Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/F95633FE01EC11ED84469937C4F9AE02.roa
File: F95633FE01EC11ED84469937C4F9AE02.roa (raw, json)
Hash identifier: PAgf7XDeffE3KOwuZNUH7PCHSYuNPjMYJulxpgdyLbE=
Subject key identifier: BA:A8:2D:C7:B1:35:A4:F4:58:74:24:6B:78:0C:CD:E1:53:2A:32:3C
Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial: 013F
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/F95633FE01EC11ED84469937C4F9AE02.roa
Signing time: Tue 25 Jul 2023 03:23:56 +0000
ROA not before: Tue 25 Jul 2023 03:23:56 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 135602
IP address blocks: 103.67.244.0/24 maxlen: 24
103.67.245.0/24 maxlen: 24
103.67.246.0/24 maxlen: 24
103.67.247.0/24 maxlen: 24
2001:df3:200::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 04 Jul 2024 05:11:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 319 (0x13f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Validity
Not Before: Jul 25 03:23:56 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64bf404c-ad9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:62:5a:19:0a:e1:9e:ab:27:ea:7c:fc:41:
ee:ac:b6:1e:c5:3d:e3:6d:4b:c5:a1:61:ba:11:ab:
04:7b:c9:9b:bd:95:48:bb:04:5e:ff:ca:83:2d:1a:
08:c0:15:33:31:6c:13:77:fe:71:d8:27:0c:9c:b3:
41:0a:1f:71:ce:fb:65:54:ac:d5:fe:6b:c6:8f:14:
83:e2:75:41:68:14:8b:ab:e5:96:c4:19:07:82:91:
51:6e:22:46:0c:c4:1b:4a:32:71:3f:29:e8:4f:00:
7c:10:9d:f1:0d:02:bb:5a:9a:4b:25:07:fe:34:7c:
d8:e5:3f:66:f8:12:1f:37:73:18:dd:8b:a9:59:96:
5b:32:53:bc:f0:24:fc:83:19:f0:c0:b5:e3:2b:85:
a6:7b:3d:d1:a5:8e:e4:d4:2d:36:e0:4d:7c:ce:3c:
1f:9e:5d:ad:18:ac:d9:62:24:bb:d6:d2:51:b1:05:
de:81:bd:83:44:43:80:3f:9f:fb:ba:66:17:ac:5a:
ca:88:aa:26:68:4a:2a:81:cc:84:d4:64:fa:5c:b8:
83:6a:14:7c:bd:66:13:fe:67:e9:7b:00:58:92:fb:
92:97:cb:97:26:bd:e8:8f:7e:a3:3d:20:6a:b5:df:
5e:55:b7:3d:a0:ca:af:c5:fb:74:90:9f:63:94:bf:
ef:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A8:2D:C7:B1:35:A4:F4:58:74:24:6B:78:0C:CD:E1:53:2A:32:3C
X509v3 Authority Key Identifier:
keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/F95633FE01EC11ED84469937C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.67.244.0/22
IPv6:
2001:df3:200::/48
Signature Algorithm: sha256WithRSAEncryption
7f:38:0b:9f:bc:64:19:6b:b7:2a:9d:19:bc:bf:36:df:05:00:
e6:46:36:3d:89:bd:1d:d0:b6:14:c5:d9:a0:f6:59:34:ca:59:
74:28:80:5b:66:a3:21:f1:6f:65:04:76:4d:22:c5:59:43:a7:
5f:50:ce:3c:5c:76:ee:5e:4f:75:e8:88:26:3b:af:27:69:c9:
f1:89:f1:00:18:db:d2:c8:53:2c:0a:44:e6:ce:b2:59:eb:0d:
d9:af:34:9d:70:0f:ea:14:16:26:dc:d5:9a:61:4c:26:dd:c2:
53:80:6c:21:fc:77:df:0b:79:30:d1:95:7a:94:41:eb:f1:8f:
4d:31:09:0e:1d:1d:01:34:ee:ee:89:2a:94:c7:81:32:7c:c9:
6d:24:92:b6:ba:4d:b0:a4:48:d6:d4:57:ff:eb:1a:7a:4d:62:
40:9e:28:2f:8a:c5:e4:12:e6:5a:cb:e8:6e:a8:fb:c0:f0:2f:
14:b9:99:14:3d:18:e0:98:aa:93:95:31:ac:48:ef:aa:36:8b:
f7:a0:e8:e6:a4:23:bb:91:72:cd:27:a9:fb:3e:42:31:57:27:
96:d6:ce:20:df:c8:a0:fa:21:10:ca:88:ce:ce:69:87:05:fb:
15:ab:23:76:e0:1d:ea:9e:9d:48:46:d8:52:b9:0c:19:d8:87:
10:32:b8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 06:10:47 2024 by rpki-client on console-ams.rpki-client.org