Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/0447DC122A1E11EFA29C1386C4F9AE02.roa
File: 0447DC122A1E11EFA29C1386C4F9AE02.roa (raw, json)
Hash identifier: /mYeRmyPqBHbFmEEbYNHCxZiTVKuMS7AiX4nX7dA3kM=
Subject key identifier: D7:7B:51:84:5C:2D:41:0B:0B:B6:26:29:49:B6:CB:CC:A1:6F:00:7D
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 1037
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/0447DC122A1E11EFA29C1386C4F9AE02.roa
Signing time: Fri 14 Jun 2024 07:16:28 +0000
ROA not before: Fri 14 Jun 2024 07:16:28 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 32167
IP address blocks: 103.140.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Jun 2024 07:39:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4151 (0x1037)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Jun 14 07:16:28 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=666bee4c-c80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fc:67:af:53:f6:c1:35:55:cd:40:50:e5:1b:
05:c5:bc:28:66:63:5d:17:74:3c:11:4c:68:e2:0d:
a6:ca:5f:7c:70:9f:0e:c6:7f:92:d8:fa:e7:91:c4:
cf:92:6e:67:1e:ba:d1:86:97:c9:74:78:9b:61:90:
c1:ea:a5:34:88:2d:d7:f4:c8:cc:b1:e0:2f:e1:8a:
ae:d9:16:69:87:a4:c1:38:e5:21:22:c6:df:5f:05:
59:83:57:23:f4:b3:ac:d5:99:6a:e0:53:9b:51:b0:
ca:87:10:64:98:d3:a0:25:d4:41:c3:54:71:4b:58:
ac:8b:48:09:99:ab:d8:38:05:3a:64:63:ae:5f:3e:
f1:62:9f:a0:b4:95:2e:12:32:ba:3c:71:72:48:6d:
34:99:2d:b1:d0:50:78:15:81:ab:ae:98:a3:ed:c8:
f3:0c:bd:80:43:f1:96:af:c3:08:0a:08:c1:9a:b7:
18:e3:73:35:b4:9b:0c:4d:04:45:f2:c3:2c:0c:e7:
db:d0:5b:20:e1:66:07:3e:28:f2:9f:1b:66:9f:16:
fc:4a:b3:57:20:36:b9:a7:8f:9a:41:74:da:66:c6:
1f:9a:96:9d:9d:67:74:2b:cd:95:6c:70:a9:46:78:
ae:53:b6:04:a6:ae:5d:b3:6d:a9:e0:cb:23:ff:77:
f3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7B:51:84:5C:2D:41:0B:0B:B6:26:29:49:B6:CB:CC:A1:6F:00:7D
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/0447DC122A1E11EFA29C1386C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.9.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c9:83:0c:f6:68:2b:ef:e8:ce:7c:12:bf:e0:c0:ee:1a:27:
8d:ab:41:f0:71:82:30:ce:87:cc:6b:66:96:7e:c9:ea:c7:ab:
41:14:4e:54:81:0c:a8:cf:62:27:f6:2a:75:8b:15:8c:8a:80:
0e:ab:a6:99:2d:aa:79:40:17:e8:9b:45:56:e7:2b:9b:06:ce:
46:05:a5:5c:da:c1:a6:db:50:e2:f3:12:43:91:47:e4:f1:7d:
04:dd:60:fe:f2:6d:b9:dc:31:49:9c:fb:dc:a6:c9:97:9e:a7:
af:b9:88:19:90:4d:35:af:2d:0b:36:20:61:b8:2a:a4:f3:b4:
7f:99:8f:3b:e2:8c:1d:f1:d6:87:2a:ac:52:51:34:08:e6:a0:
7f:97:06:29:bc:a6:78:ef:1e:e4:28:9d:bd:2e:00:6a:5e:4e:
37:71:1f:43:a6:25:db:5d:e4:d2:18:f7:68:74:c6:c4:6b:c1:
26:e9:00:d3:67:52:44:d3:eb:76:c7:49:01:e5:d4:64:54:f8:
3d:4e:23:91:e3:59:21:a0:bf:59:46:f3:c8:ff:d1:af:84:a7:
92:15:74:4e:c8:c8:56:d4:b3:65:dc:ab:67:d0:9c:e7:f8:0b:
6b:c0:0d:df:13:36:c9:d9:a9:a5:7d:0f:80:74:4b:58:73:a6:
cb:13:3b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 12:03:28 2024 by rpki-client on console.sobornost.net