Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/13C73FAC40B311EE85CAE468C4F9AE02.roa
File: 13C73FAC40B311EE85CAE468C4F9AE02.roa (raw, json)
Hash identifier: tXxmERnVwMcdf/xpQ/ECeVJkcvTBO1ipnmNPK/Y7wmc=
Subject key identifier: E1:91:28:08:B5:5B:F5:FE:48:B8:78:A1:07:4E:A2:B1:F0:AD:FF:28
Certificate issuer: /CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Certificate serial: 0366
Authority key identifier: 11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/13C73FAC40B311EE85CAE468C4F9AE02.roa
Signing time: Sun 03 Dec 2023 02:13:57 +0000
ROA not before: Sun 03 Dec 2023 02:13:57 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 7586
IP address blocks: 103.177.44.0/24 maxlen: 24
103.177.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 05:10:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 870 (0x366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Validity
Not Before: Dec 3 02:13:57 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=656be465-7c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d2:04:06:e5:28:2f:d6:ab:91:8f:7e:fc:81:
b2:ac:4c:38:42:bb:6c:a3:c5:06:80:9c:c4:48:f2:
15:5c:01:57:6d:35:4a:4c:20:69:d0:48:5a:fa:d9:
c5:d1:e8:32:cb:c9:52:1a:18:54:21:91:be:57:cd:
19:79:aa:7f:58:27:a8:1d:96:a5:08:99:d6:db:2d:
f5:ff:9a:a0:f3:16:6b:c3:5b:26:6e:1e:62:fe:02:
75:36:50:0e:6f:8b:64:70:1c:53:68:dc:3f:d0:92:
95:54:7e:62:e1:26:e4:fc:29:45:df:45:b6:23:fd:
ba:d1:4f:80:7a:33:41:46:d5:77:9e:1f:d6:ef:39:
0e:d5:83:07:4c:11:f7:6a:00:e4:fd:18:0e:9f:4a:
e7:2e:56:51:97:be:4f:6c:b6:7d:20:f9:90:26:d1:
62:b7:44:04:ad:e8:c5:2f:cb:75:48:2a:f6:e5:6c:
59:67:d3:0e:21:25:50:13:ea:cd:5b:ed:7d:29:e2:
ff:a2:2b:2c:ce:b3:be:a0:14:79:f2:fc:da:b4:4f:
f8:b4:09:4e:75:48:b2:61:aa:0e:7d:40:f1:94:9f:
cd:ee:6e:3a:00:bb:7f:ef:c9:9f:9e:74:a8:33:79:
57:0c:da:2d:2b:46:e3:2b:fd:9f:45:10:95:ce:53:
20:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:91:28:08:B5:5B:F5:FE:48:B8:78:A1:07:4E:A2:B1:F0:AD:FF:28
X509v3 Authority Key Identifier:
keyid:11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/13C73FAC40B311EE85CAE468C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.44.0/23
Signature Algorithm: sha256WithRSAEncryption
60:fb:04:d0:4d:81:29:81:9d:d5:f2:c0:a4:c0:17:5f:41:52:
bd:18:cf:f9:db:bc:ff:c3:6b:21:b9:b3:7b:24:34:69:2f:51:
e9:02:a5:54:48:51:37:92:ab:d6:9f:1e:3e:fc:d9:ea:56:11:
df:8f:ec:af:cf:c4:ac:e9:6c:10:53:d9:2b:07:8b:42:bb:cb:
7b:d0:9d:99:14:af:92:88:46:68:d4:6f:98:0b:f2:cf:ba:47:
eb:13:29:2c:80:6b:f2:32:17:97:79:2a:0f:9b:72:b9:9c:18:
7e:34:be:84:67:e4:61:89:28:dc:ac:39:3b:d0:04:f6:d1:c6:
9e:ff:fd:53:bc:48:cd:c3:72:04:cc:04:c4:db:30:fd:ff:fe:
f3:63:87:1a:c9:e1:d1:76:36:cc:c8:b3:0d:9e:39:46:7f:5a:
e1:63:fc:3d:24:d1:27:89:cf:92:ad:3e:d4:cc:6c:b1:60:1e:
e1:a6:24:5c:b8:ec:fd:53:a9:68:1c:f3:35:ce:c6:8c:99:92:
1c:c2:79:93:e7:13:a8:62:1d:5f:f9:bc:6c:43:2f:90:99:73:
f2:69:d7:52:42:66:35:c6:51:2d:a1:74:3b:3f:92:8e:25:58:
a8:f3:12:e2:c1:1e:55:d3:c2:c3:45:7c:c3:5b:3e:90:b5:8d:
39:43:36:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 05:58:27 2024 by rpki-client on console-ams.rpki-client.org