Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/792CA032593011EDAA94BC34C4F9AE02.roa
File: 792CA032593011EDAA94BC34C4F9AE02.roa (raw, json)
Hash identifier: rqobOIz0mERq47JNe1iR07jkRCXQHhgZWxm+VvdHX8o=
Subject key identifier: BE:9C:82:1A:75:C4:9D:7C:AA:BD:6A:D5:68:9E:12:21:63:26:09:FA
Certificate issuer: /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Certificate serial: 0A86
Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/792CA032593011EDAA94BC34C4F9AE02.roa
Signing time: Thu 01 Feb 2024 13:33:09 +0000
ROA not before: Thu 01 Feb 2024 13:33:09 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 139841
IP address blocks: 103.112.204.0/24 maxlen: 24
103.112.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Feb 2024 17:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2694 (0xa86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Validity
Not Before: Feb 1 13:33:09 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65bb9d95-be58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:46:65:20:fb:20:5e:b5:df:ad:63:c1:80:20:
54:25:e9:8c:c7:8c:49:13:db:f5:64:54:dc:95:d7:
63:69:62:5f:ec:ce:e0:73:67:40:a2:9f:79:a6:a1:
a7:63:a5:6f:5c:e5:29:71:01:51:4d:ce:90:74:5b:
90:46:76:b0:98:10:21:62:f6:14:a2:4d:14:62:d2:
3f:92:2e:57:af:92:39:ca:ed:ec:6f:e5:10:7e:0a:
6d:19:de:7d:54:35:23:a8:ee:62:d2:ad:f3:0c:31:
83:05:48:09:27:d3:09:2d:c5:6c:8d:24:59:b7:e7:
fd:7d:a9:c8:0b:09:1b:cd:11:f1:6c:2c:5c:8f:01:
b7:ab:ef:49:bc:28:2e:1b:96:21:d2:3e:19:45:91:
e9:56:4d:32:8a:35:6f:8e:24:e2:9f:43:40:e2:64:
87:1f:79:f2:aa:1d:bf:1d:24:a8:2d:9c:ba:29:fa:
43:2f:1e:ad:7c:17:6a:32:1f:28:41:d6:77:62:fa:
fe:8d:f5:c9:1d:39:24:1f:63:b2:71:6b:0f:dc:2c:
dc:cc:5e:b8:54:29:b3:3b:65:3d:ba:34:df:13:84:
3c:75:2c:9a:ed:fc:52:f5:7b:cf:3a:e0:ec:1e:81:
f5:89:02:21:e8:b9:13:05:08:3a:55:77:52:26:6e:
dc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9C:82:1A:75:C4:9D:7C:AA:BD:6A:D5:68:9E:12:21:63:26:09:FA
X509v3 Authority Key Identifier:
keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/792CA032593011EDAA94BC34C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.204.0/24
103.112.207.0/24
Signature Algorithm: sha256WithRSAEncryption
74:b7:21:ab:c4:37:d6:dd:87:11:51:36:df:06:9f:a4:24:93:
58:ae:fc:b8:86:fd:ea:40:0d:8a:04:c8:d8:16:9b:64:b2:e0:
c3:65:2d:2a:61:1f:f4:d3:9e:b0:f8:8a:95:e7:f2:5a:22:67:
af:9a:c3:28:a3:f0:f9:6b:1a:4b:cb:64:e5:ea:c3:01:48:69:
58:9c:d0:79:c3:1c:48:5b:ff:ec:52:76:90:6e:f7:96:91:ea:
a3:3e:e9:fc:8d:23:5b:f1:73:82:62:c2:a0:86:2e:37:1f:05:
d1:1f:79:b2:ee:42:27:7e:40:9a:1b:22:10:9c:7d:fc:2c:97:
1b:76:4a:8b:00:88:48:ba:a9:71:8e:27:6c:4a:08:8c:87:7b:
85:91:7a:42:de:3f:98:e3:53:fc:a6:73:1c:44:5c:fd:ef:c2:
f5:83:12:9a:fb:9d:ac:d8:f9:de:d5:fe:9f:86:43:df:26:2c:
e6:46:70:0e:b1:43:02:64:c4:90:ae:12:51:b4:29:4c:14:ff:
9a:e6:6c:d3:3d:0a:93:32:04:77:aa:ef:bd:3a:02:83:88:aa:
61:16:cc:0a:ba:93:2c:6d:cd:4c:cf:71:b6:00:28:c8:f2:0f:
b5:d3:3d:0c:c9:cc:5e:67:97:82:ce:b2:a1:c2:99:a4:40:2b:
e7:f1:7d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 3 20:35:32 2024 by rpki-client on console-fra.rpki-client.org