c:f6:6c:43:27:3f:93:da:bd:21:1b:47:35:68:10:
16:3d:23:14:03:93:83:02:85:81:f0:5c:5b:a2:77:8a:e0:53:
c3:78:6e:77:07:08:8d:b3:9f:b8:ec:23:7f:70:0d:92:05:84:
76:c2:29:7d:45:aa:f8:d7:51:42:dd:1d:06:f3:f9:7e:c4:cf:
47:60:52:9c:68:73:18:9d:88:06:76:e4:00:be:4b:50:52:ec:
28:0e:9a:6e:7f:94:80:a6:88:61:31:60:59:06:55:b6:3b:a7:
fa:e7:c5:ed:f1:d2:e9:75:42:b8:57:3d:b3:dd:57:c0:60:fc:
34:15:af:a8:27:89:66:a0:4e:74:db:15:90:c6:3e:2e:76:3c:
59:de:0d:7c:e3:bf:58:97:e5:c6:6c:6d:b9:f4:d2:bb:91:c6:
db:cf:96:4f:21:65:9b:2a:15:f2:71:cc:03:9a:80:08:34:12:
fe:d3:51:78:be:20:23:da:ae:32:6f:0f:a5:33:44:da:89:08:
af:1d:40:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 07:13:26 2024 by rpki-client on console-ams.rpki-client.org