Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/7577B66812CD11EFAC15BB64C4F9AE02.roa
File: 7577B66812CD11EFAC15BB64C4F9AE02.roa (raw, json)
Hash identifier: 5DPHq/CY+S8v0HlXrSKOIZMp7ysvYorgp09+oTX5qjM=
Subject key identifier: 10:26:7F:BF:9D:93:B5:80:89:BA:8D:FE:29:67:A6:91:3A:A2:8D:2C
Certificate issuer: /CN=A91C0E6A/serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
Certificate serial: BD
Authority key identifier: F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/7577B66812CD11EFAC15BB64C4F9AE02.roa
Signing time: Wed 15 May 2024 15:11:52 +0000
ROA not before: Wed 15 May 2024 15:11:52 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 215133
IP address blocks: 103.130.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 18:53:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0E6A/serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
Validity
Not Before: May 15 15:11:52 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6644d0b8-95c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:53:c3:86:84:75:50:8e:56:5d:10:64:83:
92:70:f4:f4:81:56:88:f0:cc:cb:da:d7:8d:e7:da:
3a:93:55:71:2f:98:f9:d4:a2:9c:6e:c1:72:3a:db:
91:7d:b1:e2:5f:f0:6b:ed:02:54:7d:e1:6f:0f:bd:
b0:9d:d0:70:40:b4:41:55:96:d6:f8:be:4b:9a:f6:
b3:59:dc:01:19:ff:3e:93:41:32:71:32:f5:b2:8f:
fa:e4:ac:84:33:21:9e:95:e9:7c:c3:9d:32:97:c9:
d7:cf:45:a2:e5:44:cf:6c:74:fb:96:b9:7a:cc:54:
a7:0c:12:a2:48:ae:90:c1:4a:1a:1d:1d:1a:7f:f1:
bc:12:a4:fb:c5:41:c7:1b:1e:45:12:b8:44:32:dd:
4a:e4:cf:26:ad:08:9b:33:54:84:7e:e4:3a:e5:86:
95:ed:a0:5a:3f:e9:85:aa:c3:dc:0c:27:cc:62:82:
f0:63:2e:65:1d:20:58:8f:74:b5:1b:58:3f:69:a8:
81:b5:d8:9b:e9:77:ff:a9:b1:ca:10:1d:26:ef:b7:
1c:97:09:a2:24:1e:55:b6:93:12:96:28:7a:31:82:
ba:00:b8:8d:e0:a6:bf:21:48:5b:26:f6:59:42:87:
3e:ea:77:29:07:1e:a7:94:fd:bb:9c:a8:ad:42:97:
da:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:26:7F:BF:9D:93:B5:80:89:BA:8D:FE:29:67:A6:91:3A:A2:8D:2C
X509v3 Authority Key Identifier:
keyid:F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/7577B66812CD11EFAC15BB64C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.239.0/24
Signature Algorithm: sha256WithRSAEncryption
64:72:d5:27:fc:d0:b7:99:44:ec:36:e9:28:90:f7:00:98:e2:
18:bc:00:75:57:e0:a0:76:68:da:6c:4a:83:30:be:19:06:0f:
de:4b:b6:93:a8:f1:dd:d2:8c:5a:06:9d:59:08:77:00:e0:34:
21:84:3d:60:21:e0:4e:84:89:fb:09:72:89:d5:e2:19:4c:1f:
eb:04:ec:3b:fc:54:99:90:5b:ce:0d:64:8e:32:83:78:64:29:
3d:5b:15:ac:59:1a:f4:73:81:22:49:58:ae:0b:c9:48:df:ab:
e8:35:08:91:ad:bc:8a:56:70:ca:37:e8:0a:89:82:17:64:91:
73:7c:0e:b1:73:2f:29:b7:56:33:c5:99:84:38:2c:ed:4c:bd:
0e:c7:ae:7b:ad:7b:a1:37:0d:d1:c7:6f:c2:b6:7a:e2:bb:d1:
ba:48:3e:43:9f:33:74:bd:44:ea:b1:56:43:47:f7:56:34:c8:
4b:45:46:98:e5:2b:d6:3a:55:f8:09:da:f0:6f:fd:71:34:9f:
9a:79:64:75:30:81:41:92:8c:92:ee:c8:6a:a2:36:e4:0d:f2:
81:e9:e4:f5:86:6e:35:e6:93:82:10:fb:b6:43:4e:4a:72:6a:
43:25:e9:db:1a:73:35:ee:e6:3b:80:11:b1:fd:38:77:c8:9e:
01:68:82:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 20:22:07 2024 by rpki-client on console-fra.rpki-client.org