Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/D9FACFBEF1F111EEA7B10347C4F9AE02.roa
File: D9FACFBEF1F111EEA7B10347C4F9AE02.roa (raw, json)
Hash identifier: 3dfFc3qr5u6PL/yffP0V14rLFaJPhkJSoHD0YlejQTE=
Subject key identifier: F2:3C:60:88:C5:10:C5:1B:1A:F6:12:6B:B2:1C:76:71:CC:85:D5:7F
Certificate issuer: /CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C
Certificate serial: BB
Authority key identifier: 05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/D9FACFBEF1F111EEA7B10347C4F9AE02.roa
Signing time: Sun 05 May 2024 06:39:41 +0000
ROA not before: Sun 05 May 2024 06:39:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142123
IP address blocks: 103.114.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Aug 2024 07:04:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C
Validity
Not Before: May 5 06:39:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=663729ad-b170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:4d:8f:46:21:06:03:0d:ae:c1:5e:3d:89:
60:7a:8f:3a:67:2e:b1:bc:3b:5a:3d:a9:e9:ce:9a:
46:4e:b2:50:e1:8f:69:ba:f2:8e:1d:89:50:bd:0c:
6a:f9:93:3a:bc:76:61:95:8a:40:ac:e7:8b:65:e1:
ca:25:93:89:25:6a:43:bb:8c:f0:db:3d:c3:50:32:
13:0d:9a:53:f8:9f:f9:04:ef:5a:aa:a9:a7:88:06:
04:0b:bf:6d:7f:f2:d6:6a:e9:cb:13:a1:07:c5:07:
e4:29:ad:95:5a:aa:f6:ce:fe:ed:d9:02:2b:34:c2:
07:7e:da:3d:e6:4c:fb:85:ec:38:d0:ec:b5:b1:4f:
78:ff:15:6a:2d:2f:46:01:c1:6b:cd:d6:3c:b6:93:
dd:08:c1:c9:27:47:67:93:bd:f2:5e:c3:81:2e:d7:
f0:ca:2c:8e:cf:91:4b:b9:ac:93:c0:9f:83:c3:73:
80:4c:b7:74:c9:fb:b5:ed:6c:a7:17:52:3f:67:fa:
d2:0c:0a:0e:a9:43:52:f7:78:bd:c3:6f:ee:cc:f7:
27:a7:4d:8c:95:fb:81:94:99:6b:40:dd:f1:f9:2f:
91:9b:1e:d2:8d:f3:75:fa:5a:42:62:56:4b:88:b2:
66:31:db:ee:87:3c:ec:a6:e5:0a:41:79:d0:c9:6b:
19:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3C:60:88:C5:10:C5:1B:1A:F6:12:6B:B2:1C:76:71:CC:85:D5:7F
X509v3 Authority Key Identifier:
keyid:05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/D9FACFBEF1F111EEA7B10347C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.255.0/24
Signature Algorithm: sha256WithRSAEncryption
70:8e:72:90:81:34:23:68:8a:30:da:bd:cd:80:c4:ad:d7:3c:
8e:51:ae:d6:69:7b:77:42:37:9d:98:1f:dc:aa:6c:42:7c:2d:
0c:2e:3e:33:2c:0b:5d:80:1d:32:6e:3d:2c:44:b3:55:d5:8a:
d2:00:d9:a6:c0:97:e0:a4:8a:d8:9c:2c:b6:da:e0:0c:aa:9a:
f5:19:67:51:bc:a7:55:36:f4:f6:65:c0:75:80:78:71:5e:5a:
03:c8:3a:b5:cf:6f:27:b0:cc:c5:8e:6d:28:02:09:95:44:00:
f7:59:8d:95:f5:23:a9:c2:8e:d8:85:7e:5a:f1:55:d3:08:0c:
13:8a:30:80:c9:23:b5:b9:cf:c9:77:69:50:4a:62:66:d6:fa:
bd:93:f6:00:4a:8d:92:9f:8a:a2:75:dd:28:44:86:3b:5f:5f:
59:16:18:05:46:43:d7:d8:b2:91:fc:63:8c:70:8a:03:2d:28:
5c:5c:d1:ad:9b:12:7f:e3:da:f0:a1:65:a0:e9:8e:5d:77:4e:
bb:4a:ce:16:fe:66:bf:0d:c3:da:97:6a:30:8a:9d:a1:37:a8:
f0:ac:18:59:a7:26:be:9f:04:3f:8d:71:10:c5:d1:57:57:2a:
f6:a8:9a:b8:ac:a8:95:f5:cd:c9:1e:68:31:39:6e:d5:29:93:
b6:22:bf:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:17 2024 by rpki-client on console-fra.rpki-client.org