Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/24922EBC713F11ED90C47030C4F9AE02.roa
File: 24922EBC713F11ED90C47030C4F9AE02.roa (raw, json)
Hash identifier: DU0JMWSBMMZ+1pytkxUmS5haFiXUZYnkOvHAh+FZfIM=
Subject key identifier: 4B:6F:09:51:2B:F6:7A:0C:05:2A:09:74:E8:FE:5E:FB:2C:2E:43:34
Certificate issuer: /CN=A91B01FF/serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D
Certificate serial: 0359
Authority key identifier: 67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/24922EBC713F11ED90C47030C4F9AE02.roa
Signing time: Wed 25 Oct 2023 01:33:46 +0000
ROA not before: Wed 25 Oct 2023 01:33:46 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 48024
IP address blocks: 103.155.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 10:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 857 (0x359)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B01FF/serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D
Validity
Not Before: Oct 25 01:33:46 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=6538707a-8df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b7:cf:dc:cb:19:ce:21:90:2f:dc:a7:9c:1e:
d7:1c:44:1a:18:53:b9:d4:6c:89:7d:5d:64:2e:f5:
9a:00:cd:2f:ec:36:93:4b:17:66:f5:36:33:c7:22:
50:b6:99:68:9c:a7:f8:7b:41:08:ad:38:a0:bb:f5:
42:80:b0:b5:cd:98:77:b5:93:47:c1:7c:58:8a:62:
28:e3:fc:54:d4:e4:cc:48:64:98:35:ac:20:b2:20:
f2:1d:b9:e4:51:ae:6f:00:89:32:f1:f6:7e:6e:cf:
66:8b:72:b0:66:47:12:57:76:64:01:e5:52:bf:69:
72:f5:ad:55:e4:77:3c:3e:bd:5d:14:1b:20:7c:8c:
7f:a2:a4:4d:7e:56:33:ab:47:64:f4:d1:4b:3e:00:
64:b0:61:09:e7:70:ec:23:02:9b:4a:19:70:f2:b9:
8c:18:90:a4:c4:09:e0:0f:2d:6f:9e:f4:30:90:74:
6f:6e:e8:de:db:0c:a1:44:de:6c:26:02:23:a8:8f:
0f:68:96:6e:6b:6c:ed:44:3a:ed:f2:68:e9:8d:3b:
de:8b:d2:16:76:fb:2e:55:05:4c:7f:67:28:16:a9:
1a:4d:a8:67:83:a3:66:bb:5a:f2:18:b9:4e:d7:a9:
a5:d9:75:a9:74:95:a7:2b:85:d2:11:67:f8:70:33:
81:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6F:09:51:2B:F6:7A:0C:05:2A:09:74:E8:FE:5E:FB:2C:2E:43:34
X509v3 Authority Key Identifier:
keyid:67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/24922EBC713F11ED90C47030C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.101.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:37:b1:80:81:4a:dc:51:82:6b:a6:5e:5b:4c:61:4b:0f:cf:
3e:78:71:e1:a5:49:73:2e:7b:8c:ed:93:15:d9:83:64:a9:f7:
95:58:fd:90:31:fc:c1:57:96:79:54:16:7c:f7:d8:5a:f8:5a:
e7:20:5a:0f:53:79:dd:a7:e6:cd:29:41:90:7e:3c:61:d4:1e:
98:97:0c:4c:d7:9a:02:d3:0c:53:86:1d:78:92:8a:5a:f0:15:
11:e9:3a:46:58:49:40:a0:23:a7:73:7e:bf:36:75:c3:a0:4a:
dd:b7:90:17:50:aa:86:e6:f0:c4:c2:9b:68:2d:3e:cf:84:4c:
66:59:13:9f:63:4b:e5:93:aa:3a:40:a3:7c:e5:6e:1a:37:9d:
d7:29:f3:27:fb:e5:09:26:bf:0c:6a:c9:8a:a6:de:69:43:5c:
cb:c2:cd:f3:d5:c0:cb:82:fc:94:d8:9e:86:33:88:0b:f0:6e:
73:12:28:c5:59:be:e1:28:f0:f1:31:af:28:51:c1:87:86:bf:
12:9d:e6:fd:bd:06:dc:52:0c:39:1f:c5:21:26:31:9e:95:2d:
32:43:28:6f:ec:e5:bc:73:9a:28:48:8e:43:35:d9:23:b5:00:
8b:8f:b8:83:a9:0d:83:3f:57:aa:62:d4:27:1a:d3:ed:ea:c3:
ed:5a:d3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 15:00:05 2024 by rpki-client on console-fra.rpki-client.org