Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/6D60EBBE86B411E6BAEB2614C4F9AE02.roa
File: 6D60EBBE86B411E6BAEB2614C4F9AE02.roa (raw, json)
Hash identifier: 91HLSI1mokKPPekoFuzswQHf720McHF/vw3mAj/wdGs=
Subject key identifier: EA:58:2D:6C:BD:3E:6B:0C:69:04:C4:9F:26:5D:2E:4A:B3:99:EB:4C
Certificate issuer: /CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Certificate serial: 2E5F
Authority key identifier: 68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/6D60EBBE86B411E6BAEB2614C4F9AE02.roa
Signing time: Thu 11 Feb 2021 14:20:09 +0000
ROA not before: Thu 11 Feb 2021 14:20:09 +0000
ROA not after: Mon 31 Mar 2031 00:00:00 +0000
asID: 1281
IP address blocks: 103.10.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Mar 2022 07:20:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11871 (0x2e5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Validity
Not Before: Feb 11 14:20:09 2021 GMT
Not After : Mar 31 00:00:00 2031 GMT
Subject: CN=60253d18-f6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:65:b2:04:6e:42:90:5e:ae:d3:c5:75:8c:9e:
59:11:a3:13:a9:f8:4d:9f:77:d7:02:70:2b:06:9f:
88:fc:61:19:e4:15:ca:8b:47:c9:6d:71:70:cc:1b:
39:81:a6:5f:a4:88:83:2f:04:68:c8:67:80:69:dc:
8e:e9:d2:a3:c3:d6:e6:06:68:0d:23:46:53:60:01:
55:be:da:c4:ea:ca:02:d5:95:f3:c8:f3:37:6c:a8:
a5:27:44:78:e2:26:56:75:2b:1b:5e:02:45:3c:36:
42:bc:59:fc:0f:a0:f3:74:d8:30:50:bf:c7:41:41:
97:2f:4b:fc:32:1f:e3:0d:bd:13:7a:1e:6f:ef:82:
2f:ac:27:a8:ed:33:f5:c7:3d:f2:a7:5d:5b:4c:3e:
f4:66:12:e8:77:da:f8:36:ff:fa:4b:66:6d:15:12:
8c:66:3a:cf:0f:64:c8:f8:35:d1:98:e2:5b:56:8a:
40:48:f1:d1:3a:b9:fa:50:a8:71:cc:d7:aa:0a:38:
43:38:33:16:df:cc:98:27:8e:7b:62:8c:a6:80:cd:
a1:94:d4:59:5d:10:6d:5a:14:fb:fe:1b:25:8f:dd:
d6:41:4d:91:9f:64:67:66:1f:bf:d4:6a:ba:fc:0d:
e0:73:6e:31:24:2a:6e:99:6b:cd:37:10:2a:d2:94:
22:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:58:2D:6C:BD:3E:6B:0C:69:04:C4:9F:26:5D:2E:4A:B3:99:EB:4C
X509v3 Authority Key Identifier:
keyid:68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/6D60EBBE86B411E6BAEB2614C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.10.232.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:e5:a5:73:a4:9f:31:19:43:fb:d2:0a:09:30:d0:5f:c6:be:
92:24:b0:0e:af:d5:fa:32:f7:ca:b2:74:aa:59:e9:b6:42:20:
d3:8a:c2:47:50:c7:92:17:63:59:6d:c1:4b:66:b6:3e:48:f8:
c3:9f:df:23:e1:17:3f:fb:53:0e:cc:9b:56:ae:25:f4:95:49:
4d:ae:ef:99:a4:d8:d7:97:78:1d:8f:7d:80:65:6f:da:32:46:
b9:b8:ea:ef:ef:a6:83:42:21:64:ae:e3:0a:e7:69:3d:63:df:
17:c5:44:73:ba:84:d1:7c:d6:04:ad:c3:a9:08:d2:69:28:8b:
21:a5:62:7d:d1:92:02:80:ca:11:55:f7:81:f5:ee:66:87:8f:
1a:9e:06:2c:07:94:3a:27:71:38:19:94:01:17:e7:c7:70:2e:
56:25:23:82:7d:f5:10:bb:7d:a6:82:e4:53:d1:58:4d:d1:69:
5b:1d:27:01:09:5d:42:66:f1:84:21:9a:25:9a:88:91:97:d9:
07:f3:80:95:f5:0f:3c:05:1f:e6:46:2e:94:6a:83:94:57:e3:
f6:6a:65:5f:d6:1a:39:0a:b4:6f:14:58:0b:86:56:46:d0:38:
8b:ab:ca:48:1d:dd:64:ee:ec:e2:1c:19:f6:1a:6a:ff:29:18:
db:49:4b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:14 2024 by rpki-client on console-fra.rpki-client.org