Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/2ABBEDB820C611EF922AE87BC4F9AE02.roa
File: 2ABBEDB820C611EF922AE87BC4F9AE02.roa (raw, json)
Hash identifier: mQQw1vQJTOgKP7y58txUCuU7fnaCkXYnwn0FlUu/3jA=
Subject key identifier: 65:CE:67:55:63:29:6C:25:CB:98:6F:83:03:63:A1:9D:49:2C:1D:5D
Certificate issuer: /CN=A912963D/serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981
Certificate serial: 0ED5
Authority key identifier: F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/2ABBEDB820C611EF922AE87BC4F9AE02.roa
Signing time: Tue 20 Aug 2024 18:06:28 +0000
ROA not before: Tue 20 Aug 2024 18:06:28 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 9825
IP address blocks: 103.117.228.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 26 Aug 2024 14:08:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3797 (0xed5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912963D/serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981
Validity
Not Before: Aug 20 18:06:28 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66c4db23-741e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b6:51:f4:d1:9b:4a:82:6e:93:0f:73:6c:a8:
0f:3a:64:15:43:79:5a:79:d4:82:dc:d3:72:27:70:
e7:5d:d2:2e:20:96:e0:91:5f:e7:82:69:ca:98:0f:
87:d8:f1:4e:53:77:9d:db:26:12:5e:68:07:ca:9e:
fd:d9:b1:88:1b:27:55:41:fe:72:81:85:13:8b:bf:
ef:76:9f:0e:16:35:e1:7f:03:dd:1a:fa:57:94:91:
ca:46:94:3f:c2:10:80:84:7b:2e:d2:bc:49:49:d1:
34:78:5b:04:0b:f3:e0:22:77:77:30:3e:4e:1a:e2:
1e:ac:33:2c:1b:ad:be:62:c6:89:f3:23:b2:7c:fc:
9b:16:d3:43:69:9c:4d:7c:a6:5e:cf:aa:28:8b:86:
33:c2:b8:1c:f3:43:9c:c5:d0:7c:e5:32:52:bd:e9:
b1:b1:b5:e6:4e:7f:27:73:e2:70:01:92:bb:19:ae:
3f:7f:e6:7c:39:ab:66:4d:84:26:1b:b8:a2:0a:05:
66:00:7c:47:7f:dd:30:e4:f1:ce:6b:57:1f:f8:04:
78:eb:05:b7:7a:79:77:e5:05:07:31:85:82:c9:7d:
86:9e:16:7d:af:d0:d6:48:c9:c9:cd:8b:f1:d2:be:
8f:f3:97:74:cd:0f:34:83:25:fc:f6:f6:98:84:0e:
5d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CE:67:55:63:29:6C:25:CB:98:6F:83:03:63:A1:9D:49:2C:1D:5D
X509v3 Authority Key Identifier:
keyid:F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/2ABBEDB820C611EF922AE87BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.117.228.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:4d:46:c9:97:6c:15:95:80:36:11:b2:7b:42:52:df:29:ec:
42:e7:61:45:ee:75:9c:87:e2:c9:b5:b5:44:0f:7f:c6:04:62:
93:50:23:05:fd:19:c5:45:3b:9d:5d:6a:d5:62:e2:b7:72:ae:
99:5e:96:eb:d3:67:20:ef:f6:3c:a6:74:99:4d:5a:33:b0:1d:
80:f7:0b:f4:93:ff:98:7e:1d:e2:e8:ef:14:74:fa:dd:ee:76:
3c:1e:c7:53:d9:10:ae:06:9c:8f:40:71:5d:55:7c:b9:6f:a6:
1e:1d:ac:3b:62:09:9b:eb:30:f3:9c:a1:98:fe:05:5b:c1:fa:
ed:30:36:06:d2:0a:a4:e5:29:fb:76:92:52:b8:da:95:ca:3b:
b8:69:2f:76:c7:95:c0:de:27:36:79:e5:7f:4e:43:d9:d7:4f:
60:ef:6c:76:93:0e:a2:32:c1:9d:2b:d5:81:54:8e:87:f1:e9:
6e:60:57:bd:d2:dc:a3:29:09:95:77:e3:0b:d4:63:37:af:c9:
83:be:b3:2a:8c:e9:a9:ed:32:3b:df:28:9a:0f:a5:02:8c:c5:
68:f4:63:d2:da:b1:a2:b2:a4:e6:7e:70:b6:3b:6a:e5:c1:0a:
08:71:e2:0a:25:90:f4:ba:20:ea:bf:58:4e:2b:28:fe:b3:f6:
9b:bb:4f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 18:04:20 2024 by rpki-client on console-ams.rpki-client.org