Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/932F37BEA7B511EDA1D33553C4F9AE02.roa
File: 932F37BEA7B511EDA1D33553C4F9AE02.roa (raw, json)
Hash identifier: JDK+U049DObHV7wEVbnwtucfZgcEkjWTZhXztE+SyLI=
Subject key identifier: AF:C2:D7:F5:8B:91:F2:B8:B1:A5:85:B3:72:B8:BE:BE:B2:58:C2:D4
Certificate issuer: /CN=A91A7C68/serialNumber=0F626A3264D6FECCCBFEB2D99B1DBF8AFFEC3B34
Certificate serial: 011B
Authority key identifier: 0F:62:6A:32:64:D6:FE:CC:CB:FE:B2:D9:9B:1D:BF:8A:FF:EC:3B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/932F37BEA7B511EDA1D33553C4F9AE02.roa
Signing time: Wed 19 Jun 2024 06:17:09 +0000
ROA not before: Wed 19 Jun 2024 06:17:09 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 63986
IP address blocks: 103.117.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jun 2024 09:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7C68/serialNumber=0F626A3264D6FECCCBFEB2D99B1DBF8AFFEC3B34
Validity
Not Before: Jun 19 06:17:09 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=667277e4-a9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e0:fd:f7:60:98:f4:b8:15:bf:ad:1b:32:9b:
d9:f9:35:ac:4b:ff:99:f3:35:5e:7b:79:9e:c5:a9:
ad:a6:0c:b0:6d:a4:c4:4f:89:e8:35:cb:9a:b3:06:
e9:fb:cd:5d:ff:3c:50:f4:1a:6c:8f:2c:45:b4:b9:
1c:62:6a:0a:0f:41:df:3e:9b:32:f3:2e:9f:12:a6:
35:c2:e6:95:2b:08:ab:77:c2:bf:9a:d3:1a:d7:9d:
a1:85:02:a8:d3:c7:7a:b5:f8:2c:6a:d3:c2:31:7f:
b5:6c:2b:ea:3c:04:07:88:04:99:1f:19:6c:2d:95:
91:d0:d4:1b:8b:5c:7e:df:f5:ac:85:92:82:f9:05:
36:c3:7a:6b:14:6f:0e:eb:a1:db:95:88:1f:de:14:
0e:93:7e:ef:d9:33:54:1b:6a:f7:81:2c:54:43:0a:
73:71:a6:d2:b3:0d:e0:fc:65:0e:ab:cc:38:a8:57:
da:31:ca:30:b3:77:0c:2a:81:99:71:a9:bd:32:97:
9d:32:83:14:ad:f0:29:d9:7b:fd:e0:5e:c3:15:5d:
79:b8:b1:10:fc:59:4e:28:24:c2:87:9a:89:3b:3d:
8e:b8:f3:9e:e7:c5:49:7f:44:84:1d:2c:21:fc:7e:
a7:8f:b5:2f:a4:47:84:92:b4:fe:ce:6e:fa:2a:da:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C2:D7:F5:8B:91:F2:B8:B1:A5:85:B3:72:B8:BE:BE:B2:58:C2:D4
X509v3 Authority Key Identifier:
keyid:0F:62:6A:32:64:D6:FE:CC:CB:FE:B2:D9:9B:1D:BF:8A:FF:EC:3B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/932F37BEA7B511EDA1D33553C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.117.119.0/24
Signature Algorithm: sha256WithRSAEncryption
53:bc:86:cb:1d:f3:1e:dd:f2:9c:30:a8:6a:ac:12:2c:cb:b7:
0a:06:a0:05:be:02:0e:12:81:c7:f9:d6:97:2d:af:aa:80:a7:
3c:c2:40:17:19:d4:f0:a8:b2:d9:01:89:c2:d9:4b:4e:9e:3d:
ce:93:96:0a:dd:88:0f:43:da:2b:d3:63:36:3a:62:95:c6:a9:
80:23:41:e1:93:bc:8d:a2:de:98:b5:4a:91:61:cd:30:3c:2e:
33:99:5f:79:13:36:ca:ed:19:2e:fb:a2:12:98:33:e4:bc:a9:
14:84:c4:6d:9d:42:c2:56:78:f2:eb:25:67:4b:fa:57:5d:65:
89:90:e9:dd:df:a4:be:6c:5c:aa:f8:af:38:a5:51:64:2f:b0:
f0:81:ae:f8:46:b4:05:95:ae:73:21:3b:36:8e:5f:49:64:4b:
e2:a1:c5:f4:34:6e:d8:aa:e5:fa:e5:7d:c4:b5:fd:d7:60:10:
32:b3:50:dc:fa:9f:d9:4b:9e:d0:1d:d3:d5:df:ce:2a:36:03:
45:f5:df:02:1a:9d:1e:ad:7f:32:0b:d8:4a:f3:6c:1c:ff:5d:
55:78:cf:0b:95:28:a1:9d:d4:1b:99:2c:02:86:ee:47:46:29:
3c:49:cd:b2:8d:5e:7d:1a:86:82:f8:b0:52:da:c5:7e:78:81:
f3:e2:8e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 14:52:26 2024 by rpki-client on console-ams.rpki-client.org