Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/B946BBB0312711EE93BD9F61C4F9AE02.roa
File: B946BBB0312711EE93BD9F61C4F9AE02.roa (raw, json)
Hash identifier: 3w18MQ2w/BD89GH+YzLrEQBaQ86XeTbwdpBzq1Oml5M=
Subject key identifier: C3:2E:6C:B6:8F:6F:88:2C:09:6A:9C:9A:EC:91:65:63:6F:7D:52:C3
Certificate issuer: /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Certificate serial: 012B
Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/B946BBB0312711EE93BD9F61C4F9AE02.roa
Signing time: Thu 03 Aug 2023 03:43:38 +0000
ROA not before: Thu 03 Aug 2023 03:43:38 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.69.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Sep 2023 12:22:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 299 (0x12b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Validity
Not Before: Aug 3 03:43:38 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=64cb226a-af51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:10:a6:ca:58:bd:12:06:0d:6c:65:69:af:
21:90:40:29:18:47:41:fc:e6:1f:5f:67:79:14:a4:
bd:b4:93:eb:d8:ca:14:a5:54:f7:f3:d4:28:d7:9e:
56:dd:1a:da:32:df:8a:26:da:aa:7c:3a:e4:32:02:
96:c8:45:40:0e:27:83:82:c5:2f:4f:49:6b:46:e9:
b6:a5:f2:58:5d:0b:a8:72:9e:f2:03:17:bf:f3:37:
ec:4f:e9:ec:04:40:f4:7c:5e:54:e2:74:82:2d:eb:
b9:a1:6a:b3:14:1b:dd:d4:cb:2f:74:0f:8a:83:8f:
3e:88:be:95:3d:da:f6:bd:a1:85:14:79:58:5a:12:
9e:7c:b0:63:c9:39:45:eb:7b:78:d1:f0:ac:02:f8:
3a:eb:a7:48:65:bf:a0:aa:db:ce:6b:30:d8:80:ef:
b6:c6:e9:55:a3:80:0f:64:76:47:4a:c9:6a:75:21:
b9:25:9b:cf:27:49:93:d8:8d:34:07:07:74:de:95:
62:14:5d:60:f6:1d:85:80:5d:22:6d:38:a1:90:85:
45:29:23:18:15:8f:d0:24:fa:24:76:63:82:7a:e4:
8a:9f:47:68:50:bc:55:72:20:d6:23:5a:37:49:d9:
e9:52:a2:0d:45:97:15:72:a4:a9:45:f4:c9:f6:bc:
0f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2E:6C:B6:8F:6F:88:2C:09:6A:9C:9A:EC:91:65:63:6F:7D:52:C3
X509v3 Authority Key Identifier:
keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/B946BBB0312711EE93BD9F61C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.2.0/24
Signature Algorithm: sha256WithRSAEncryption
41:90:3e:32:da:ab:21:4d:51:96:21:81:a7:63:46:54:de:7b:
9f:ef:0a:35:c9:16:0e:19:17:99:2b:ed:56:cc:d5:47:52:6a:
03:2e:ce:4b:86:9f:d1:a3:1a:50:1e:ef:d2:f4:8b:8f:57:db:
35:2a:f8:01:b8:29:0e:ae:fa:3e:cc:4d:ae:12:88:78:ef:ad:
d7:2d:10:48:4a:7a:a9:32:54:4f:91:69:ee:d6:c7:0d:55:0c:
5b:21:73:62:83:44:85:96:e1:74:85:39:34:13:70:f0:43:47:
08:cf:bd:3c:58:8d:bf:f4:cb:f5:5a:fb:20:96:a3:3c:6a:1f:
4e:86:a9:3b:a1:90:94:fd:6b:86:b2:2d:62:cf:1a:70:cb:c4:
eb:0f:3f:a5:24:06:9f:39:47:25:b1:0e:e7:10:1d:50:33:0b:
5d:48:31:f6:94:8a:0c:d6:c8:90:53:71:3c:e3:de:32:95:e1:
23:d5:4e:35:f8:14:02:48:e4:f5:c0:2f:b6:9b:c0:80:45:4b:
6d:d7:ce:b7:0b:1e:e4:d7:84:61:81:bc:c3:11:de:c9:5d:08:
20:39:31:5d:fb:28:c0:15:81:73:d4:dd:fd:a6:6b:80:d4:b8:
50:7d:86:b6:ed:de:e8:3e:0d:e6:ec:2f:fc:20:a4:e6:4d:24:
3a:da:a0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:14 2024 by rpki-client on console-fra.rpki-client.org