Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/5EAE8DE6509711EFBDABEB81C4F9AE02.roa
File: 5EAE8DE6509711EFBDABEB81C4F9AE02.roa (raw, json)
Hash identifier: FIwOiumqfPTzRMsiwdt+KhnZr27yDBruIOMOQIJBU7w=
Subject key identifier: 4E:FB:0A:58:CF:EB:89:25:31:A8:56:5E:D7:B5:0E:EA:73:8B:AB:16
Certificate issuer: /CN=A912C0DE/serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996
Certificate serial: 81
Authority key identifier: EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/5EAE8DE6509711EFBDABEB81C4F9AE02.roa
Signing time: Fri 02 Aug 2024 06:21:31 +0000
ROA not before: Fri 02 Aug 2024 06:21:31 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 151404
IP address blocks: 103.68.106.0/24 maxlen: 24
2001:df2:9440::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 Aug 2024 01:14:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C0DE/serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996
Validity
Not Before: Aug 2 06:21:31 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66ac7aeb-a52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:b2:54:14:ad:8b:c5:13:a7:37:b6:7e:76:
29:7c:28:4d:2f:3a:2f:5a:ae:ed:92:e9:17:ca:cf:
0c:46:9a:41:be:0a:e3:1c:ff:2e:92:1b:17:99:fa:
af:21:a2:11:ae:e5:ce:04:53:6c:50:8d:aa:f7:c8:
4e:83:bf:31:d6:36:6b:16:b6:b9:65:6f:b6:06:c5:
04:c9:60:d6:de:82:2d:b7:0f:35:1b:22:38:24:82:
d1:da:54:0d:f6:8c:45:cc:96:b9:85:06:70:8c:c0:
42:52:50:da:27:e8:82:3c:f2:df:a0:c8:ea:1a:f6:
2c:af:89:33:60:df:3a:a4:a9:7d:f6:15:86:05:3f:
08:c4:da:c0:83:ed:e8:65:82:25:dd:5c:53:f1:32:
7f:99:92:f3:a9:f3:36:59:c1:30:02:da:1f:4e:28:
59:b8:24:71:b5:95:f4:92:27:f8:70:44:59:11:05:
fe:dd:ef:f5:14:21:63:83:3f:47:53:52:25:7c:59:
a7:04:aa:dd:f4:66:f5:2d:dc:c3:9f:e2:b4:77:03:
7e:48:09:5f:d8:61:5c:c8:56:10:8c:a9:fd:0b:38:
d2:96:bd:7b:97:8b:7c:3a:68:d0:11:dc:33:a5:fe:
01:4c:69:aa:88:4e:19:f3:ce:0c:55:ae:8f:44:98:
d8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FB:0A:58:CF:EB:89:25:31:A8:56:5E:D7:B5:0E:EA:73:8B:AB:16
X509v3 Authority Key Identifier:
keyid:EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/5EAE8DE6509711EFBDABEB81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.106.0/24
IPv6:
2001:df2:9440::/48
Signature Algorithm: sha256WithRSAEncryption
b6:72:e2:b3:f0:bd:20:54:a9:d9:9c:88:46:a7:e4:64:1d:89:
fa:48:dd:90:a7:01:c8:ca:c2:c1:51:7c:96:ec:38:36:6d:a7:
85:1c:72:2f:a1:e4:4e:44:1a:cf:a9:08:91:0e:7b:64:e8:29:
34:64:7c:4e:9e:2b:1c:81:26:12:52:13:f6:c5:f9:23:94:e8:
ed:c3:76:5a:05:18:02:9f:21:4d:a2:34:cc:6e:28:59:71:2a:
30:d8:71:72:79:d4:20:0d:ee:fe:f9:a9:5a:7d:22:44:0e:be:
be:2c:b8:f2:2d:c2:50:73:ff:05:1e:b2:f5:67:e1:ab:a3:b2:
25:48:d0:09:c5:e5:80:3e:22:96:0a:f9:a2:b1:d3:17:88:87:
8c:5a:6a:8b:94:be:be:c1:ad:01:c4:7c:22:1e:e8:8f:33:ed:
45:80:43:c5:a6:4c:dc:d3:77:95:ff:c7:b9:6c:28:ec:54:b8:
d8:40:fd:31:a9:4c:3d:4b:e5:39:18:d5:6d:23:1d:b6:0d:90:
ad:78:11:ce:83:a1:f9:c7:47:ba:c5:43:bb:08:9e:37:47:6b:
9f:d4:77:2d:23:41:00:52:76:e8:95:3f:bd:a0:f6:ca:8f:e5:
6f:c2:10:3e:b5:d9:dc:5a:71:61:0c:6f:ec:78:f0:d0:72:6a:
26:7e:66:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 04:13:20 2024 by rpki-client on console-fra.rpki-client.org