Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/93FB97A64ABD11EC92951C1DC4F9AE02.roa
File: 93FB97A64ABD11EC92951C1DC4F9AE02.roa (raw, json)
Hash identifier: lcU0fxxRQ7dG3EL0i7kOwoEaPMD+xfcJb18FfN7OxzA=
Subject key identifier: 8E:5A:3A:8A:14:00:89:A6:59:AB:8A:16:C9:27:5E:3F:06:FA:9B:91
Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Certificate serial: 12DA
Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/93FB97A64ABD11EC92951C1DC4F9AE02.roa
Signing time: Tue 11 Jun 2024 11:27:59 +0000
ROA not before: Tue 11 Jun 2024 11:27:59 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 135542
IP address blocks: 103.116.44.0/24 maxlen: 24
103.116.45.0/24 maxlen: 24
103.116.46.0/24 maxlen: 24
103.116.47.0/24 maxlen: 24
103.129.196.0/24 maxlen: 24
103.129.197.0/24 maxlen: 24
103.129.198.0/24 maxlen: 24
103.129.199.0/24 maxlen: 24
2402:f5c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 20 Sep 2024 12:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4826 (0x12da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Validity
Not Before: Jun 11 11:27:59 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=666834be-9b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:14:21:b5:da:bc:fa:3e:ad:ee:dc:a6:cb:
22:7a:7e:2c:12:26:aa:40:c0:45:34:3e:29:e7:ea:
91:f0:da:d4:da:c9:80:75:5e:69:a2:64:32:b2:a3:
d6:b0:a3:72:f1:61:18:1e:b3:2c:46:3d:da:0f:79:
96:f8:c5:13:8d:b2:0f:2e:5e:66:c1:4f:44:90:97:
c5:1a:e1:b1:8f:6d:3f:cd:28:76:a7:24:e4:0f:c9:
33:10:a6:4f:a5:6f:be:74:48:19:ee:82:ae:14:d8:
e7:68:76:d3:21:10:5c:99:0d:f6:e4:90:40:68:92:
49:3c:f5:0d:a5:b4:41:e1:8f:06:a4:4d:37:4d:5c:
79:cf:1b:3e:68:bb:b3:ee:96:85:f4:da:5c:bc:e1:
62:e9:2e:8e:dd:e0:ea:10:cd:50:89:e0:cd:d6:97:
42:0a:66:26:fc:6c:ec:86:a6:7e:72:e9:e4:d2:bc:
d5:0d:e3:2a:f5:fc:eb:11:66:f6:15:86:72:ee:57:
b8:5d:a4:64:c1:4e:7d:d3:aa:fc:e2:e4:cb:1d:ee:
c7:82:12:e1:da:e2:bb:1a:5b:16:87:ed:a9:30:e8:
1d:4c:d8:e3:d9:44:0e:29:aa:dc:93:3c:8d:e4:26:
ba:b1:19:76:97:e8:2c:32:82:5e:cc:dc:1a:31:f4:
4c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5A:3A:8A:14:00:89:A6:59:AB:8A:16:C9:27:5E:3F:06:FA:9B:91
X509v3 Authority Key Identifier:
keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/93FB97A64ABD11EC92951C1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.44.0/22
103.129.196.0/22
IPv6:
2402:f5c0::/32
Signature Algorithm: sha256WithRSAEncryption
0c:6f:10:eb:d0:18:75:9c:91:da:6c:6e:09:2b:d9:af:c3:17:
b3:0c:f6:3a:8e:39:77:18:4c:8d:47:31:d2:24:81:80:ad:4b:
79:ab:ee:54:32:20:04:69:93:5e:89:d8:13:9b:91:ab:04:93:
20:ad:8b:74:73:99:67:c7:b1:45:e6:eb:a9:1e:5a:9a:bb:8a:
24:a0:1f:34:71:e6:a2:e6:9e:32:a9:9a:40:15:16:79:82:da:
78:98:4d:75:49:07:a4:78:87:7a:64:a5:7b:9f:88:82:cc:d3:
a1:e7:74:89:cc:a8:a4:59:43:15:5f:c1:bb:db:a2:1e:48:ec:
11:47:fc:5a:2a:3c:ea:dd:8f:c4:0c:8f:9c:e0:61:6d:8a:a5:
fb:0e:5b:53:62:56:88:83:67:85:22:4e:c3:8a:81:47:56:c1:
5a:3f:7e:0c:77:51:86:82:91:7c:58:e7:16:97:4b:bb:2f:11:
f3:f3:ae:6d:64:a5:3f:d3:ea:3c:10:bc:f1:80:ca:31:b1:2a:
72:00:42:70:f6:86:17:7f:27:92:14:a8:79:fc:a3:dc:64:a1:
bf:fc:81:49:93:a9:c4:59:2a:41:a2:58:c5:83:04:f4:cf:4f:
ce:94:70:09:ca:68:77:91:da:f5:ed:39:00:52:ab:ef:c7:21:
14:68:06:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 14:32:39 2024 by rpki-client on console-fra.rpki-client.org