Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/18842E68320911EF8AD55950C4F9AE02.roa
File: 18842E68320911EF8AD55950C4F9AE02.roa (raw, json)
Hash identifier: ryQ1zps83g2z+C83NcNd8qIVjLmYyDCenHCgochFzIw=
Subject key identifier: 12:AD:A8:F6:12:E8:A3:7B:67:92:09:2F:EC:92:87:4C:AD:E4:FC:9F
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: 3E
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/18842E68320911EF8AD55950C4F9AE02.roa
Signing time: Mon 24 Jun 2024 09:06:52 +0000
ROA not before: Mon 24 Jun 2024 09:06:52 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 204729
IP address blocks: 103.72.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jun 2024 14:17:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Validity
Not Before: Jun 24 09:06:52 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6679372c-b16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:d9:66:12:9f:32:50:fb:81:d4:e1:91:da:
08:31:5b:d1:22:c8:12:78:a5:f4:19:1b:3b:b9:57:
62:46:e8:72:ba:e4:db:b4:b3:05:6d:4b:e0:bd:70:
94:5a:1f:e6:d3:00:ba:f1:f8:f4:77:48:8b:8a:d1:
a1:ef:f7:c0:ec:01:53:d9:e7:f9:da:e3:b6:1d:36:
ed:f0:fb:0d:67:56:22:98:d4:9f:5e:b2:47:7c:94:
75:76:a8:51:d5:50:2b:22:b2:32:b3:6a:55:6f:14:
09:bd:3f:e7:72:f5:f6:0d:7e:ec:92:44:e8:63:25:
4f:3a:c5:da:bb:22:13:11:69:6d:f3:1e:a6:2b:e7:
2e:a9:a9:6b:5e:77:5f:9e:d5:eb:42:03:80:70:80:
b1:78:6c:fa:8a:ac:78:f3:1d:80:4e:83:09:91:77:
e4:8f:92:fc:5d:1c:54:0f:3f:bf:b4:d2:fe:c2:bd:
d3:5f:49:4e:36:7e:ba:ba:9d:05:7d:48:5e:a6:85:
3c:d3:df:c4:b9:7a:47:dd:ed:54:92:2b:15:49:f0:
44:52:a8:4f:d7:35:e7:b5:ab:ee:a5:79:3a:05:b0:
03:bd:4c:05:f9:56:e5:33:5f:d8:7d:bb:75:13:7a:
25:80:5c:8c:c7:e6:ab:75:91:8a:21:9a:5f:14:9c:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AD:A8:F6:12:E8:A3:7B:67:92:09:2F:EC:92:87:4C:AD:E4:FC:9F
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/18842E68320911EF8AD55950C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.194.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:cb:44:1b:b3:60:72:cb:cd:c3:8e:2c:d5:54:70:4b:47:16:
7e:7b:90:a0:4c:ba:36:e4:5c:ae:55:7b:55:1a:13:c8:7f:53:
5c:b0:6a:66:ee:76:03:31:e5:e4:de:9c:11:23:e0:11:a4:94:
67:b4:03:0d:42:5e:36:3f:38:67:67:fe:7b:a1:4f:1e:ed:99:
d4:82:20:a9:d4:d2:7b:a6:ef:4a:0d:2a:3a:76:71:c1:86:3e:
f2:11:d5:7c:3d:77:d9:28:9f:19:92:67:f2:e3:17:62:d7:e0:
1b:df:bc:41:7d:a2:2c:41:9e:e7:d3:3e:32:a4:f3:b5:e8:55:
e4:a1:80:87:26:35:80:2f:e1:0b:1d:75:43:25:ae:e1:92:f4:
85:18:20:eb:8d:ee:29:05:fc:1d:18:0f:fa:30:bf:bb:29:e8:
eb:cc:f3:21:45:a5:12:af:80:98:56:68:f4:00:0c:e1:27:57:
59:21:f3:4c:60:5f:b4:00:7a:f9:f4:73:b3:7e:1c:02:a4:5b:
df:f1:0b:76:7b:54:e0:3c:4a:e2:e9:eb:28:32:e3:76:9f:39:
c5:c7:96:44:c6:69:ee:a5:65:3d:54:4e:45:07:2d:51:7e:67:
9c:88:6e:15:c2:2c:2d:18:22:f9:0e:21:e6:a2:53:3f:24:6d:
98:49:f3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 18:30:26 2024 by rpki-client on console-fra.rpki-client.org