Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/EC6D3E86C82D11EEA128EF45C4F9AE02.roa
File: EC6D3E86C82D11EEA128EF45C4F9AE02.roa (raw, json)
Hash identifier: p2sTzur5H2GknDV4YCW3wSTA6DagB+GeC+/GfS0NAzM=
Subject key identifier: AE:F7:FA:9C:61:82:EF:EE:0F:82:24:78:CC:04:C4:9C:5B:68:C0:DC
Certificate issuer: /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
Certificate serial: 1838
Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/EC6D3E86C82D11EEA128EF45C4F9AE02.roa
Signing time: Sat 14 Sep 2024 17:34:46 +0000
ROA not before: Sat 14 Sep 2024 17:34:46 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 59256
IP address blocks: 103.39.238.0/24 maxlen: 24
103.39.239.0/24 maxlen: 24
103.39.248.0/24 maxlen: 24
103.243.239.0/24 maxlen: 24
175.111.176.0/24 maxlen: 24
175.111.177.0/24 maxlen: 24
175.111.179.0/24 maxlen: 24
2001:df6:9000::/48 maxlen: 48
2401:9cc0:200::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 18 Nov 2024 10:55:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6200 (0x1838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
Validity
Not Before: Sep 14 17:34:46 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=66e5c936-63d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:67:2b:9c:f3:1d:f6:52:78:46:9c:56:a3:24:
aa:a5:14:9c:08:7f:4a:f5:1c:de:d0:a6:5d:e0:6b:
98:c3:75:d8:37:6a:d0:51:a3:cd:a0:af:18:90:d6:
40:bf:bb:5e:0d:50:3e:58:d7:c8:32:cc:24:d8:49:
bd:9c:ea:2f:c2:ba:e5:53:40:53:e8:e3:4d:a6:3d:
b3:a1:0a:d4:ed:05:b2:68:9e:76:94:44:66:ca:19:
cc:03:73:95:c0:da:1d:08:f6:90:a4:24:67:23:3b:
2c:2e:aa:1a:07:ec:85:59:00:10:63:80:93:c3:74:
7a:0e:35:d4:e7:19:79:2a:ea:7b:90:52:43:a6:6d:
39:79:94:80:97:54:db:5b:09:a0:6c:c4:38:c4:3b:
ac:bf:ad:9e:e6:a9:3c:a6:55:19:9b:a9:49:92:84:
41:e7:66:6a:0b:c4:3e:b1:97:6d:16:6c:52:7a:ea:
3a:17:92:85:5d:a1:44:6f:33:da:9a:35:e2:39:8a:
4b:c1:9f:fc:c7:b1:91:08:a7:40:58:50:26:ad:e8:
32:94:e2:0d:1e:b8:0b:1d:65:31:e6:d6:c9:2c:d5:
30:e2:60:f6:f3:20:73:ca:6a:79:02:61:0a:84:b5:
86:18:cd:cf:22:cf:3e:b4:5b:ce:db:75:f6:cd:73:
7e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F7:FA:9C:61:82:EF:EE:0F:82:24:78:CC:04:C4:9C:5B:68:C0:DC
X509v3 Authority Key Identifier:
keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/EC6D3E86C82D11EEA128EF45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.39.238.0/23
103.39.248.0/24
103.243.239.0/24
175.111.176.0/23
175.111.179.0/24
IPv6:
2001:df6:9000::/48
2401:9cc0:200::/48
Signature Algorithm: sha256WithRSAEncryption
dc:f2:4a:6a:51:54:bc:2a:8c:f0:4a:d8:0a:c4:63:a7:06:bb:
0a:68:26:88:42:6d:4b:e7:1a:dc:e9:97:b9:af:80:38:e6:7b:
64:b0:4d:eb:4a:21:e1:6e:47:b2:39:ed:96:1d:e8:f7:f9:de:
a2:a2:b9:31:ae:9c:c9:f3:b3:68:12:02:7f:51:ea:2c:d5:e0:
f1:04:d5:7f:6c:10:51:2b:86:12:1f:0f:f2:02:81:ba:00:d5:
1a:aa:ba:f6:33:17:cf:78:fc:c2:08:48:0c:a4:06:0a:36:c8:
26:a8:8c:36:89:c3:94:54:b2:10:39:d5:9b:90:d2:f9:ce:89:
8c:40:04:e4:62:54:dd:87:ff:56:c3:63:94:72:66:d2:13:80:
c1:40:c0:c0:d5:28:e9:5a:11:9c:ac:16:c6:ac:10:aa:c5:e6:
d4:00:24:13:35:19:d8:5c:4c:56:7c:a0:bc:62:e1:76:48:e9:
b9:28:f5:9a:75:86:39:62:a8:c4:17:c4:7a:c1:5c:42:72:69:
9e:02:fb:89:27:54:dd:0b:db:ba:04:97:50:24:68:dd:ae:8a:
5e:c7:fd:a7:6f:43:d3:ca:fc:53:38:06:29:2c:71:24:56:9d:
39:0d:e4:31:b7:3e:71:77:32:17:24:4f:c5:79:db:82:10:1d:
7e:e9:3b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 13:32:29 2024 by rpki-client on console-ams.rpki-client.org