Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/3C6E990407D311EF87DA6722C4F9AE02.roa
File: 3C6E990407D311EF87DA6722C4F9AE02.roa (raw, json)
Hash identifier: 6CE0vWYSsluc0W5w8YhL0/v+zfaEQhI/y5JrceINIr8=
Subject key identifier: 6D:75:77:14:B0:75:04:98:A1:5A:8A:91:17:4E:A7:26:51:D5:45:A7
Certificate issuer: /CN=A917CE22/serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A
Certificate serial: 06D7
Authority key identifier: 62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/3C6E990407D311EF87DA6722C4F9AE02.roa
Signing time: Wed 01 May 2024 15:55:31 +0000
ROA not before: Wed 01 May 2024 15:55:31 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 45250
IP address blocks: 103.204.180.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 13 May 2024 10:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1751 (0x6d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CE22/serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A
Validity
Not Before: May 1 15:55:31 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=663265f2-87f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:97:19:c7:ae:8d:4d:51:0b:d4:6d:aa:ef:b2:
4d:d5:43:f6:73:39:89:a6:51:02:80:9f:e7:83:af:
c3:01:e2:09:81:f1:fc:31:1f:75:6c:79:8e:d2:3c:
e3:22:42:2c:92:2e:69:79:43:7f:51:d5:82:62:75:
24:be:0a:e1:f0:3a:b1:34:e2:13:75:f7:09:6d:ac:
59:d8:41:f7:7e:05:aa:74:af:76:87:8d:ab:de:2e:
1f:c5:be:62:3d:10:44:1a:1d:4f:b0:6a:26:84:2d:
0f:1f:8f:1a:11:82:d5:9f:80:11:c5:e6:94:98:2e:
ed:8f:54:e3:78:2e:81:15:f3:89:ee:dc:c6:7b:92:
1f:e6:6c:0b:ad:94:7d:63:fe:ab:0f:31:d2:17:6b:
02:1a:c8:fe:4f:5b:14:48:88:33:38:96:b0:fe:0c:
30:db:2f:4b:7b:11:21:cd:53:81:80:7d:41:c7:7c:
70:b0:c0:79:d3:4b:bf:ee:41:28:1f:3c:84:e3:51:
16:e2:88:19:97:67:50:d7:df:1f:75:7f:45:ec:9a:
9a:17:de:28:00:64:6c:9d:a7:26:4c:55:29:38:8e:
1d:31:78:20:09:95:5c:9c:43:f1:5a:28:24:73:cb:
c3:7d:1f:63:be:07:44:a7:d0:f8:75:35:99:f9:a0:
39:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:75:77:14:B0:75:04:98:A1:5A:8A:91:17:4E:A7:26:51:D5:45:A7
X509v3 Authority Key Identifier:
keyid:62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/3C6E990407D311EF87DA6722C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.204.180.0/22
Signature Algorithm: sha256WithRSAEncryption
06:e8:4d:7f:bb:5f:82:47:69:7c:a4:ca:51:bf:95:b5:09:3d:
f8:f3:f6:1a:09:c2:b2:4e:4e:86:1d:40:0c:10:02:32:c2:3d:
99:24:33:9f:b5:38:a6:d6:0e:79:c5:9d:f9:16:1b:55:2c:b7:
65:d0:96:2e:63:1f:ac:43:7f:62:01:f3:b4:43:fa:75:a6:ff:
43:b4:c5:bc:73:bc:84:05:59:a4:93:66:e4:f5:b8:a0:e0:30:
21:fc:0c:7a:9f:17:1e:4b:3a:e9:6a:30:c4:1a:1c:20:1f:a0:
8d:be:b3:f7:f1:09:7f:9a:51:43:98:f2:75:5d:13:c0:88:a5:
ec:b7:d6:12:6c:82:2e:42:b2:26:c3:a7:25:77:ef:2f:8b:78:
95:d1:4e:75:cc:d4:5c:f0:b3:31:e7:6c:6f:7b:75:b6:35:71:
92:59:31:9b:92:6a:f2:15:ba:8a:a9:13:be:58:27:45:c9:40:
a8:c3:d3:55:af:a1:e6:79:33:91:aa:8c:20:71:0a:13:f2:b4:
4a:9b:f7:44:90:f1:88:ea:a6:a6:84:cb:25:88:6c:6a:fc:7f:
85:2f:a8:4e:d3:f0:71:5f:8c:6e:71:70:fa:37:65:c5:9f:64:
02:2c:13:f4:60:bc:b4:c8:6a:1d:4e:a2:41:37:2d:12:ea:a4:
1f:d7:60:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 15:01:43 2024 by rpki-client on console-fra.rpki-client.org