Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/2EAEF16047F211EAB16A5F1FC4F9AE02.roa
File: 2EAEF16047F211EAB16A5F1FC4F9AE02.roa (raw, json)
Hash identifier: xyx7ZvpUqEsJ4hzF+wnC82GdA9zPLO4pSnhWJzYXkK4=
Subject key identifier: 6B:AF:96:79:ED:A5:ED:0D:13:0C:8E:47:1B:F4:96:F2:5D:A6:73:CF
Certificate issuer: /CN=A917CC94/serialNumber=8BD83AD738DC4C57984DC2ECB21D5E9019BBC8CA
Certificate serial: 09E2
Authority key identifier: 8B:D8:3A:D7:38:DC:4C:57:98:4D:C2:EC:B2:1D:5E:90:19:BB:C8:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9g61zjcTFeYTcLssh1ekBm7yMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/2EAEF16047F211EAB16A5F1FC4F9AE02.roa
Signing time: Wed 20 Dec 2023 20:28:25 +0000
ROA not before: Wed 20 Dec 2023 20:28:25 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 138473
IP address blocks: 103.126.112.0/22 maxlen: 22
103.126.112.0/23 maxlen: 23
103.126.112.0/24 maxlen: 24
103.126.113.0/24 maxlen: 24
103.126.114.0/23 maxlen: 23
103.126.114.0/24 maxlen: 24
103.126.115.0/24 maxlen: 24
2404:a40::/32 maxlen: 34
Validation: Failed, certificate revoked on Thu 30 May 2024 08:34:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2530 (0x9e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CC94/serialNumber=8BD83AD738DC4C57984DC2ECB21D5E9019BBC8CA
Validity
Not Before: Dec 20 20:28:25 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65834e69-3888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:5d:5d:3a:b7:47:4b:e9:87:1b:e3:e2:32:0c:
29:9c:b4:26:98:9d:50:92:27:da:7e:64:58:eb:34:
e6:c1:c5:2f:0b:12:44:61:9d:2e:13:7b:63:7b:b2:
cb:16:de:f9:86:a9:60:a1:09:38:6a:b5:a8:cc:b0:
86:be:f8:51:7c:35:92:b0:54:3a:0f:8f:26:c6:3f:
13:bf:81:6d:3d:64:59:73:af:f0:f1:97:ac:40:ea:
2c:be:0f:dc:8f:1f:d4:93:91:3d:da:4c:67:b4:2e:
12:38:4a:ed:60:6e:e0:78:73:f1:f6:24:47:14:05:
7b:03:9e:b0:34:6b:7a:ef:ba:19:15:86:9e:f0:de:
aa:9d:df:d4:89:74:d5:f4:cd:ec:3c:35:c6:6a:be:
7c:60:72:fd:9f:8b:02:74:ab:02:b3:d8:23:06:84:
5d:70:5b:26:aa:7d:e6:28:73:a4:30:c1:02:58:38:
74:6a:01:e0:f7:4a:29:af:5b:17:e2:cb:54:35:ad:
e5:82:a2:e2:47:01:2f:77:b8:b3:67:38:d4:21:f9:
93:77:0a:df:a2:9c:41:bf:17:3c:f3:95:59:3f:07:
94:15:8a:c0:6b:0a:08:38:02:be:41:c0:45:62:d7:
66:45:37:47:4f:0a:51:30:7a:8e:74:db:05:9c:00:
f8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AF:96:79:ED:A5:ED:0D:13:0C:8E:47:1B:F4:96:F2:5D:A6:73:CF
X509v3 Authority Key Identifier:
keyid:8B:D8:3A:D7:38:DC:4C:57:98:4D:C2:EC:B2:1D:5E:90:19:BB:C8:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9g61zjcTFeYTcLssh1ekBm7yMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/2EAEF16047F211EAB16A5F1FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.112.0/22
IPv6:
2404:a40::/32
Signature Algorithm: sha256WithRSAEncryption
15:e9:b7:1f:70:ed:88:af:d2:db:7d:2f:dd:23:08:59:b7:0a:
a5:f8:50:63:b5:17:3d:88:cc:18:8b:04:0e:8c:34:ea:d6:c9:
aa:65:aa:ee:30:01:69:d6:2a:f4:4a:67:0a:af:d4:fc:06:c0:
ba:bc:21:a4:40:b8:f0:53:96:56:f3:27:6b:75:b9:47:12:b1:
35:f8:ea:77:16:f5:26:88:12:02:3d:e3:e1:06:b4:f1:26:80:
c2:ed:8b:46:7b:69:0a:e0:95:c5:8f:9c:f4:64:72:2c:cb:f4:
90:92:ea:31:87:9c:f0:d9:d7:ed:76:2e:b9:33:37:ca:95:90:
79:27:b1:f7:c6:0d:3b:a6:04:f6:08:bf:80:6e:ef:93:6d:aa:
bb:e9:71:e2:16:f4:f1:93:14:24:1c:32:79:35:68:ab:28:83:
bf:ab:a3:70:0f:46:b2:90:88:4e:90:84:57:0a:cb:fb:0f:e7:
9a:f4:39:9a:ec:8e:27:13:b8:8e:27:89:d6:16:d3:b6:b3:01:
93:18:9d:1c:85:b9:d6:e1:b3:81:64:a6:61:d6:04:f7:22:77:
d1:78:d6:70:78:49:81:57:7b:d2:ad:d6:17:cd:6a:b1:1a:d6:
ee:15:74:00:b4:b7:14:2a:71:d5:2a:9b:31:7b:4b:0b:7c:43:
ab:bc:6e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-ams.rpki-client.org