Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/FE37F6E0E71711ECA4C60269C4F9AE02.roa
File: FE37F6E0E71711ECA4C60269C4F9AE02.roa (raw, json)
Hash identifier: DuJriYmsMlomCvmwsIrLCdv6r+w0vKkWmRSaPdMba4E=
Subject key identifier: 5F:25:B2:65:D5:9D:40:7B:39:83:62:FE:4C:AE:7E:F7:92:A5:A5:0D
Certificate issuer: /CN=A9112DEF/serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4
Certificate serial: 02C2
Authority key identifier: E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/FE37F6E0E71711ECA4C60269C4F9AE02.roa
Signing time: Tue 25 Jun 2024 02:53:18 +0000
ROA not before: Tue 25 Jun 2024 02:53:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141452
IP address blocks: 103.185.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Sep 2024 13:57:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 706 (0x2c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112DEF/serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4
Validity
Not Before: Jun 25 02:53:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=667a311e-d190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:6d:93:69:69:bc:76:28:4b:e3:23:91:df:13:
72:5b:8b:b9:8f:9e:2a:5c:0a:8f:13:44:73:b2:15:
41:88:87:fe:aa:eb:ef:9c:02:10:82:df:02:b9:8f:
04:66:cc:ca:26:01:37:0b:3a:9c:6e:49:06:e0:b8:
38:cc:1e:c2:74:6d:e2:10:43:b4:10:3e:39:d4:2e:
11:b0:05:eb:aa:70:a5:d4:a7:8f:08:95:c1:bb:0f:
af:6a:e4:6c:47:4d:bb:3e:ce:5f:71:6f:a1:a8:4b:
01:f9:18:55:28:be:ef:71:0f:b8:a0:66:7b:bb:5a:
3c:12:b4:ae:65:b5:f3:db:24:0a:db:0b:e9:7e:24:
5f:17:f0:89:4e:fb:35:38:58:6f:6b:eb:36:b8:77:
a2:86:55:48:9a:19:a4:7f:1d:7b:3e:49:f6:96:20:
ff:1b:91:ce:7f:8c:cc:57:b2:04:2a:c5:6e:0d:0f:
66:a6:a5:c7:eb:bc:1d:69:b8:e8:c7:0c:c0:a7:af:
6d:fd:c9:fa:34:c6:6d:87:e5:f1:c9:cf:19:5e:4c:
19:35:85:e8:f0:a7:d2:5e:db:6a:17:01:74:82:88:
28:9a:99:af:ce:1e:c7:8d:53:63:77:37:17:9f:30:
74:69:b6:c4:a7:77:a0:12:d2:24:1d:05:aa:8c:e6:
b9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:25:B2:65:D5:9D:40:7B:39:83:62:FE:4C:AE:7E:F7:92:A5:A5:0D
X509v3 Authority Key Identifier:
keyid:E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/FE37F6E0E71711ECA4C60269C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.224.0/24
Signature Algorithm: sha256WithRSAEncryption
08:79:5e:73:8c:84:5c:d8:b5:c0:2f:b1:27:86:04:b6:33:bf:
5b:a0:f1:45:f7:14:63:d3:00:56:a6:29:47:72:5e:92:d8:0f:
1f:0d:b9:5d:b6:44:ea:40:ea:c4:4a:81:0a:61:b2:03:6f:25:
07:7b:84:5d:2b:01:97:b6:fb:ec:21:64:0d:5e:2e:f8:2e:5e:
9e:0e:86:55:2d:b8:55:9e:a4:39:c1:82:e0:64:78:f5:b1:2f:
b6:41:d3:41:43:e0:d7:f2:be:91:12:d4:40:2b:3b:52:ab:e5:
f4:40:bd:ed:5f:20:e3:c4:65:f0:50:5f:4e:61:64:b8:b3:0a:
97:22:59:79:b0:4d:f9:a0:dc:a1:b6:71:d1:1c:bd:1f:cb:5c:
2c:22:bb:8c:84:f7:09:c7:26:7c:66:fb:bf:cc:0a:8c:26:71:
99:8d:e0:e8:dd:c9:39:47:74:59:82:6b:64:98:46:16:11:b4:
c2:cf:e8:1d:46:9c:56:9e:16:2e:42:3b:dc:b7:17:b0:26:a3:
03:b0:9f:85:89:72:59:85:62:51:5e:dc:23:68:e2:63:f3:86:
c2:d4:4c:20:51:d0:4a:84:ba:61:5b:58:ff:ec:eb:29:22:f5:
b3:66:cc:4d:9f:57:5e:12:1d:a0:bd:e5:fa:8d:e2:70:d8:f2:
60:0d:68:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 20:31:47 2024 by rpki-client on console-ams.rpki-client.org