Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/E5193D90AB2811EAB2E10A67C4F9AE02.roa
File: E5193D90AB2811EAB2E10A67C4F9AE02.roa (raw, json)
Hash identifier: PT2TLhchbJkq9N4lB9IZIDptlMRzSSlILqP9qd/puEk=
Subject key identifier: 16:CB:8C:E3:70:06:53:B6:48:0B:3C:D8:B6:35:BF:04:64:19:89:65
Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Certificate serial: 0909
Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/E5193D90AB2811EAB2E10A67C4F9AE02.roa
Signing time: Wed 28 Feb 2024 21:29:43 +0000
ROA not before: Wed 28 Feb 2024 21:29:43 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 7489
IP address blocks: 103.207.68.0/22 maxlen: 22
210.16.120.0/23 maxlen: 24
210.16.122.0/24 maxlen: 24
210.16.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Apr 2024 09:24:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2313 (0x909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Validity
Not Before: Feb 28 21:29:43 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65dfa5c7-543c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:d9:37:c7:9d:8c:7f:01:c5:ad:1c:07:0e:
ab:98:f0:99:d3:f6:00:fb:fa:ba:b2:9b:6e:d2:72:
6d:97:14:c9:f1:75:bd:13:42:a2:7e:22:62:6d:f9:
a4:86:12:8d:f3:c3:d9:f9:4f:fe:db:de:1e:a4:52:
a3:e1:07:ff:0e:89:f6:e9:c1:65:06:51:e1:fa:30:
d8:d3:10:6a:6d:37:42:cb:3a:cb:7d:a5:2b:99:de:
b9:2c:db:95:97:10:a3:6a:4b:cc:e4:99:8e:0f:f8:
07:05:24:bc:0d:e2:5d:ec:aa:dd:4c:52:82:2f:57:
67:5c:2f:e8:d1:89:8d:d1:d5:d7:9d:ca:a2:91:ea:
e5:d5:09:61:4a:e8:97:d7:a1:cf:c5:7c:0b:f4:48:
e4:12:b1:40:89:ae:13:8e:5b:97:f7:77:ac:a6:08:
f3:ca:0e:72:6b:c6:68:e5:ea:c0:d9:86:96:c5:39:
0d:d3:33:05:38:9f:8f:5d:fa:ec:0c:3f:46:74:d4:
a4:86:5b:0e:ee:ff:a9:79:2d:11:0b:11:8f:7c:a3:
b5:ed:1a:d0:b6:b9:7e:cb:60:2b:3f:99:01:12:b1:
8f:72:e3:e6:a8:58:80:a9:55:fa:69:72:93:f0:df:
71:5f:85:b0:81:ac:04:7f:45:48:6b:d3:16:71:86:
74:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CB:8C:E3:70:06:53:B6:48:0B:3C:D8:B6:35:BF:04:64:19:89:65
X509v3 Authority Key Identifier:
keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/E5193D90AB2811EAB2E10A67C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.207.68.0/22
210.16.120.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:13:33:5f:b4:c6:97:97:4f:b3:ed:00:64:8f:41:e9:33:3f:
21:b7:a4:e6:8c:bf:70:e5:6b:ae:f0:d5:0f:a0:f9:64:18:63:
06:c6:a5:5c:6d:16:70:9a:fc:90:e3:c8:8c:77:16:54:7a:56:
ba:dc:d2:01:65:74:f4:cb:b0:dc:72:15:03:41:62:bb:c6:82:
45:18:b9:01:27:00:28:a4:a1:9a:cf:89:d7:c3:8d:c5:13:23:
03:33:cb:87:67:69:c3:57:37:01:d1:6d:16:61:31:f3:54:8d:
0e:eb:96:fa:8b:1c:f7:f4:dc:4a:9b:29:e9:e2:02:12:bb:e4:
ad:d0:eb:c3:96:c5:e3:16:8e:21:21:8f:70:1b:4c:b2:83:75:
8f:d4:27:ed:d3:c3:97:06:9e:db:b7:57:52:ac:e0:1f:19:51:
5a:94:44:65:8f:70:3e:db:54:a9:c7:ba:27:6a:86:6f:39:53:
f0:86:d1:6f:91:d2:f5:41:45:19:e3:bc:c6:e3:9b:29:a3:d1:
24:c6:f4:3b:aa:85:81:95:d2:3a:97:0a:43:ff:5f:4e:f1:6b:
25:be:a5:7c:35:da:03:72:32:d6:67:53:66:34:10:87:67:8c:
ea:c2:a3:67:99:81:57:be:8e:38:83:44:2a:01:20:3e:61:6c:
a0:45:cd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 13 13:47:28 2024 by rpki-client on console.sobornost.net