Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/FAEFF2722C7B11EDABC3811AC4F9AE02.roa
File: FAEFF2722C7B11EDABC3811AC4F9AE02.roa (raw, json)
Hash identifier: ORHWmtqHeBVtPMfb9qlOk869GlcamiezUGmsTydEnpY=
Subject key identifier: 9C:49:2F:F4:29:69:88:77:3B:62:CD:46:2C:76:E5:BF:22:A1:77:E1
Certificate issuer: /CN=A9171524/serialNumber=C2FC3E1B1B543EBD48DFDA591DC2518224F95B7F
Certificate serial: 0153
Authority key identifier: C2:FC:3E:1B:1B:54:3E:BD:48:DF:DA:59:1D:C2:51:82:24:F9:5B:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/FAEFF2722C7B11EDABC3811AC4F9AE02.roa
Signing time: Sun 31 Mar 2024 04:46:48 +0000
ROA not before: Sun 31 Mar 2024 04:46:48 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 142295
IP address blocks: 103.182.14.0/24 maxlen: 24
103.182.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 15:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171524/serialNumber=C2FC3E1B1B543EBD48DFDA591DC2518224F95B7F
Validity
Not Before: Mar 31 04:46:48 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6608eab8-d005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:e0:e5:89:6e:eb:fd:bb:14:c8:f6:7f:4f:
6d:f3:4c:03:d9:5b:b1:3e:00:41:18:f3:e9:aa:3c:
87:b0:b0:50:c1:40:47:3a:96:eb:6d:5a:66:44:93:
74:43:ee:b6:68:c0:d6:39:d7:f6:6f:ab:c0:6b:9b:
16:8d:87:47:b0:a4:a2:8c:19:19:df:2c:ba:0b:d8:
5a:fc:53:9d:ed:43:7c:54:96:01:72:3f:34:1e:e7:
a9:11:c6:07:ac:e3:1f:15:e9:d4:d2:6c:f3:de:11:
b9:b4:11:4c:b6:59:d1:dd:49:49:80:95:78:d5:f8:
1b:cd:1d:a0:1d:0e:ac:3a:54:2a:5d:1c:63:d2:40:
ac:87:ba:f0:5c:2a:01:42:40:79:21:f4:42:33:25:
35:f3:e2:39:d5:1e:ca:03:c8:30:c7:f7:e2:68:02:
d7:3f:0b:73:d3:98:29:8e:5d:2c:b9:7c:1f:5b:13:
10:6f:6c:44:ae:13:aa:d3:5b:61:1e:66:c0:1b:03:
94:c5:b4:58:63:dc:04:ee:66:af:90:46:76:39:86:
da:5a:23:12:29:91:d3:47:ec:91:e1:fc:84:9d:ea:
de:4e:44:33:74:dc:9b:13:7e:36:61:d2:ee:fc:12:
3b:e0:3a:ed:97:5f:b0:8a:59:ce:51:6b:d9:04:a7:
0c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:49:2F:F4:29:69:88:77:3B:62:CD:46:2C:76:E5:BF:22:A1:77:E1
X509v3 Authority Key Identifier:
keyid:C2:FC:3E:1B:1B:54:3E:BD:48:DF:DA:59:1D:C2:51:82:24:F9:5B:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/FAEFF2722C7B11EDABC3811AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.182.14.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:e3:f2:54:88:c1:58:01:ec:cf:86:5a:2e:72:59:48:a0:a5:
87:25:28:6e:bf:c2:28:f3:54:5d:24:3d:8e:9a:3a:3e:23:c4:
74:9b:f9:78:1d:6a:b2:16:18:ab:a1:b9:30:ae:55:22:26:3f:
d6:1b:fb:be:22:44:36:7a:cf:fb:dd:69:17:a7:88:b1:0c:13:
e4:0e:1c:5d:31:7f:ad:c0:94:d7:99:7d:27:9d:be:b2:3b:6c:
62:e6:87:c1:b0:83:ee:cb:7b:e0:06:e3:31:aa:fb:9d:4e:ca:
26:d2:d3:42:1b:ca:cb:d9:3f:e4:27:5e:c5:d7:87:d5:b1:15:
47:db:6a:d9:6e:51:cd:40:10:2d:c4:80:82:95:9f:25:ed:b8:
9e:d8:23:8b:d0:84:66:37:ca:d6:0e:d3:20:d9:3c:f7:59:81:
e9:4a:b8:9c:7c:01:a7:90:f7:2a:2e:87:7a:54:74:84:e7:b5:
b0:2e:81:7b:98:c0:d7:e1:cc:e3:56:c8:a2:cf:16:25:45:37:
28:8a:9a:d0:97:ed:48:1c:60:a1:c9:7f:6c:4e:b1:f8:f0:5c:
f3:e7:62:06:90:e2:9f:54:a0:b3:d3:46:58:6e:cd:da:16:e9:
b3:0c:eb:e0:dd:43:a0:82:09:1b:7d:e3:b2:8c:51:d2:7c:ed:
e0:1c:d8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 19:58:40 2024 by rpki-client on console-ams.rpki-client.org