Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/772680C494D911EE9026CD7EC4F9AE02.roa
File: 772680C494D911EE9026CD7EC4F9AE02.roa (raw, json)
Hash identifier: d5IDY6EVW6ATyxgAW2692iSHhuE7K5DfpBpVcdYUMYU=
Subject key identifier: 34:41:3C:1E:CF:C0:18:1A:C2:3A:C1:C2:23:0C:95:5C:E6:F3:1C:8C
Certificate issuer: /CN=A91B9BC6/serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F
Certificate serial: 03DB
Authority key identifier: EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/772680C494D911EE9026CD7EC4F9AE02.roa
Signing time: Thu 07 Dec 2023 08:21:02 +0000
ROA not before: Thu 07 Dec 2023 08:21:02 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 152150
IP address blocks: 103.174.46.0/24 maxlen: 24
103.174.47.0/24 maxlen: 24
2001:df7:b780::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 16 Jan 2024 19:33:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 987 (0x3db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9BC6/serialNumber=EF5B497FFD8B259EE9EA157B0222B110266CF59F
Validity
Not Before: Dec 7 08:21:02 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=6571806d-f9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:84:3c:c3:fc:4c:0f:0d:75:c4:fc:c6:cb:
47:96:99:ce:d1:e3:f4:b6:39:60:e2:b5:10:62:c7:
c9:bb:7b:d8:74:e1:4d:fc:6d:8a:01:22:06:b7:1e:
28:9c:fc:40:1d:da:ad:50:22:9e:ad:52:f9:98:13:
aa:3f:28:a0:fe:f4:1b:1d:9f:7d:5b:f2:44:6a:43:
d2:65:87:40:ba:ca:74:d0:0f:fa:3b:ca:71:20:ea:
e0:68:73:a6:69:56:00:4d:8e:e4:a4:72:03:7b:54:
c7:91:a5:71:25:00:81:c3:e0:37:9a:13:22:61:e4:
4a:16:e2:0a:c8:4f:d9:ca:f3:2c:56:f9:3a:21:27:
81:33:f5:ff:a6:0a:5f:12:68:c0:ef:5e:c9:e1:fc:
ea:29:9d:65:70:51:c6:fa:cf:5e:8d:27:36:32:6c:
4f:d1:17:ed:a0:68:e3:1b:dc:c0:96:01:c1:3e:b1:
87:92:cd:60:f0:c3:63:2b:a4:24:6b:e4:4e:38:c6:
d5:e6:c5:ff:0c:2c:2e:3f:d2:1e:c5:f4:b4:d1:db:
f9:d5:8e:ec:21:5c:80:7b:37:8f:87:ee:c7:2e:f6:
c8:ad:53:a1:9b:d4:84:ec:08:22:e5:96:19:85:70:
c5:b4:43:65:09:6d:c2:b7:6a:b9:c1:20:15:70:6e:
21:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:41:3C:1E:CF:C0:18:1A:C2:3A:C1:C2:23:0C:95:5C:E6:F3:1C:8C
X509v3 Authority Key Identifier:
keyid:EF:5B:49:7F:FD:8B:25:9E:E9:EA:15:7B:02:22:B1:10:26:6C:F5:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/71tJf_2LJZ7p6hV7AiKxECZs9Z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71tJf_2LJZ7p6hV7AiKxECZs9Z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9BC6/489091CE266711ECB9C22C77C4F9AE02/772680C494D911EE9026CD7EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.46.0/23
IPv6:
2001:df7:b780::/48
Signature Algorithm: sha256WithRSAEncryption
c5:5f:5e:1d:81:23:5f:15:47:4e:3d:55:2a:09:89:3d:e5:98:
b4:84:4a:90:9e:80:be:92:b8:1b:7a:09:3c:39:4b:a9:93:d4:
d9:f0:02:0c:88:bc:4f:a7:06:08:95:aa:a8:d3:b2:8b:ff:28:
df:88:96:88:0a:78:32:8a:77:09:db:ae:cd:33:2a:fc:2c:d0:
cb:b5:2c:9a:91:ed:c4:a7:c5:26:6a:37:e3:54:60:ef:3a:88:
59:ac:29:21:f4:50:8f:09:b2:27:3d:e8:b6:86:47:63:52:84:
5f:05:4f:5c:11:10:8b:89:2d:1b:37:c0:3f:b6:66:dd:2a:23:
0a:f2:bf:e2:5f:02:54:9c:a6:4f:8d:08:5e:8c:81:1f:78:1f:
43:f9:87:2f:c0:e6:79:7d:7d:b8:ee:bc:00:00:da:3e:62:d1:
c0:2c:8b:c8:77:81:e4:82:aa:04:cf:75:cb:86:a0:31:3d:5c:
da:e6:1a:c2:de:29:13:f1:26:4c:e8:69:75:8f:a8:eb:f1:de:
20:98:4e:42:09:cb:24:ae:d0:de:96:17:53:59:af:01:fa:88:
7a:8a:fd:2d:41:89:51:5c:e3:ff:fd:70:8b:68:e9:36:a5:b3:
2e:55:91:e6:c8:00:36:61:7b:d8:10:17:ba:7e:75:db:34:c8:
0e:d9:70:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:58 2024 by rpki-client on console-ams.rpki-client.org