Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/A728ECCC27E511EF8DAA4753C4F9AE02.roa
File: A728ECCC27E511EF8DAA4753C4F9AE02.roa (raw, json)
Hash identifier: oD4H3g7KkWISPDp3mGsn7NDz353MhZ2VpTEkaoA1xP8=
Subject key identifier: 7F:EE:2E:38:9D:61:6B:D9:DA:08:AE:21:25:6F:9C:B4:21:B4:59:2E
Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Certificate serial: 12D9
Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/A728ECCC27E511EF8DAA4753C4F9AE02.roa
Signing time: Tue 11 Jun 2024 11:27:58 +0000
ROA not before: Tue 11 Jun 2024 11:27:58 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 137877
IP address blocks: 103.116.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Sep 2024 12:05:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4825 (0x12d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Validity
Not Before: Jun 11 11:27:58 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=666834bd-32e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fa:c3:d2:4b:cf:25:e1:2a:fe:29:b8:b7:ab:
eb:09:79:24:9c:db:5a:77:e0:49:a2:7e:a3:64:a4:
ae:9b:20:c2:86:c6:23:45:e6:fe:b8:1d:0c:51:ae:
1c:e9:42:9f:30:b3:59:9d:30:5d:f1:ca:98:0b:f4:
13:7a:bf:a2:76:08:d0:37:4a:fa:fa:f5:34:bd:d8:
36:71:ac:3e:98:cf:14:af:7d:b8:73:fd:ea:a0:8c:
1e:01:ce:5a:4e:d7:12:6c:29:bc:b7:2e:fd:15:cf:
1f:f0:67:e4:0a:36:fc:4f:3c:d7:d6:1a:ff:e9:ff:
db:81:77:2f:31:71:fd:2a:77:05:a0:9e:9a:f1:06:
23:1c:70:92:53:db:9f:27:f5:93:45:7c:84:f0:19:
4b:fb:4a:24:57:be:e1:fa:6e:bb:fa:65:bd:d6:d6:
29:1f:62:3d:77:2a:91:c0:91:6a:62:66:7e:9a:aa:
bd:54:9f:e5:c4:2d:7a:52:1c:81:eb:f3:5a:3f:58:
f7:b5:c6:a3:5c:d5:4d:99:d9:c4:ed:2e:d4:92:37:
84:fc:8d:06:a9:db:21:86:a1:ae:91:72:da:80:d2:
bf:ab:1c:4e:33:2e:ae:8b:33:b9:96:f0:07:60:5e:
dd:ed:24:b6:c5:ac:89:f8:0d:19:c1:74:63:9f:4d:
9f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EE:2E:38:9D:61:6B:D9:DA:08:AE:21:25:6F:9C:B4:21:B4:59:2E
X509v3 Authority Key Identifier:
keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/A728ECCC27E511EF8DAA4753C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.45.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:40:c9:12:32:3b:f8:81:32:a8:bb:6b:aa:28:16:56:c3:2c:
41:11:1b:fe:50:a7:8f:a8:05:d7:f1:5e:dc:c5:3b:17:37:63:
9a:dc:58:40:2d:19:d3:91:b1:e1:fc:ad:31:6d:72:35:f9:9e:
6e:5c:e3:bd:98:d6:e3:ef:50:7d:f8:be:c4:96:d5:ee:ab:f1:
9d:a0:8f:26:92:e0:40:65:51:97:67:85:14:50:91:e2:1b:fa:
d1:85:b2:eb:5b:4f:d7:c5:99:e8:57:a7:63:82:96:a7:a9:09:
50:24:81:32:bc:1d:67:06:38:c5:79:1a:5d:91:be:2d:ef:ee:
c4:d1:76:8f:f3:db:69:0f:31:75:45:36:42:2a:2a:96:c5:f2:
1c:2c:73:ff:8b:bb:7e:75:29:ca:f2:7b:34:e8:52:41:93:74:
90:30:d7:1f:42:88:7a:30:2d:fe:ef:a1:32:24:b1:fd:21:44:
21:98:85:10:9c:ae:fb:1a:8b:64:20:3c:3a:aa:fa:8c:17:fc:
7e:b9:db:e8:1f:87:29:df:5d:85:bb:be:ad:1a:83:b6:11:bb:
7d:37:8c:02:29:cf:cd:2d:87:d3:6e:f8:b8:69:54:eb:1b:8b:
ee:31:f7:75:15:e7:93:3c:d2:b1:c6:cc:07:34:43:0a:19:08:
87:2c:56:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 19:04:59 2024 by rpki-client on console-ams.rpki-client.org