Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/39432932A2F911EE86499E34C4F9AE02.roa
File: 39432932A2F911EE86499E34C4F9AE02.roa (raw, json)
Hash identifier: z5N/7Qj5FBAta12LXt7HOblGJa39pUk8O1VSC+FlzWA=
Subject key identifier: 1E:0A:F1:00:3D:E0:DA:75:AE:E0:49:BF:A4:6E:A9:2D:27:34:25:2A
Certificate issuer: /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
Certificate serial: E1
Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/39432932A2F911EE86499E34C4F9AE02.roa
Signing time: Mon 25 Dec 2023 07:42:59 +0000
ROA not before: Mon 25 Dec 2023 07:42:59 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 151080
IP address blocks: 103.41.94.0/23 maxlen: 23
103.41.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 12:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
Validity
Not Before: Dec 25 07:42:59 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=65893282-832b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c1:83:57:6d:3d:ca:18:5d:01:d6:8b:e3:74:
53:50:dc:a4:c4:bc:4b:28:44:e8:73:52:06:f4:b0:
42:02:cf:63:32:67:af:e5:ad:67:4a:f7:5f:e8:1a:
42:bc:d7:32:9d:33:8e:b2:75:cd:33:be:6d:41:25:
e9:4c:98:b4:11:81:21:21:55:da:0a:a1:fc:f3:60:
e9:71:d7:08:9d:e0:21:ee:d2:51:2c:57:ab:fa:34:
5c:2b:34:07:4e:c3:25:26:8d:57:fc:b7:0c:4e:32:
f0:63:6f:78:e5:37:7e:14:19:87:8f:fb:19:35:c0:
49:d2:8e:c3:ea:ea:73:f5:e7:6f:79:6c:25:6f:81:
19:08:ff:54:8e:bb:0c:13:a6:00:73:c0:4b:eb:04:
74:8f:01:66:18:33:e4:1a:5e:f3:25:bd:0d:2f:0b:
91:fc:5d:d6:21:f8:ee:63:48:7d:a2:8e:3e:f4:33:
af:96:a0:e0:47:d7:bc:e9:a2:95:75:07:be:87:50:
d5:98:c3:1c:f0:78:bc:f5:e3:84:62:14:22:69:97:
5a:3a:3b:ba:b3:c4:ae:af:d2:8b:74:15:d4:84:a6:
24:53:8f:b0:54:fc:ea:c4:65:1d:61:6f:30:b4:a7:
90:b3:dd:73:6a:ad:aa:3c:0d:4d:7d:5c:76:b2:bc:
f7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0A:F1:00:3D:E0:DA:75:AE:E0:49:BF:A4:6E:A9:2D:27:34:25:2A
X509v3 Authority Key Identifier:
keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/39432932A2F911EE86499E34C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.41.94.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:75:24:86:98:9f:96:17:c5:c8:de:f8:0d:03:72:73:34:c4:
6f:75:86:bc:0d:fb:9f:ce:1c:b3:ab:24:a0:ad:50:58:e5:5c:
18:27:f2:19:7d:39:76:94:8c:70:e2:bb:3a:7c:fa:df:15:6d:
eb:8c:e7:12:8d:a8:91:7d:ee:d0:69:7d:a2:ae:01:c5:66:9b:
b9:68:1b:f3:4b:eb:e8:a6:7d:35:90:d5:2e:f8:ad:33:64:18:
2f:3e:f5:ae:9e:46:ea:38:1e:05:f0:eb:22:24:64:01:61:fa:
06:35:92:43:81:59:c4:82:ae:cc:d4:a5:48:a5:4f:81:5b:a7:
93:82:6e:7e:a5:62:e4:7b:ae:47:b3:f7:8d:7a:c1:25:c1:d8:
51:16:7c:0a:dc:b6:b0:88:61:fc:41:ba:65:fb:6e:eb:fb:71:
8c:b6:12:6d:9f:7c:39:81:a8:e8:15:c1:26:33:ce:f7:81:9b:
3d:5b:fd:08:3e:26:6e:dd:ad:4d:e8:4e:2c:d4:e3:df:14:47:
c1:65:1e:c3:8b:98:7a:50:27:24:af:f5:7d:fe:4f:38:82:92:
6d:32:d0:df:e2:d3:08:a7:e8:de:bb:8f:92:0d:99:ac:c6:6c:
df:ee:89:6d:25:a4:5a:75:f1:74:b4:e9:d0:4e:7d:a8:4a:09:
55:a1:8e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:03 2024 by rpki-client on console.sobornost.net