Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/3E808B8A1B4211EF8378846FC4F9AE02.roa
File: 3E808B8A1B4211EF8378846FC4F9AE02.roa (raw, json)
Hash identifier: ZOnEnlqDz/NHdPGI4BWtwGHe2ZvNar7XLxkvtWF0VIw=
Subject key identifier: 86:E5:A7:BC:94:66:D6:6B:CE:8F:25:6D:B4:7C:41:1F:A3:A5:34:97
Certificate issuer: /CN=A916216D/serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B
Certificate serial: 2BF8
Authority key identifier: AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/3E808B8A1B4211EF8378846FC4F9AE02.roa
Signing time: Sun 26 May 2024 09:28:00 +0000
ROA not before: Sun 26 May 2024 09:28:00 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 58717
IP address blocks: 103.26.246.0/24 maxlen: 24
103.26.247.0/24 maxlen: 24
157.119.184.0/22 maxlen: 22
157.119.184.0/22 maxlen: 24
157.119.184.0/24 maxlen: 24
157.119.185.0/24 maxlen: 24
157.119.186.0/24 maxlen: 24
157.119.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 May 2024 10:29:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11256 (0x2bf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916216D/serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B
Validity
Not Before: May 26 09:28:00 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=665300a0-4e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6f:ec:89:45:4f:9c:4b:a9:26:8c:fb:91:0d:
c0:df:cf:09:a3:93:6a:64:98:86:00:68:72:79:f3:
c1:3b:88:7d:a0:5d:33:7b:73:82:56:34:82:14:df:
93:97:c0:ca:39:06:b9:aa:f3:5e:e3:d7:0d:ad:7b:
b9:15:99:d4:c3:0b:1a:76:98:5e:11:d3:d7:04:b7:
91:d2:2a:af:9e:53:7d:2b:cd:de:76:df:51:e7:b7:
8b:ec:5c:9e:56:6c:b3:0c:1e:ec:d2:f7:4a:30:b9:
77:1b:de:d4:5d:be:4c:15:17:4c:d7:ea:12:fa:00:
66:e5:6e:bc:2a:6c:8e:8c:99:71:7f:d8:22:4a:9d:
3a:ff:ec:07:ee:26:2e:ad:ad:81:e3:2d:a8:56:fc:
c2:c8:8c:dd:93:11:41:99:11:67:ed:5f:51:80:cc:
a1:2b:ea:fd:35:0c:b9:fd:5f:21:f8:67:ac:cf:a7:
42:7d:b4:66:eb:72:f1:5e:07:54:12:8a:0d:65:9e:
76:80:e4:b5:59:52:48:00:26:0d:8e:2e:5c:0f:86:
4e:38:a6:a4:b9:7e:19:7e:b6:2c:5e:93:f8:24:a3:
ca:a4:3c:35:e2:25:a4:22:e9:29:4b:be:19:c4:81:
3e:60:16:3d:5d:f5:f6:ce:a2:7c:0d:e5:6e:6d:17:
08:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E5:A7:BC:94:66:D6:6B:CE:8F:25:6D:B4:7C:41:1F:A3:A5:34:97
X509v3 Authority Key Identifier:
keyid:AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/3E808B8A1B4211EF8378846FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.26.246.0/23
157.119.184.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:db:29:30:7a:04:2b:9e:ca:dd:a5:1d:fc:f2:f4:1f:fb:39:
11:33:a5:3b:74:59:12:7f:4c:1e:b3:d1:1c:83:49:e8:63:48:
ce:15:19:f3:0d:7f:09:a2:30:5d:b5:58:3e:3e:6a:9b:c3:ed:
bb:08:5c:6b:39:17:a2:db:cb:56:fe:5e:75:33:91:cb:e3:89:
ea:e2:29:51:a6:4c:6f:36:db:37:69:b1:80:99:d8:6d:96:9c:
3f:8c:b7:54:14:7a:cf:99:6f:f0:93:af:cd:2b:c5:67:2d:0d:
6e:85:c7:52:77:f3:8d:8c:20:4b:8c:c4:a6:06:3e:bb:65:7f:
f5:5b:1b:16:d1:e2:88:63:de:54:40:66:f1:cd:28:61:e1:af:
46:47:36:14:d3:ab:7a:61:b8:8c:53:66:a5:a7:df:51:1e:3c:
dc:b5:29:00:1b:3c:d7:d8:d0:8c:dd:7e:18:85:cb:39:41:72:
92:0a:6c:2c:bf:32:45:9d:b1:1a:e2:96:3c:56:3f:2d:42:e9:
6a:6f:29:08:1b:01:d6:76:d3:74:20:89:cc:96:79:9d:7b:7c:
51:0d:69:e6:e0:dd:85:3c:0a:ae:da:95:d9:83:a4:de:dd:9c:
94:b1:49:1b:43:c9:55:8b:13:0c:f3:af:48:c5:6b:2a:e2:30:
34:e5:b7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-ams.rpki-client.org