Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/88954DBE274011EFB8049C15C4F9AE02.roa
File: 88954DBE274011EFB8049C15C4F9AE02.roa (raw, json)
Hash identifier: xMOwpNdbsF+NrVKWyGEh63JO41kmtP4FBP1cK2Pz6tQ=
Subject key identifier: 18:DE:F1:3D:93:81:14:3D:03:E8:E9:14:2A:A7:9C:1D:E6:40:48:21
Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
Certificate serial: D3
Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/88954DBE274011EFB8049C15C4F9AE02.roa
Signing time: Mon 10 Jun 2024 15:46:00 +0000
ROA not before: Mon 10 Jun 2024 15:46:00 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 139358
IP address blocks: 103.158.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Aug 2024 15:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
Validity
Not Before: Jun 10 15:46:00 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=66671fb7-a311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4f:81:bb:96:df:5e:57:1d:de:d8:bc:21:2f:
f5:15:65:87:dd:be:1e:98:e6:8b:4e:98:45:a9:f3:
b7:20:60:8a:33:70:f3:b5:a1:e2:ea:b6:f6:40:17:
9f:0e:5a:45:c2:d9:5b:23:8b:28:84:e9:10:ca:09:
72:5f:96:0c:5f:2a:76:f3:80:ff:8c:85:1d:cf:da:
f3:27:16:ad:4c:bb:f1:69:f8:67:c2:27:79:f0:08:
39:15:c9:ae:63:db:f3:1b:38:59:ab:cc:26:88:28:
b8:a5:ee:68:b8:12:10:71:fb:8e:32:00:8c:8c:e6:
87:01:7e:c2:87:20:02:0b:f5:86:14:74:59:0e:af:
34:e4:cb:3d:a0:5e:34:58:4e:a5:01:95:03:4d:13:
c0:4f:fc:4a:44:2f:d6:3d:71:e7:d8:3e:40:71:7e:
de:2b:e3:de:db:65:97:2c:d5:39:52:03:28:31:1d:
af:a3:19:ae:d4:98:7c:f7:e5:e7:64:4f:8c:31:46:
69:f6:b3:8f:bc:b6:17:5c:d7:d2:d8:0e:5f:3a:22:
0b:a8:f4:86:0f:38:f1:a3:1a:f0:6e:6d:f3:b3:2f:
52:ec:de:70:b7:7b:31:ae:b7:e2:39:f4:18:7b:49:
5c:90:f1:a5:ca:a3:b8:b9:e9:bb:14:b0:23:a5:98:
c0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DE:F1:3D:93:81:14:3D:03:E8:E9:14:2A:A7:9C:1D:E6:40:48:21
X509v3 Authority Key Identifier:
keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/88954DBE274011EFB8049C15C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.116.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d0:c7:62:a0:27:28:fe:e4:01:25:11:64:2f:9e:9d:36:14:
8f:95:2d:71:33:1d:25:81:06:84:a9:61:fd:d0:f0:e1:1f:56:
5d:f3:c4:d5:1c:a2:bb:9c:9b:19:21:4e:93:80:d2:4c:9f:df:
19:1c:c0:59:ac:80:7c:dd:47:29:bc:6b:4f:c3:3b:0c:ab:5e:
23:ee:a7:bf:46:f5:92:60:e5:2a:b9:49:f6:62:c8:a0:1a:a6:
a3:e7:67:c6:c8:0e:87:3b:af:3a:4e:80:2b:66:bc:2c:ba:ba:
6a:45:22:72:30:7c:69:31:50:32:4f:aa:a4:58:39:6b:29:f6:
fc:f3:be:24:37:1c:99:f1:97:05:e6:53:b1:61:d6:ed:50:35:
69:b0:25:1d:e2:76:3f:10:8a:5b:d4:31:d9:bf:4f:6f:e8:4a:
42:9a:8a:f9:1b:1b:80:f1:0a:5f:e3:5f:a6:ee:51:99:88:e9:
f3:e6:5d:86:5d:d8:48:c5:12:fc:de:de:c7:13:57:08:a3:14:
a4:b5:6f:66:8d:c0:38:ad:fc:75:8b:35:16:1a:c8:30:aa:e9:
ae:ae:26:73:e3:38:bd:3b:c5:af:11:30:20:a6:20:e4:0f:54:
0d:93:93:98:f9:c3:24:f1:42:5f:a3:af:1a:c3:33:ff:08:7e:
4b:0f:b7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 17:11:46 2024 by rpki-client on console-fra.rpki-client.org