Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/04A9BA5A76B211EFAD50542AC4F9AE02.roa
File: 04A9BA5A76B211EFAD50542AC4F9AE02.roa (raw, json)
Hash identifier: z1q9oGDGLcUprYeIt9W/agRsCPc7LcyE3o5ciZK8ur0=
Subject key identifier: 63:DC:EC:29:C5:3E:D9:70:24:20:4F:46:4D:5B:F7:44:91:7C:CF:A4
Certificate issuer: /CN=A91193C1/serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
Certificate serial: 049F
Authority key identifier: 14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/04A9BA5A76B211EFAD50542AC4F9AE02.roa
Signing time: Thu 19 Sep 2024 18:07:23 +0000
ROA not before: Thu 19 Sep 2024 18:07:23 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 140612
IP address blocks: 103.172.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Sep 2024 15:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1183 (0x49f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91193C1/serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
Validity
Not Before: Sep 19 18:07:23 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=66ec685a-0bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:01:8d:23:4d:6f:87:05:28:be:a3:9e:c5:
b5:d2:d5:4b:75:62:62:cf:fa:07:80:77:63:77:49:
d1:f6:b0:57:0c:80:bd:a8:30:57:d1:03:24:c0:67:
8c:8d:fd:e4:12:4e:cc:a1:06:07:a4:57:27:e9:f3:
80:97:42:a0:fe:3c:a5:0d:83:c5:23:e0:93:58:04:
37:67:9d:14:92:16:8a:2a:aa:7d:73:7b:4d:bb:e2:
07:8e:4b:05:ad:6c:ea:5f:7d:c6:e6:5e:42:09:11:
46:fd:e9:65:a1:e0:e0:ca:c2:b4:c3:07:aa:bb:8e:
42:bd:c8:d7:cf:dc:4e:6c:79:b7:0e:2e:02:13:a6:
91:ef:bb:b6:0c:68:0b:cf:c8:1a:da:26:2e:de:a1:
3a:fd:6b:a7:e7:d6:cb:ad:38:35:4c:8a:cf:7a:5a:
a3:99:ba:3d:81:97:97:cd:63:48:c8:4e:0b:2a:af:
88:e9:cb:84:96:58:56:62:98:a9:b5:e0:d7:24:0f:
a3:5f:ab:f7:4c:5c:9a:7a:58:4d:34:cd:dc:a1:3a:
f8:c5:63:00:9d:b4:bc:27:2b:56:30:dc:1b:82:29:
fc:3c:6d:67:2c:dc:2f:1e:93:ad:23:0f:ce:a3:0d:
3a:a9:b2:eb:fd:b8:4e:64:c3:30:9f:4b:c3:88:8b:
ce:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DC:EC:29:C5:3E:D9:70:24:20:4F:46:4D:5B:F7:44:91:7C:CF:A4
X509v3 Authority Key Identifier:
keyid:14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/04A9BA5A76B211EFAD50542AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.39.0/24
Signature Algorithm: sha256WithRSAEncryption
39:3e:f5:3e:79:62:81:71:24:bc:f1:72:e7:c9:03:1e:e1:b0:
fe:47:b4:44:36:ee:cb:6d:64:ac:da:4b:63:eb:03:f9:59:77:
0d:ee:79:f7:b0:70:5d:de:a6:b5:fc:29:37:a0:fc:9f:36:69:
94:1d:61:84:33:16:14:1c:f1:bb:15:ca:20:ab:d9:cc:3e:38:
a0:5d:3f:b7:77:f8:f8:bf:29:1b:98:7c:60:62:62:27:2f:ff:
16:d5:f5:64:8f:4e:12:c3:b9:3c:00:30:2c:5c:5e:41:63:4a:
f9:95:de:e3:6d:5c:b6:cc:a3:00:01:be:68:be:c9:00:e0:d4:
2e:c1:1a:9d:be:00:6b:70:b4:4e:f1:89:40:84:40:f5:13:81:
98:85:df:b1:5d:62:42:2f:11:11:60:70:3e:8b:dd:98:ac:7c:
a3:bc:ef:56:b6:9f:92:be:1b:89:69:b9:54:dc:21:60:d4:2d:
32:b4:16:42:d4:34:72:94:bd:01:6f:9b:0d:db:f0:72:27:e1:
6a:b4:7c:94:67:50:41:0b:c1:36:4c:13:3d:4a:0b:49:7a:34:
87:3a:ff:da:d3:53:7f:80:78:15:61:4b:ef:92:f2:75:f6:b6:
ee:60:31:cd:19:17:10:34:d3:42:ed:f3:49:e7:65:46:5f:27:
10:f0:69:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 18:56:12 2024 by rpki-client on console-ams.rpki-client.org