Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/30BB8C9E8B0D11EF82B50C59C4F9AE02.roa
File: 30BB8C9E8B0D11EF82B50C59C4F9AE02.roa (raw, json)
Hash identifier: lXXk80FibCZDkX6BJ8VYs4a9YlBN2p4NPA1L2STVfj8=
Subject key identifier: 78:5A:A4:AC:C2:38:7C:AE:37:8E:62:59:80:7C:1F:44:2E:4B:8E:78
Certificate issuer: /CN=A913367F/serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA
Certificate serial: 0726
Authority key identifier: D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/30BB8C9E8B0D11EF82B50C59C4F9AE02.roa
Signing time: Tue 15 Oct 2024 15:50:24 +0000
ROA not before: Tue 15 Oct 2024 15:50:24 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 132480
IP address blocks: 103.153.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 04:12:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1830 (0x726)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913367F/serialNumber=D4EA9464F322B26D7D2128DC3752F228880016DA
Validity
Not Before: Oct 15 15:50:24 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=670e8f40-e7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:6a:56:72:90:81:32:5e:27:25:1f:9a:03:
7b:77:b3:ea:8d:fa:fc:79:d3:78:15:a9:e1:d1:89:
d8:17:2a:18:33:13:ae:5c:98:b1:91:07:5b:93:a5:
b1:46:af:11:c7:41:75:32:e8:73:a1:46:86:ae:06:
32:9d:63:6c:78:43:bd:da:1f:19:64:cb:08:5b:f0:
60:82:12:ec:4b:ee:5c:28:73:44:ee:c5:af:16:19:
f4:de:a1:b0:ef:a1:0a:24:09:bc:4a:a7:53:b6:63:
62:0a:4d:20:72:83:74:96:3c:d4:75:f4:79:fb:5c:
ef:52:0a:38:d4:f7:b6:40:20:77:79:6c:9d:3a:78:
6b:04:f5:bb:a3:0f:d4:a1:8b:a3:9d:d2:ac:98:4e:
26:bc:19:53:80:12:52:ac:21:3f:f8:4d:70:28:c9:
52:c0:01:92:33:cd:e2:7e:da:f7:96:21:70:da:7b:
86:c6:e9:76:92:79:41:39:62:99:cc:a0:28:f5:b9:
27:94:78:4d:63:41:4b:27:8e:4c:8a:82:30:5c:8a:
a7:21:95:5e:29:33:18:68:67:cb:a4:e9:1d:fd:f0:
30:0f:3e:2c:41:b7:55:92:ed:52:78:3c:d3:27:d0:
af:2d:f4:86:72:92:31:bb:f9:8b:fd:0e:23:c8:6d:
6c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5A:A4:AC:C2:38:7C:AE:37:8E:62:59:80:7C:1F:44:2E:4B:8E:78
X509v3 Authority Key Identifier:
keyid:D4:EA:94:64:F3:22:B2:6D:7D:21:28:DC:37:52:F2:28:88:00:16:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/1OqUZPMism19ISjcN1LyKIgAFto.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OqUZPMism19ISjcN1LyKIgAFto.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913367F/A2219058128B11EBBFA2C47EC4F9AE02/30BB8C9E8B0D11EF82B50C59C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.15.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:f1:2a:8d:f9:ca:aa:ec:4d:c9:53:8a:dd:1a:e7:d0:aa:f6:
bf:dc:f5:b4:6d:85:f9:b0:ef:ee:3a:0c:eb:a8:80:a1:d3:e4:
ae:0a:cf:c3:49:59:f0:d1:ec:73:3a:18:30:b0:f8:6e:19:d2:
2e:88:df:b5:8b:1a:70:51:05:40:67:9e:d0:ab:ee:30:0d:32:
35:59:ef:d9:44:ea:9e:94:fe:b1:0c:c3:b4:85:ea:76:0c:1e:
17:b3:64:ee:c1:6b:42:bd:99:dd:55:ed:fb:3d:24:1f:22:66:
06:db:52:c4:32:2f:a0:bc:79:62:33:d6:be:1c:34:ab:42:8a:
b0:fd:47:26:8b:26:88:b2:33:27:d9:ba:c5:f2:23:38:ba:fe:
24:58:bc:2a:34:28:b3:e7:f4:82:f4:09:1a:aa:9d:10:48:6b:
b7:fe:bf:95:57:6c:ac:9a:51:0d:c8:a8:76:99:9e:97:86:f2:
5d:d7:3f:71:17:40:6a:44:31:dc:cd:89:cf:04:7b:f2:90:fa:
31:1e:fb:f3:fd:52:ec:77:35:de:e5:92:4c:64:bf:49:7e:72:
02:de:d7:88:c2:58:a2:07:3d:24:f3:2c:57:eb:89:30:b1:0f:
0e:13:4c:49:53:50:82:a0:3d:29:7c:38:e1:3a:d9:7f:ff:73:
71:cc:e0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 05:40:33 2024 by rpki-client on console-fra.rpki-client.org