Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/9A26AFD201D611EDA3BFA62EC4F9AE02.roa
File: 9A26AFD201D611EDA3BFA62EC4F9AE02.roa (raw, json)
Hash identifier: BSDVALklh20lmgqf3aWX8r8+66lwc6XTeIKSmxYVQCY=
Subject key identifier: 36:65:00:D8:38:73:F8:E4:81:5C:19:36:8C:E9:F3:65:7E:D4:9B:BD
Certificate issuer: /CN=A915C241/serialNumber=1D61DB24D2179647497614C14F66BBFFACA9CBFD
Certificate serial: 0183
Authority key identifier: 1D:61:DB:24:D2:17:96:47:49:76:14:C1:4F:66:BB:FF:AC:A9:CB:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWHbJNIXlkdJdhTBT2a7_6ypy_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/9A26AFD201D611EDA3BFA62EC4F9AE02.roa
Signing time: Fri 01 Dec 2023 04:34:47 +0000
ROA not before: Fri 01 Dec 2023 04:34:47 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 17483
IP address blocks: 103.243.116.0/24 maxlen: 24
103.243.117.0/24 maxlen: 24
103.243.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 05:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C241/serialNumber=1D61DB24D2179647497614C14F66BBFFACA9CBFD
Validity
Not Before: Dec 1 04:34:47 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65696267-c2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:97:a9:be:69:f3:34:98:77:9d:a9:c9:78:c9:
ee:d6:83:64:03:1b:79:76:fc:7e:21:13:b1:30:be:
c5:97:c6:3c:bb:07:e2:82:b5:02:7b:bb:0b:8f:cc:
23:b7:1f:ee:3d:1f:71:58:8b:92:3c:c9:a4:c3:53:
60:b2:0d:c9:f2:3b:7c:b0:78:b6:53:ac:5d:52:36:
58:c2:20:61:06:8a:66:45:00:69:72:bd:36:eb:e6:
af:14:96:d7:7c:f9:84:72:aa:aa:b0:9f:d7:33:32:
e4:da:08:4f:f9:f3:04:9e:5d:ad:ea:c1:e1:ec:a0:
79:04:ba:a7:bf:e8:93:cd:a6:b6:dc:5e:f8:53:b4:
a8:9b:59:b9:0d:6f:7a:c9:e2:8a:28:c9:5f:92:9d:
aa:08:c0:7d:40:70:7c:6c:94:c5:d8:e4:ca:0c:bb:
2a:57:c4:1d:a4:18:2b:59:c9:78:15:c8:8b:98:a2:
f2:72:ca:46:01:55:0e:c2:ad:c1:aa:18:f9:ee:cd:
e5:01:69:f4:4a:c5:41:9c:86:01:5b:0e:c7:e7:70:
7d:e5:17:70:2d:3f:3d:cf:df:68:93:a4:08:59:c9:
04:69:16:4b:6b:89:32:11:f1:83:55:87:de:40:73:
13:07:8f:2d:bb:e5:b2:83:23:a4:d0:9e:d6:89:1e:
2c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:65:00:D8:38:73:F8:E4:81:5C:19:36:8C:E9:F3:65:7E:D4:9B:BD
X509v3 Authority Key Identifier:
keyid:1D:61:DB:24:D2:17:96:47:49:76:14:C1:4F:66:BB:FF:AC:A9:CB:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/HWHbJNIXlkdJdhTBT2a7_6ypy_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWHbJNIXlkdJdhTBT2a7_6ypy_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/9A26AFD201D611EDA3BFA62EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.243.116.0-103.243.118.255
Signature Algorithm: sha256WithRSAEncryption
8d:73:f7:0f:1a:b4:a3:9b:4a:cd:ff:b7:46:e8:90:2b:f0:b2:
0b:9c:1e:e6:ce:70:bb:48:f3:2d:0e:a6:ed:c8:e5:2c:e1:53:
45:af:e9:9a:fd:57:6b:c0:18:14:f8:eb:b6:d0:c1:5c:4a:65:
dd:b3:b0:4b:32:9a:2b:e2:a7:c3:db:11:02:2d:7a:95:98:3d:
e9:47:42:92:ef:87:5b:d7:7f:5c:9b:07:0a:50:9c:6d:e2:c6:
d1:ad:2d:60:7b:16:23:29:b3:84:75:9c:5e:3a:1b:f0:6a:f6:
d2:b9:7b:72:05:7e:1b:2d:89:ff:37:ff:60:e1:0f:a9:63:06:
aa:a0:a6:e6:8f:56:c2:fd:c5:e8:01:56:1e:83:f0:35:31:04:
39:97:ba:4c:21:25:a9:56:b5:23:4d:e5:6e:01:c5:7c:7d:c6:
74:0c:9b:33:af:8b:f5:52:fc:d3:b0:ba:e7:38:6b:1f:7b:09:
92:73:19:51:59:16:b5:71:e9:51:12:36:64:60:c6:a9:a6:fe:
7e:69:cd:ca:dc:7c:a6:2d:fe:00:f2:d1:ea:92:2d:86:68:27:
6a:d9:f7:1d:8a:35:c7:96:a8:c8:c1:5f:8e:49:c7:b6:48:e2:
26:13:64:5c:b1:50:a3:e5:21:65:af:d9:23:b6:76:6f:c0:c2:
6d:0d:ad:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 06:45:48 2024 by rpki-client on console-fra.rpki-client.org