Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/CBD8967E330011EE9FA5D15DC4F9AE02.roa
File: CBD8967E330011EE9FA5D15DC4F9AE02.roa (raw, json)
Hash identifier: aYZhO6Cpq+P/cnuyI2HVA6rsmhc6f3jtdY5tImCUjTc=
Subject key identifier: 5C:F5:48:33:BA:1E:2F:14:A2:32:35:4C:9A:8D:3F:76:6A:0F:8E:82
Certificate issuer: /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Certificate serial: 0165
Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/CBD8967E330011EE9FA5D15DC4F9AE02.roa
Signing time: Fri 04 Aug 2023 19:55:01 +0000
ROA not before: Fri 04 Aug 2023 19:55:01 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 58057
IP address blocks: 103.190.103.0/24 maxlen: 24
2001:df0:e940::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 08 Nov 2023 12:58:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Validity
Not Before: Aug 4 19:55:01 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64cd5795-ff36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:2d:49:b6:45:d6:42:0e:0d:d9:a8:c8:39:
6b:5f:a9:32:e7:41:a1:17:d0:cd:87:16:d3:55:dd:
f6:9e:6b:00:22:ce:36:21:45:2f:ec:62:b4:56:17:
d9:bf:cc:47:20:46:5f:98:5e:b3:7d:90:9a:ba:8c:
6c:4f:e4:c8:2f:aa:10:77:34:f2:c6:36:c0:72:c5:
7b:14:42:e4:d3:57:0c:c9:39:35:77:bc:d0:13:6e:
8c:34:d3:6d:d4:a5:f6:3d:1a:6d:c2:a6:74:1c:d5:
09:60:7a:e1:18:18:ea:48:bb:a9:ca:1c:59:45:9a:
ca:c5:35:b9:32:01:a1:ad:64:ff:5b:e7:62:f9:96:
95:8a:90:9d:a5:ed:d2:a8:89:a0:f2:3e:b6:50:d3:
ef:7b:02:0e:26:6b:a7:9f:c2:d2:31:08:60:75:ec:
b2:12:b6:71:69:24:30:43:ee:90:1b:2f:6b:de:d1:
a9:34:76:9a:e7:ac:47:01:98:8c:41:ef:23:1f:76:
e6:c4:dc:06:3b:bd:39:b5:44:28:3d:a2:16:79:56:
bf:10:9e:1f:88:cb:4d:73:10:0a:fd:73:22:2a:13:
63:38:19:6d:3a:50:d3:7f:ed:ef:b5:d2:58:da:b9:
c3:49:93:a8:f7:4b:9d:0b:4f:d1:a5:e0:79:5f:e5:
12:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F5:48:33:BA:1E:2F:14:A2:32:35:4C:9A:8D:3F:76:6A:0F:8E:82
X509v3 Authority Key Identifier:
keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/CBD8967E330011EE9FA5D15DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.190.103.0/24
IPv6:
2001:df0:e940::/48
Signature Algorithm: sha256WithRSAEncryption
2e:d8:66:50:12:fb:96:06:b1:27:7e:29:be:97:fd:c8:92:14:
2c:a1:aa:d9:fe:9e:13:26:7c:5e:25:e8:02:b2:fd:5d:57:bb:
f5:84:17:12:f2:12:a3:0c:1f:33:4d:5d:bf:52:b5:6c:b4:33:
fe:61:6b:51:93:e5:3f:cd:cf:d5:c0:d7:e0:d9:41:45:74:a2:
8e:54:20:39:46:a7:70:31:2c:8a:fd:58:7d:87:a6:d3:df:fc:
cd:e6:0d:c6:a4:be:06:75:43:ff:9f:c8:01:ce:41:6d:cc:37:
fe:29:cf:66:f2:9f:cf:49:81:2f:c2:b9:60:2d:14:36:ef:9a:
e3:8b:c4:5f:f4:a0:fe:cd:ce:e9:ac:35:71:f4:b2:f8:2a:a2:
81:c2:37:8f:86:15:9c:d9:af:97:86:2b:98:63:a5:59:e4:8b:
43:f8:63:9c:ad:90:41:b5:41:c1:e7:45:c0:68:f8:2b:b1:97:
c6:95:fe:c1:b5:ec:38:f4:6a:d3:8b:6f:04:ac:e5:03:a7:ae:
f6:70:92:27:ae:45:40:cc:d3:91:86:1b:fd:85:f2:45:60:61:
85:86:3a:1c:ea:9b:50:7e:26:01:6d:30:4f:e2:2c:0b:7f:f8:
f9:14:77:92:63:98:c4:ae:83:de:91:a1:ea:68:9e:19:4a:f2:
38:c0:4b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:39 2024 by rpki-client on console-ams.rpki-client.org