Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/F9F9D458387011EE8D54D351C4F9AE02.roa
File: F9F9D458387011EE8D54D351C4F9AE02.roa (raw, json)
Hash identifier: UbYAoTwARR9fJvHhbSHHRX+Cf08OcXo8MTU7VG//tto=
Subject key identifier: 17:7C:A9:2B:4F:1E:2A:35:EE:27:BE:4C:84:DA:AA:3C:EC:A0:70:F4
Certificate issuer: /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Certificate serial: 0297
Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/F9F9D458387011EE8D54D351C4F9AE02.roa
Signing time: Thu 01 Aug 2024 03:04:37 +0000
ROA not before: Thu 01 Aug 2024 03:04:37 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 134788
IP address blocks: 103.187.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 18:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663 (0x297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Validity
Not Before: Aug 1 03:04:37 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=66aafb44-88b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:68:df:1e:49:89:c1:75:fd:5c:8d:96:33:58:
52:5c:77:61:3c:04:1d:67:0f:50:a9:b9:98:83:8a:
34:8f:7a:4f:4a:18:a6:e2:81:d9:ea:c1:31:6f:47:
c0:82:f3:c6:33:81:11:69:68:a9:fc:c2:d9:c7:4a:
70:7b:62:22:64:88:6f:da:e2:62:c8:c6:f6:56:2c:
8c:71:ae:f4:fe:35:e7:ab:7b:c1:62:ad:60:bf:79:
8b:28:d8:39:c5:15:a5:3b:8d:f9:f3:ea:c5:9a:bf:
99:21:5e:f2:cb:43:bf:28:0c:e2:9c:45:65:59:7c:
e8:86:b9:95:dd:10:56:ba:9f:9b:db:3e:43:03:d0:
f0:ac:14:c3:f6:93:93:37:77:17:a4:ac:96:3c:c2:
95:59:fb:05:8c:a4:35:98:9d:11:4b:42:3c:6b:a5:
b4:d0:fb:e6:2e:c1:06:40:54:c1:cd:25:35:a4:0f:
95:7b:aa:7a:d6:4a:bc:ff:43:03:99:57:03:ae:12:
ce:c3:21:75:73:98:a2:d4:40:ac:ca:37:7f:82:f2:
ef:0d:c3:c8:6c:4c:fc:9a:e9:17:43:1a:8e:68:26:
cc:ab:24:d1:d3:18:d9:e7:ba:43:0e:b0:85:bc:d9:
06:f9:94:b6:47:09:aa:b3:1b:5f:da:01:25:32:54:
13:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7C:A9:2B:4F:1E:2A:35:EE:27:BE:4C:84:DA:AA:3C:EC:A0:70:F4
X509v3 Authority Key Identifier:
keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/F9F9D458387011EE8D54D351C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.187.245.0/24
Signature Algorithm: sha256WithRSAEncryption
09:dd:73:73:30:5f:da:e9:68:62:49:b3:95:8e:f6:8c:6e:b1:
12:40:89:79:8e:29:f6:9a:f0:ab:1a:ad:e9:aa:64:94:da:f5:
23:d7:5b:8b:b4:54:47:86:93:44:01:c2:0b:b1:e2:7a:ab:0e:
c3:e5:3e:06:48:7e:98:3e:ac:88:d8:b2:f5:06:4f:0e:36:4b:
cc:b9:f6:25:b9:56:98:78:67:a8:76:5a:c3:90:6e:56:b7:17:
20:f8:e9:09:03:d0:9e:e0:8c:b9:3d:b6:ac:36:25:52:a7:d1:
a4:87:a0:f8:67:39:37:44:fe:63:dd:8e:d0:d2:c1:85:7e:22:
4f:d3:f8:27:ad:7d:de:76:85:f4:fa:c6:a0:e9:dd:a1:c1:e8:
fa:77:1b:e4:34:c5:86:a6:30:60:b2:22:31:f7:e1:11:99:c1:
b3:c5:b3:bd:65:18:d1:14:99:87:b9:4c:01:a6:50:75:ff:53:
4c:6c:b5:f4:e2:30:f0:68:45:64:52:cd:da:00:cb:cd:dd:d1:
5d:40:d0:05:59:b5:4e:c2:14:18:a7:a8:c8:2a:b7:76:1d:43:
33:35:6e:41:3e:56:df:0d:0c:d8:cc:73:db:9f:ec:58:f8:ee:
53:46:64:d1:2f:c8:a5:52:94:ce:cc:52:39:15:60:67:35:3e:
64:16:c4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 21:41:55 2024 by rpki-client on console-ams.rpki-client.org