Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/EE1FF6F4AD6D11EE83DA6253C4F9AE02.roa
File: EE1FF6F4AD6D11EE83DA6253C4F9AE02.roa (raw, json)
Hash identifier: tOdFEV7278Ay6R+0qlzKp8RBHbCBNQrRx0XaNj05fZI=
Subject key identifier: 72:D3:EF:00:46:14:A1:19:C9:65:4D:5F:25:1F:7E:E4:3C:74:C2:81
Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Certificate serial: 15
Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/EE1FF6F4AD6D11EE83DA6253C4F9AE02.roa
Signing time: Sun 07 Jan 2024 15:03:35 +0000
ROA not before: Sun 07 Jan 2024 15:03:35 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 44901
IP address blocks: 103.79.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jan 2024 14:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12
Validity
Not Before: Jan 7 15:03:35 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=659abd47-0669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e1:8d:e8:c1:7f:71:d7:75:e2:fd:93:78:7d:
35:62:2a:48:b1:1b:19:cd:8b:90:1c:10:b9:77:4c:
ac:af:10:f8:f9:48:1e:b3:81:68:95:6b:7d:da:62:
1e:9d:7e:ba:27:63:53:01:3b:6d:07:5c:c6:17:92:
ef:af:30:95:1c:8a:5f:c7:7b:16:2c:03:8b:02:56:
df:7f:37:ba:b0:72:d1:e6:1d:c8:7e:e0:38:31:22:
f9:52:40:46:a3:40:7c:5c:b0:ac:53:e8:f0:31:17:
2e:5d:c3:ef:3e:d4:3d:61:78:e3:c3:13:70:42:eb:
96:e4:73:18:36:16:53:0d:69:77:a8:1d:33:6c:e2:
08:08:65:be:08:bb:17:42:5d:79:91:11:69:3c:76:
55:14:b5:81:9d:77:61:e0:19:58:48:2b:32:2c:6b:
04:0c:bd:10:60:c8:97:5c:ae:18:f3:94:ae:e3:93:
bf:4c:07:7c:40:50:6f:52:8b:34:39:c6:d2:d6:4a:
ab:a3:b6:cb:9c:de:c1:cf:4e:5a:67:68:4c:51:84:
b4:c1:04:53:e9:e4:11:9b:60:f9:ad:46:56:09:87:
f4:80:31:70:5a:d2:4c:ce:ea:b4:22:b9:a8:74:8a:
46:71:d3:84:48:a2:39:9e:cc:4c:ee:6f:36:df:d9:
a2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D3:EF:00:46:14:A1:19:C9:65:4D:5F:25:1F:7E:E4:3C:74:C2:81
X509v3 Authority Key Identifier:
keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/EE1FF6F4AD6D11EE83DA6253C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.118.0/24
Signature Algorithm: sha256WithRSAEncryption
61:28:ed:1e:44:87:06:c0:27:11:27:0e:b5:d3:d6:4f:58:aa:
29:23:6e:e0:55:a3:07:2a:d8:12:48:05:a8:8a:4d:69:c2:40:
7d:c0:d6:6b:b9:6b:fa:54:12:90:2e:34:6f:1a:c5:e4:29:79:
97:6f:b1:92:36:34:a2:40:72:00:9e:2f:15:75:ff:9c:ce:2d:
05:10:0b:ec:9e:3c:96:88:3d:07:ec:48:11:85:64:a1:cc:43:
f2:2e:be:47:69:9f:e4:65:f6:76:23:4d:b3:fc:ad:51:52:fb:
ee:53:f3:07:d9:88:3d:da:23:5e:09:34:36:5a:d1:45:78:b4:
86:aa:53:2d:64:31:f3:14:44:6e:30:24:c4:76:b3:d3:8c:94:
49:7e:7e:47:57:b0:c3:58:4a:59:66:e4:20:45:a7:2a:bf:32:
50:b4:cc:97:2f:a4:a4:dc:be:6b:fb:78:b4:da:0c:b8:ab:e4:
a8:b6:78:d2:f1:73:48:8a:29:08:cd:aa:39:52:0a:1d:b7:36:
01:30:b2:75:2f:9a:50:de:22:9b:d9:66:10:8b:fc:f5:5c:9a:
28:b2:34:b6:04:f9:03:d7:6f:89:41:26:95:7c:b6:12:ca:20:
49:a9:60:91:d1:64:1f:78:d7:43:47:cc:e8:71:b5:1e:b4:c6:
7a:29:7a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 20 18:27:16 2024 by rpki-client on console-ams.rpki-client.org