Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/FB0EDA2EBBDD11EDB989924CC4F9AE02.roa
File: FB0EDA2EBBDD11EDB989924CC4F9AE02.roa (raw, json)
Hash identifier: GXx8FdjG685RCAz/YmEI88HRu+xpURI396sesAeLPCk=
Subject key identifier: 32:C0:E6:CD:78:52:5E:AE:6F:A7:CC:3F:C5:FF:81:C5:3B:F2:C4:AC
Certificate issuer: /CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
Certificate serial: DA
Authority key identifier: 37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/FB0EDA2EBBDD11EDB989924CC4F9AE02.roa
Signing time: Sat 27 Apr 2024 06:20:07 +0000
ROA not before: Sat 27 Apr 2024 06:20:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150791
IP address blocks: 103.101.98.0/23 maxlen: 23
103.101.98.0/24 maxlen: 24
103.101.99.0/24 maxlen: 24
2001:df2:fc0::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 17 May 2024 05:16:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
Validity
Not Before: Apr 27 06:20:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=662c9917-9eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:88:80:12:e2:31:d9:fd:e7:15:4a:ed:62:af:
e9:5f:b3:de:d5:a8:fc:6d:8a:da:92:cc:7a:57:c7:
2b:3f:26:03:77:43:0f:b5:30:a8:28:65:9d:8d:b9:
96:67:e9:9c:e5:9d:07:2e:66:02:44:bf:da:5d:a5:
cc:3c:f6:85:69:f8:59:ac:d7:05:0f:cf:41:98:f3:
a4:a1:c4:f3:69:35:f9:ac:21:88:5a:27:65:3a:22:
8a:c3:18:b8:81:76:2f:96:a5:a9:eb:1d:02:9a:50:
5e:f3:10:1d:8b:27:aa:60:f7:69:9f:b2:d8:c1:65:
0c:41:7f:e7:98:ba:48:f5:5f:77:07:fa:20:24:b7:
3f:6c:57:a5:c7:7b:b3:30:a1:eb:9b:ca:48:c7:ce:
33:da:23:0e:25:71:66:c8:11:e1:c2:98:0b:cd:05:
9e:bc:d4:02:72:17:79:5e:a8:f1:15:03:17:37:3e:
6f:ba:d2:c5:0f:ce:2c:b2:ac:48:0c:59:26:e7:15:
62:90:bc:91:05:85:0b:0d:6a:da:0a:f5:91:9a:0b:
db:04:2c:f4:55:2c:6a:a5:6d:25:88:52:35:48:31:
e1:d7:31:e2:86:08:bd:02:f7:1c:6b:db:dd:db:a9:
e5:99:b8:4f:6b:72:e5:82:c9:58:2b:64:3c:51:7c:
51:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C0:E6:CD:78:52:5E:AE:6F:A7:CC:3F:C5:FF:81:C5:3B:F2:C4:AC
X509v3 Authority Key Identifier:
keyid:37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/FB0EDA2EBBDD11EDB989924CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.98.0/23
IPv6:
2001:df2:fc0::/48
Signature Algorithm: sha256WithRSAEncryption
d0:9d:e5:32:91:84:d6:66:c1:9d:14:b8:93:86:2f:b8:bc:49:
16:57:56:d0:5f:07:94:28:1e:89:9a:66:82:27:a6:b7:b2:05:
cd:a7:26:87:cd:57:18:b5:f4:6a:62:67:f0:91:88:53:32:7d:
12:db:06:ab:5a:e1:ef:38:f5:fc:dd:8f:5b:ae:57:ba:6a:15:
88:eb:90:6b:50:f3:6c:7a:6a:67:6a:d0:69:c2:0f:fc:d0:fe:
12:de:0e:5c:ce:02:86:ef:1a:83:03:04:12:57:59:99:7a:52:
2d:91:67:15:21:69:d5:c5:b7:1b:3c:d8:4e:5b:58:30:12:28:
ad:f0:19:10:1b:27:2e:89:00:99:ce:f9:9c:f0:3a:8a:c8:8e:
54:5f:65:e9:49:5d:40:ea:0b:14:5a:f1:04:b8:db:9b:9c:21:
d5:6b:04:1a:fc:5a:82:71:07:9e:c4:27:93:15:9f:3f:77:18:
e3:3c:d9:55:d6:91:32:bb:40:1d:cd:f9:9c:11:2c:7d:b9:10:
69:a8:4b:55:1e:99:76:5e:ab:1a:15:76:c6:22:5c:d5:23:5d:
fc:ac:48:f4:73:93:52:7f:c7:dd:3f:96:c9:84:1d:7b:ba:09:
3f:97:59:2f:58:cf:ee:82:c0:c7:86:ae:d4:12:5b:9d:6a:d5:
95:3f:89:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:09:24 2024 by rpki-client on console-ams.rpki-client.org