Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/6975FD9CD68111EBA71D041EC4F9AE02.roa
File: 6975FD9CD68111EBA71D041EC4F9AE02.roa (raw, json)
Hash identifier: a5WxQuKfYwMCbwOIGAe8KDLLKhgS6/98mUCkkm7ojco=
Subject key identifier: B5:19:0D:77:BA:36:34:ED:83:6E:82:2F:95:A2:B9:4E:9B:23:05:38
Certificate issuer: /CN=A917CE22/serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A
Certificate serial: 069C
Authority key identifier: 62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/6975FD9CD68111EBA71D041EC4F9AE02.roa
Signing time: Mon 22 Jan 2024 23:01:25 +0000
ROA not before: Mon 22 Jan 2024 23:01:25 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 138571
IP address blocks: 103.204.180.0/24 maxlen: 24
103.204.182.0/24 maxlen: 24
103.204.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 15:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1692 (0x69c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CE22/serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A
Validity
Not Before: Jan 22 23:01:25 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65aef3c5-be70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c2:6b:a7:0b:a7:fe:3e:2f:4e:2f:67:00:d4:
5a:1c:f6:59:bc:f4:6e:73:c9:0d:fc:87:ba:20:22:
ec:8c:24:6f:80:80:82:98:70:79:bb:44:34:80:b0:
1b:09:36:e6:b9:41:45:bd:9f:ef:d1:d3:c1:ad:d1:
8f:33:60:48:2e:75:d6:bc:23:e8:5e:38:50:8c:31:
a0:5e:8c:ec:2c:f3:59:28:5f:66:02:d6:5e:65:31:
82:4e:fe:43:33:94:b7:31:ee:97:cc:ae:e4:b7:83:
71:d0:5c:84:b4:ec:60:ef:ff:62:07:e2:38:83:36:
5a:aa:4c:cb:bf:8b:ee:db:9e:78:3c:a2:25:e1:64:
81:29:35:e2:9f:a0:30:0d:e4:0e:57:0c:5b:73:87:
d9:c3:9e:9f:a4:17:7f:03:a0:da:b5:fd:28:66:a8:
5a:ca:61:94:36:2e:2f:5c:fa:7c:a8:08:fd:00:bb:
3b:fb:ac:07:97:0d:91:e1:ef:f7:ac:6f:72:41:aa:
0c:b3:74:56:84:66:71:dd:56:60:6f:0d:bb:e9:cf:
c3:c7:f6:c0:97:8b:dc:03:57:fe:a3:64:25:6e:01:
0f:9e:fb:dc:a0:d5:dd:54:bb:79:ec:c2:7e:29:90:
4f:17:a5:67:1e:93:69:a6:d6:d0:90:ce:01:5a:4e:
88:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:19:0D:77:BA:36:34:ED:83:6E:82:2F:95:A2:B9:4E:9B:23:05:38
X509v3 Authority Key Identifier:
keyid:62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/6975FD9CD68111EBA71D041EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.204.180.0/24
103.204.182.0/23
Signature Algorithm: sha256WithRSAEncryption
72:03:ee:dc:ef:bc:65:19:dc:8e:f7:40:e4:88:40:2b:32:ff:
a1:a2:20:53:36:a3:21:16:b6:8a:f7:d8:65:ab:5a:f8:8d:fa:
d6:b0:4b:b1:21:61:b2:44:0f:e4:cf:77:5c:b5:30:86:bb:86:
5c:84:fb:8d:5a:18:8d:d7:ab:e6:6e:d1:d6:65:5a:e1:5d:b9:
82:9e:50:b2:03:89:2b:97:c4:49:4a:6a:0f:b3:a5:f8:31:02:
ef:aa:d7:b2:ec:38:d5:9c:c1:c5:14:6b:da:c7:f2:b2:4a:a7:
f4:89:46:ee:1b:2e:95:57:0c:fa:bb:b1:69:19:cc:81:10:03:
cb:ed:ca:97:3f:c7:10:cf:c2:05:9f:bb:06:ac:3a:17:cc:5c:
09:8e:05:d9:81:02:a9:c8:c2:7d:a5:78:4d:42:fb:39:cf:88:
a9:ec:18:37:94:27:ac:89:06:f4:11:c4:f8:02:96:00:d1:37:
10:88:06:ca:37:18:35:4f:1a:5f:13:14:23:ca:2a:0b:92:ba:
d8:e0:0e:0f:91:e3:5c:47:89:15:bd:f2:6f:0c:50:85:f9:f8:
12:e4:4f:3d:dd:c4:a0:76:d5:7e:a9:d7:75:09:71:c8:f4:8c:
ff:d0:bf:e3:f5:78:03:a9:90:d0:71:9c:82:40:cd:59:ee:34:
d1:91:de:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:47:41 2024 by rpki-client on console-ams.rpki-client.org