Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/5AE381E6E82B11EE9E900D5CC4F9AE02.roa
File: 5AE381E6E82B11EE9E900D5CC4F9AE02.roa (raw, json)
Hash identifier: 1JnS2rwOW61T+YOejEZoOKggEiJxFmFSJq7wqVKAaUs=
Subject key identifier: BF:F7:7F:37:6D:BD:88:42:00:FF:F9:A3:DA:11:51:34:2A:05:A9:11
Certificate issuer: /CN=A91FF3B6/serialNumber=660EDDBB35D53756C306BD8CD917DACFF7896CBD
Certificate serial: 04F8
Authority key identifier: 66:0E:DD:BB:35:D5:37:56:C3:06:BD:8C:D9:17:DA:CF:F7:89:6C:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/5AE381E6E82B11EE9E900D5CC4F9AE02.roa
Signing time: Fri 22 Mar 2024 09:05:40 +0000
ROA not before: Fri 22 Mar 2024 09:05:40 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 132220
IP address blocks: 103.216.164.0/22 maxlen: 22
103.216.164.0/24 maxlen: 24
103.216.165.0/24 maxlen: 24
103.216.166.0/24 maxlen: 24
103.216.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 12:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1272 (0x4f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF3B6/serialNumber=660EDDBB35D53756C306BD8CD917DACFF7896CBD
Validity
Not Before: Mar 22 09:05:40 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65fd49e4-67c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:52:f1:87:be:59:d5:44:f3:36:bf:f5:c9:19:
f9:2b:b6:0d:80:e3:ea:5b:64:be:19:3e:2e:0a:5c:
5d:eb:d3:0b:c2:6c:4d:5d:f7:20:62:e3:5b:dd:66:
84:fc:05:d5:6e:b3:64:1d:2c:44:d8:97:72:2a:da:
11:ad:05:22:0b:01:66:6c:74:2a:59:fc:9d:47:a4:
f8:bb:64:26:08:d3:32:c0:38:1c:50:91:3e:d4:1b:
9d:b0:10:0c:82:39:e1:6d:0d:8e:3d:3c:a9:a8:09:
e8:0e:70:a2:9f:39:e2:f7:7d:de:ef:27:5f:e2:78:
f1:a2:75:01:80:9d:2f:dd:c2:af:b1:04:8a:eb:01:
21:9b:77:a7:cb:64:71:c3:83:32:f5:b3:be:7b:ec:
32:64:57:24:ab:b5:16:fd:24:59:42:1c:ab:cd:f9:
5c:16:a1:76:9f:be:92:93:4b:b1:a0:86:39:d5:04:
de:db:25:36:53:f5:84:9b:4f:90:84:60:52:02:7d:
e3:c1:ee:2e:56:cd:14:6b:64:b9:2f:4f:34:c2:23:
67:76:2b:7f:77:62:28:f0:f0:57:42:da:c2:6b:ed:
11:19:5a:ce:50:c6:fa:e0:18:0f:72:7f:3b:f3:e8:
ab:d6:22:25:df:ff:47:be:20:e6:7b:ec:df:b6:14:
76:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F7:7F:37:6D:BD:88:42:00:FF:F9:A3:DA:11:51:34:2A:05:A9:11
X509v3 Authority Key Identifier:
keyid:66:0E:DD:BB:35:D5:37:56:C3:06:BD:8C:D9:17:DA:CF:F7:89:6C:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/5AE381E6E82B11EE9E900D5CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.216.164.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:5b:4c:50:b7:62:18:1c:6a:5f:5b:7f:b2:ef:f6:29:45:40:
8f:44:fb:5e:ce:a6:b3:d5:26:8a:da:cf:8a:47:39:93:e7:da:
3f:d6:dc:6a:63:cd:be:5a:1d:9e:71:fc:77:61:dc:a7:28:e4:
38:db:49:ba:dc:b6:7d:91:55:43:63:1b:8e:91:04:2d:c4:b6:
bd:74:9f:db:83:c6:96:cc:8d:b6:dd:17:e2:59:fc:ba:31:4b:
40:b4:3c:ac:99:2e:4c:f1:e7:4c:61:88:83:0d:a6:30:b1:01:
09:e8:85:8a:83:17:71:46:7f:9e:3b:44:9f:6d:b9:08:96:9c:
76:7c:10:1a:ed:b2:1b:8a:47:9d:ff:e3:e5:fd:ca:6e:40:8e:
f7:7d:d1:57:ea:5b:27:e0:e6:81:81:63:65:a6:25:bb:aa:e0:
cf:91:8d:ef:32:d3:8f:13:86:22:01:76:3d:e7:9a:4c:44:22:
71:9e:0a:e9:43:18:e4:ae:34:56:9b:0a:2b:5e:c8:d5:e7:89:
c9:b8:1c:9d:73:19:c7:fd:fd:04:0a:7a:8f:f5:d8:03:48:4b:
ad:03:f2:58:7d:23:38:69:90:3d:3b:ab:3a:4e:96:3e:f8:01:
9c:c0:3e:1a:00:f0:23:7d:ca:c6:b9:ca:54:10:d9:a5:2d:0c:
56:01:c9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 16:45:14 2024 by rpki-client on console-fra.rpki-client.org