Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/92B69AA869B911EAB1A0F35EC4F9AE02.roa
File: 92B69AA869B911EAB1A0F35EC4F9AE02.roa (raw, json)
Hash identifier: HCC4TSMyoOCCThaMZAonsrs7ljagxwggXRNlncoAQLY=
Subject key identifier: AC:36:E7:03:E9:F7:17:E4:60:E0:28:99:E8:2B:E3:EE:1F:82:6D:FE
Certificate issuer: /CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497
Certificate serial: 08EC
Authority key identifier: 1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/92B69AA869B911EAB1A0F35EC4F9AE02.roa
Signing time: Mon 31 Jul 2023 20:57:36 +0000
ROA not before: Mon 31 Jul 2023 20:57:36 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 58895
IP address blocks: 103.117.160.0/22 maxlen: 22
103.117.160.0/24 maxlen: 24
103.117.161.0/24 maxlen: 24
103.117.162.0/24 maxlen: 24
103.117.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Aug 2023 08:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2284 (0x8ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497
Validity
Not Before: Jul 31 20:57:36 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64c8203f-440e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:2a:9d:cb:c4:1e:df:58:79:64:2c:b6:0b:
06:ad:1d:d5:b9:89:21:3f:21:0c:12:cb:8f:14:af:
f2:7b:00:e5:df:1d:d2:5a:ed:92:3c:f6:de:b2:8d:
16:82:58:c6:12:72:61:f4:1f:7c:94:1d:84:62:b0:
cb:e5:17:0c:c0:4f:cd:b1:9f:e4:27:24:ca:6c:d9:
3f:4b:48:7e:56:55:f2:34:40:98:63:a4:95:77:69:
30:ed:3e:ab:97:46:7f:1d:73:3f:1f:3c:ea:f9:74:
5f:24:26:e4:21:7b:26:2b:b2:c0:c1:1e:34:1a:a5:
9a:70:cb:c0:19:f1:d0:a9:fe:d7:16:3d:3e:e7:b3:
8b:1d:ca:5f:ba:4d:ec:bd:03:9e:b4:6e:82:3e:14:
a8:ee:74:99:0e:3a:e0:fe:15:15:18:34:fb:f0:9f:
83:da:fe:8d:13:1c:95:cf:68:07:eb:3f:03:c9:00:
65:17:ae:86:18:16:1d:d4:a4:4b:56:4e:b9:57:90:
61:61:47:f7:5d:b3:53:b5:75:31:d1:57:66:67:7c:
dd:db:9e:10:0d:ae:c0:f6:aa:4b:ce:d7:24:cd:51:
f0:b1:e6:ee:24:44:1e:a2:26:7c:4e:03:54:a5:0f:
ef:7f:51:03:d7:d2:a2:52:1a:b1:78:9b:b7:5f:94:
a3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:36:E7:03:E9:F7:17:E4:60:E0:28:99:E8:2B:E3:EE:1F:82:6D:FE
X509v3 Authority Key Identifier:
keyid:1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/92B69AA869B911EAB1A0F35EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.117.160.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:32:d5:17:d3:3e:fd:17:41:d0:d3:a7:a7:30:39:79:53:51:
67:5d:9b:75:74:c6:bd:56:a5:2c:05:82:02:ce:c5:2b:aa:9f:
6e:0e:4a:47:80:cb:a4:f2:44:c9:40:de:de:97:c4:a0:d0:15:
09:4b:8e:06:66:af:21:4a:77:2e:39:4e:34:ca:dc:70:c7:d5:
49:9c:76:38:1c:71:f7:85:11:4d:8a:51:fc:09:50:7b:f9:e0:
f9:c0:47:3d:da:70:fd:cf:af:81:92:85:84:53:36:6b:f5:d6:
a0:50:4f:1c:da:a5:57:9e:62:5b:cd:82:42:e2:62:33:3c:c8:
f4:81:a2:44:be:1b:a3:63:04:12:fd:07:a5:b7:fa:62:c8:37:
d9:25:d3:62:fa:bb:06:46:17:9f:ee:c0:52:57:a2:25:fb:a2:
69:15:23:71:bd:4c:c4:4c:b1:a4:6c:67:43:8c:5b:46:e0:e7:
eb:17:c1:6f:8d:7c:4c:65:16:09:99:cd:8d:31:d7:75:20:db:
ee:35:cd:ab:76:da:96:ef:84:1a:7d:33:4e:9f:4b:89:f2:f6:
f0:19:a5:fe:db:fc:cd:00:22:85:4c:46:30:72:e1:ba:e9:77:
fa:3f:69:65:78:b5:3f:f9:42:77:3f:9d:94:ff:eb:c7:69:53:
f5:5a:d7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:25 2024 by rpki-client on console-ams.rpki-client.org