Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/19E264067A0C11EEAA6E2D82C4F9AE02.roa
File: 19E264067A0C11EEAA6E2D82C4F9AE02.roa (raw, json)
Hash identifier: 7owgtKNZJKWaFEbUpSNT+QUFPCnteoO6nZf4jiwxxUk=
Subject key identifier: E2:30:E7:36:8F:03:A9:50:2B:BC:31:39:2D:39:33:27:0D:B5:B2:CC
Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
Certificate serial: AC
Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/19E264067A0C11EEAA6E2D82C4F9AE02.roa
Signing time: Mon 08 Apr 2024 05:32:45 +0000
ROA not before: Mon 08 Apr 2024 05:32:45 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 151419
IP address blocks: 103.158.116.0/24 maxlen: 24
103.158.117.0/24 maxlen: 24
2401:e60:1::/48 maxlen: 48
2401:e60:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 05 Aug 2024 15:08:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
Validity
Not Before: Apr 8 05:32:45 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=6613817d-938d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:01:50:81:32:57:00:b9:23:fb:cc:97:bb:
a5:06:0e:88:b8:21:89:82:22:4f:ac:9d:43:43:09:
32:29:10:be:34:48:0a:1a:bd:33:4b:d3:b2:c1:d1:
15:d6:bc:e0:b3:ad:c9:dc:bf:44:30:31:ce:7b:6e:
bc:6e:7e:66:e4:91:84:e9:33:ce:76:38:a6:19:d1:
86:7f:fc:22:79:92:44:87:1a:a5:c6:de:a2:84:0a:
cb:18:a8:8b:b9:e6:a7:0d:dc:be:59:ba:bd:81:91:
9a:8a:0a:82:ab:f1:16:fd:d1:8b:73:21:bd:f4:79:
3a:24:7e:af:c9:79:65:3e:b9:ca:ff:5e:e3:84:51:
6c:e7:1b:5e:16:30:6f:01:c0:0b:55:7e:95:80:6f:
78:65:cd:cc:88:45:17:2c:27:ce:10:90:5c:29:c8:
20:08:8d:53:85:de:4a:0f:6a:6b:13:dc:a9:f0:09:
04:53:0e:a1:26:32:85:cc:2f:15:93:3b:fd:51:e5:
e2:d1:cf:48:99:84:3d:74:f5:2f:01:ad:bf:60:92:
eb:7b:14:5c:2d:9c:f3:ac:cd:9f:35:43:20:22:7f:
86:08:ab:8f:20:52:65:e2:d0:a3:6b:47:ef:36:6f:
eb:b0:17:49:9c:3b:e4:62:3e:a2:bb:ba:2e:02:30:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:30:E7:36:8F:03:A9:50:2B:BC:31:39:2D:39:33:27:0D:B5:B2:CC
X509v3 Authority Key Identifier:
keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/19E264067A0C11EEAA6E2D82C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.116.0/23
IPv6:
2401:e60:1::-2401:e60:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
59:0d:7b:96:43:fd:17:44:b8:f8:0d:e6:31:40:13:5a:9c:b9:
35:bc:4e:ee:73:d6:e2:4e:01:49:c2:a9:e5:81:11:fe:12:92:
93:03:13:f6:0d:f0:b9:52:4e:bd:73:06:9b:67:89:9c:4f:62:
62:80:bb:ec:2c:cb:80:32:07:e2:e8:99:28:65:1a:c4:c9:20:
42:7e:13:db:7d:38:0a:70:57:7a:08:1e:87:61:f3:cc:5a:80:
b0:6e:ef:4e:04:d7:16:b3:f6:a1:6b:5d:33:47:29:6b:6a:79:
5c:13:2b:87:0a:c5:53:e0:11:59:20:95:24:71:b5:d0:09:6c:
d2:0d:c7:6b:02:8c:33:81:c6:45:78:09:a4:19:5b:5f:4e:4f:
7f:fc:6a:09:5f:3d:88:b0:f0:06:08:67:ef:22:b9:ec:91:0a:
c6:07:15:28:9e:ee:1a:dd:cd:89:b6:09:55:67:6e:4a:67:14:
b2:21:c0:15:39:77:7d:30:af:91:1b:22:09:0e:83:48:68:53:
0b:87:4b:71:77:e2:85:62:5b:6f:c6:d4:ef:47:9d:e8:c9:a1:
a1:e9:d8:57:fc:77:3f:21:c7:f5:db:1a:a2:70:db:7e:20:2e:
0d:72:ae:44:8d:35:f3:6f:f5:c5:f0:a2:5f:97:aa:5b:69:96:
59:23:02:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 17:11:46 2024 by rpki-client on console-fra.rpki-client.org