Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/D60A392AA6D311EFBB01891DC4F9AE02.roa
File: D60A392AA6D311EFBB01891DC4F9AE02.roa (raw, json)
Hash identifier: 6ANEUVYOqE9RfT1fi+1D/arQbzMvhIRubQEMcjZr/jU=
Subject key identifier: 80:99:65:99:27:D4:4A:95:8E:6D:8C:BD:24:30:CC:91:1C:F3:24:B5
Certificate issuer: /CN=A918FCE2/serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
Certificate serial: 07FC
Authority key identifier: DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/D60A392AA6D311EFBB01891DC4F9AE02.roa
Signing time: Wed 20 Nov 2024 00:12:59 +0000
ROA not before: Wed 20 Nov 2024 00:12:59 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 137526
IP address blocks: 103.153.170.0/23 maxlen: 23
103.153.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 03:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2044 (0x7fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FCE2/serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
Validity
Not Before: Nov 20 00:12:59 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=673d298b-2e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:40:ab:49:aa:17:ea:7d:2c:97:ec:2c:2b:db:
a6:b3:03:65:b1:1e:9d:b6:e9:30:7e:21:a7:25:39:
96:80:bd:cf:de:7d:51:0e:49:b5:5f:b1:44:20:bc:
fa:22:57:7d:d7:f5:82:3c:9d:3d:65:bb:69:ea:4e:
5f:7c:92:c9:86:ec:aa:8b:25:c9:d4:b3:56:a1:37:
3a:1f:a7:9b:17:54:36:53:91:bf:35:a7:73:03:81:
0d:30:51:6a:43:e0:cc:83:82:4e:00:fd:0b:e5:59:
20:28:bb:6f:43:53:56:2b:14:8a:29:70:1a:cc:81:
05:40:0d:10:9d:38:91:9e:3c:99:c2:fb:18:6d:96:
06:10:6f:dd:df:2d:08:1d:f5:2e:25:5e:c3:14:98:
41:ec:8d:c8:4b:9a:32:e8:ec:ea:3d:fe:5c:60:94:
22:b2:8a:22:76:bd:5a:bc:17:91:cb:3f:50:20:c8:
e8:f2:ea:f2:d5:4c:24:cf:88:fc:89:7d:b2:8f:2d:
2a:c1:67:50:43:8e:20:b5:a0:02:06:31:ed:bd:92:
80:1d:b9:51:ee:d9:07:6d:27:47:50:13:d3:ad:c8:
a8:95:fc:f6:76:b1:fd:c3:16:fb:d0:1b:26:1b:34:
ae:1f:63:88:ea:e7:89:c3:d2:f1:df:09:c9:83:99:
28:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:99:65:99:27:D4:4A:95:8E:6D:8C:BD:24:30:CC:91:1C:F3:24:B5
X509v3 Authority Key Identifier:
keyid:DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/D60A392AA6D311EFBB01891DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.170.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:2d:0d:ba:e5:cd:20:33:ae:86:c6:79:1d:ce:24:92:82:69:
64:f4:05:b4:03:c9:3f:89:40:d4:96:77:1c:f9:52:36:20:8a:
fa:28:1a:fb:c1:74:1e:1a:95:19:d0:74:5e:9d:40:cf:bb:20:
46:85:09:ed:11:d7:bd:a1:94:74:43:f8:d4:0f:ea:78:9f:d7:
a1:99:97:57:97:37:79:2f:e5:61:ee:82:d9:5a:3d:d6:2b:a3:
41:ab:31:86:ba:75:7e:e4:0c:d5:eb:01:9d:be:95:5d:83:72:
e5:cb:31:e0:1f:7c:2d:8b:86:a1:a4:b8:9d:b5:bc:47:90:49:
4b:99:a1:ef:2a:91:c6:b7:ab:07:47:13:db:fb:3f:b6:82:a6:
9c:eb:69:5c:73:8c:ea:ea:63:15:c1:4b:52:ef:0d:ba:25:27:
21:4c:0a:c7:9b:04:82:85:6f:e0:17:77:ff:a7:8a:1c:4f:f0:
bd:f5:54:04:db:ac:90:3a:1e:43:98:21:0c:9b:13:3a:de:db:
49:a5:15:54:15:e6:2a:2b:06:06:88:46:e2:d8:72:04:5f:db:
7d:27:7a:b4:0b:eb:09:3f:c5:6d:01:02:1c:28:7a:39:73:51:
6d:fd:19:f7:c8:5d:9c:e4:4f:a4:46:0f:dc:7a:2b:ed:d1:13:
c2:6b:58:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:21:49 2024 by rpki-client on console-fra.rpki-client.org