Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/49B77DC2667211EEBDC73D3EC4F9AE02.roa
File: 49B77DC2667211EEBDC73D3EC4F9AE02.roa (raw, json)
Hash identifier: oI9yl53GDOC/IzQCFYHG/PocTtc0W/B55OLJGVTe9BE=
Subject key identifier: 41:EC:B3:66:E8:A5:46:7C:4B:E7:0C:AC:51:B3:BE:B5:41:EC:8B:22
Certificate issuer: /CN=A913D65B/serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41
Certificate serial: 8F
Authority key identifier: 58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/49B77DC2667211EEBDC73D3EC4F9AE02.roa
Signing time: Mon 09 Oct 2023 07:05:54 +0000
ROA not before: Mon 09 Oct 2023 07:05:54 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 137939
IP address blocks: 103.82.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 15:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D65B/serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41
Validity
Not Before: Oct 9 07:05:54 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=6523a652-b1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:46:2d:5b:82:26:9c:2f:22:94:92:89:fe:
92:b6:62:d0:52:d5:0c:60:88:e5:bd:a0:69:95:b9:
47:aa:58:96:0c:57:68:67:4c:1e:a0:5b:0e:8c:f6:
66:da:74:fb:7b:07:d3:63:88:40:75:1a:99:84:ff:
5b:d0:f0:1d:27:dd:a1:53:dd:64:e3:48:53:fa:e8:
f4:c8:41:d7:ab:f4:82:41:fe:7c:23:7b:b2:f9:0d:
36:69:03:e7:5e:fe:cc:ae:d2:ff:13:93:14:f2:44:
98:74:67:05:48:73:5d:fb:9a:63:5e:f2:7c:25:94:
bf:de:3b:15:dc:f7:4c:e6:65:22:0f:40:3c:a3:48:
af:a8:ee:03:50:5c:14:28:b4:9b:d4:2d:e1:0f:00:
15:34:67:92:88:93:d0:44:bb:64:2d:41:9a:92:08:
60:b3:e4:b6:83:17:02:78:dd:3b:bb:c7:04:bd:5e:
51:a2:18:7d:bb:ca:ef:e7:d8:08:2c:73:a5:94:0d:
2f:2f:a6:89:07:0d:33:d2:8e:42:cc:24:12:45:74:
22:ea:35:7f:58:53:1b:f9:ba:79:f1:c7:d6:47:24:
93:54:91:b6:71:a1:65:b3:6d:bd:b9:4e:71:78:5f:
bd:c6:b5:32:57:0f:99:df:46:bb:fa:d3:f5:8c:ec:
82:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EC:B3:66:E8:A5:46:7C:4B:E7:0C:AC:51:B3:BE:B5:41:EC:8B:22
X509v3 Authority Key Identifier:
keyid:58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/49B77DC2667211EEBDC73D3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.95.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:63:5c:18:95:e5:30:ad:e0:7c:d6:6e:a9:56:18:02:1d:61:
e2:17:24:7c:02:6c:f1:aa:3d:b6:99:b4:26:5d:20:ed:17:07:
96:2b:f4:a9:3e:c3:fb:de:d2:fa:e8:f5:c9:6e:d8:1b:9a:1f:
16:db:46:81:d8:2a:43:1f:7f:5a:94:98:36:83:b3:56:34:ea:
f0:bb:16:ce:ad:bc:7e:47:35:60:93:9b:07:90:38:4f:d0:f6:
12:8a:33:91:41:e1:53:13:17:51:88:ff:d6:de:69:a7:1a:a1:
28:6d:de:9b:ac:a6:99:9f:ff:24:80:29:ff:7e:a3:ad:a4:49:
b6:67:b6:57:76:97:47:d8:17:2c:79:dd:f0:49:ed:2c:ae:31:
03:d0:5f:01:c5:ce:c6:ea:5c:56:06:fb:10:54:4f:28:e4:f1:
64:b8:6f:9c:d9:2a:8a:14:76:cb:67:87:11:d3:20:0b:c8:e9:
dc:57:a7:b3:1a:5c:ae:20:52:e3:1a:a6:e4:f5:79:b0:82:2a:
2d:90:00:ec:4a:d2:68:52:c6:25:0b:8d:ca:19:9f:f0:0c:13:
d8:5e:95:7d:1a:d8:94:4d:89:24:39:b8:ed:62:ba:8b:f9:f6:
64:ee:3b:72:77:0a:76:ad:56:eb:fe:c2:4f:04:c2:3f:c7:03:
17:eb:4a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:01 2024 by rpki-client on console.sobornost.net