Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/2A600F447C8811EEA2123B22C4F9AE02.roa
File: 2A600F447C8811EEA2123B22C4F9AE02.roa (raw, json)
Hash identifier: TPkzEGqWL90aMmaEOq4j8E0v2ld4WJgCIukl2WdeKjQ=
Subject key identifier: 66:53:BC:95:74:0B:83:59:DF:C0:F4:B2:CA:B7:F8:55:CE:F4:50:86
Certificate issuer: /CN=A91EB7B8/serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D
Certificate serial: 01DE
Authority key identifier: D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/2A600F447C8811EEA2123B22C4F9AE02.roa
Signing time: Mon 06 Nov 2023 09:37:56 +0000
ROA not before: Mon 06 Nov 2023 09:37:56 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 149833
IP address blocks: 103.187.140.0/23 maxlen: 23
103.187.140.0/24 maxlen: 24
103.187.141.0/24 maxlen: 24
2400:7da0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 29 Feb 2024 04:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478 (0x1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB7B8/serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D
Validity
Not Before: Nov 6 09:37:56 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=6548b3f4-153f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ad:b0:cc:cd:c3:1f:8d:d2:43:d3:2a:82:91:
0f:0a:f0:de:9d:dd:32:3c:23:be:12:e7:49:c4:df:
f8:9d:52:bd:90:97:03:e5:23:06:3c:21:88:7b:95:
8f:0e:52:ba:50:fd:70:60:28:e7:b4:a6:ba:78:9f:
c0:12:af:37:f2:c6:5d:59:f8:75:1d:1d:f6:3d:69:
ff:0a:a9:11:c4:bb:cc:91:03:bc:1c:21:45:5f:e8:
d4:36:c6:e9:d0:a2:b9:95:db:d1:88:a7:42:a6:cb:
eb:05:f4:36:76:0f:86:f7:38:59:36:91:19:59:54:
29:e9:1f:dd:62:76:f7:75:f7:ee:77:c6:5d:98:32:
62:e4:87:5b:f1:5b:24:8d:4d:75:4c:18:1b:31:5d:
59:3b:46:8c:d5:8c:3c:a2:77:16:28:9f:ff:35:ae:
f9:0a:32:db:ab:3e:61:1b:3a:85:4d:d1:52:50:cc:
ec:08:29:00:61:77:6b:a2:ec:4b:c8:cb:98:e3:b1:
8a:b8:da:97:85:7e:f7:3c:33:58:2c:d9:9c:15:6c:
4a:b8:8d:20:3c:9c:ea:df:61:4e:3c:cb:38:16:ec:
5d:fd:e6:30:4c:4a:d7:a0:7d:d6:53:03:98:ad:71:
a9:d1:cc:cc:df:e2:d7:5e:c9:c8:fa:d0:72:7b:c1:
e0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:53:BC:95:74:0B:83:59:DF:C0:F4:B2:CA:B7:F8:55:CE:F4:50:86
X509v3 Authority Key Identifier:
keyid:D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/2A600F447C8811EEA2123B22C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.187.140.0/23
IPv6:
2400:7da0::/32
Signature Algorithm: sha256WithRSAEncryption
96:05:4c:51:42:eb:2e:0c:e2:06:ed:52:9d:7c:e6:f6:a0:75:
48:f8:07:01:25:56:59:38:3a:57:a3:ea:42:0d:29:af:71:95:
8b:be:61:42:0f:56:ca:cf:f7:3a:fd:5e:98:df:57:45:35:d0:
0e:a9:19:c6:03:45:d7:66:ba:65:1c:92:9b:7e:b8:36:9e:c6:
30:23:48:d4:7b:c1:62:1f:14:4d:7a:72:f6:c6:37:63:a8:d6:
56:5a:e9:ae:90:bd:2e:5b:3c:2c:97:08:f0:9d:e8:b9:58:68:
9e:aa:53:53:68:e3:4d:2b:6a:de:53:f4:0b:04:e8:1f:9f:16:
4f:50:e1:44:16:76:23:66:67:21:69:58:44:71:b3:9c:00:e5:
5c:0d:04:6b:28:c8:83:bb:ce:10:8e:d5:40:f1:bb:a9:7d:de:
d2:8a:27:c0:64:65:5c:7b:ca:bf:57:74:02:06:42:31:79:dc:
e9:53:ca:bd:f3:00:ec:fc:a0:9d:0c:24:34:ca:f4:08:42:f5:
cf:73:4c:84:8f:f1:37:eb:c8:8e:7a:c0:5c:e5:0b:5a:26:96:
e5:02:61:63:59:bd:17:5d:d4:57:6f:dc:64:54:ca:30:52:d1:
1b:8d:66:de:a1:9f:71:04:d1:d8:99:52:c1:9b:f7:df:2f:35:
d4:e5:54:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 09:05:31 2024 by rpki-client on console-ams.rpki-client.org