Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/9AB57E5632FD11EF9D68996BC4F9AE02.roa
File: 9AB57E5632FD11EF9D68996BC4F9AE02.roa (raw, json)
Hash identifier: Pc9Psfhg5firxPHRxVek2Z7mJJRvMPaAXmNVUrT3+j8=
Subject key identifier: 92:2A:16:5E:E9:E5:53:D3:F3:CE:BE:D7:1A:88:48:F9:EC:69:34:AD
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: 41
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/9AB57E5632FD11EF9D68996BC4F9AE02.roa
Signing time: Tue 25 Jun 2024 14:17:08 +0000
ROA not before: Tue 25 Jun 2024 14:17:07 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 18779
IP address blocks: 103.72.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jul 2024 20:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Validity
Not Before: Jun 25 14:17:07 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=667ad163-f121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:39:1a:17:67:23:a1:aa:8d:48:f0:d8:d3:5a:
5f:87:93:13:38:0f:78:df:5c:f7:ae:0e:bf:f1:56:
57:a0:bb:eb:f5:c0:a7:82:e4:19:bb:49:7b:0f:13:
f7:49:0b:52:6b:f5:67:fe:fb:e6:0d:0f:ca:6b:30:
f5:5d:0b:08:0b:67:40:e4:d6:fe:92:db:7f:73:06:
94:0b:8c:cb:c6:1c:df:16:88:bc:4a:0c:38:dc:62:
ac:26:b2:ff:47:6e:c0:f2:09:8a:ec:4c:97:54:71:
78:a1:cb:25:00:60:52:52:30:4c:98:3e:b9:39:df:
c8:cb:56:7a:e9:8d:94:72:35:56:de:7a:b5:cf:dd:
ec:33:7f:32:d3:9d:c1:69:9f:a8:cc:16:77:30:93:
e9:0b:cb:b1:ad:41:e5:0e:19:03:27:be:2f:13:da:
ea:6f:ce:89:a2:e9:9b:7d:e9:36:07:2b:c7:33:d9:
5f:8d:2d:37:47:45:a6:37:15:89:67:31:6f:30:30:
3e:fe:a9:0d:91:c6:dd:1c:33:15:4e:24:b5:8c:7a:
73:a0:46:08:7e:92:2c:7d:80:41:bd:2c:9a:80:b5:
5e:d4:7a:a5:c7:d9:19:04:bb:65:a5:60:d4:3f:91:
c2:d6:33:f3:8b:72:52:4d:ce:40:2a:1f:07:55:9f:
77:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2A:16:5E:E9:E5:53:D3:F3:CE:BE:D7:1A:88:48:F9:EC:69:34:AD
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/9AB57E5632FD11EF9D68996BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.194.0/24
Signature Algorithm: sha256WithRSAEncryption
05:87:4a:5c:7d:d3:50:76:27:0b:9e:8a:87:33:7f:46:66:9f:
50:b7:32:d9:77:a0:0b:54:c7:65:7c:2d:05:0a:bc:9b:d7:72:
1d:6e:a1:9b:8f:90:7a:1b:e4:79:02:87:e3:bc:6e:18:1f:22:
a1:9c:5e:98:ee:09:80:c6:c5:e9:60:03:ee:0e:25:dd:df:27:
e5:64:4b:5c:4d:9c:0b:ec:eb:fe:44:83:9e:50:9b:14:e3:f5:
f3:b3:5b:94:07:c8:e3:24:ce:e1:9a:cb:95:4d:64:9a:77:db:
b7:81:d6:7e:ae:4f:8d:d9:ae:5d:37:b4:0e:64:43:29:a6:07:
5d:b5:2b:33:ec:7f:7f:41:7f:1e:6f:33:92:c2:5b:eb:24:b9:
d7:79:cb:20:60:2f:58:88:46:e4:40:57:1c:0b:fe:92:2f:49:
50:f5:41:f8:f8:3a:6b:8c:30:42:c9:c4:ad:e5:18:62:fd:15:
c0:80:af:f4:fd:c2:3c:e1:cf:d7:0a:e5:bf:6d:a8:d8:a6:6d:
fb:04:fb:e2:b9:52:ec:50:9a:b6:47:da:00:7a:5e:42:44:31:
38:d9:d9:e1:3f:d3:6b:34:f7:7c:77:4b:5e:51:c5:f5:3d:8b:
4a:f9:44:99:e0:bb:01:5e:18:5c:45:bf:55:0e:fe:15:f6:23:
bb:2a:56:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 21:15:23 2024 by rpki-client on console-fra.rpki-client.org