Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/24CE39283F0311EFB6E5DD79C4F9AE02.roa
File: 24CE39283F0311EFB6E5DD79C4F9AE02.roa (raw, json)
Hash identifier: 3Bt7sTEiU1gD4zHDMDzO3BYbgByNwXhSQGh0wf2k1vo=
Subject key identifier: 1B:AE:6E:41:D1:B5:EA:04:A9:B3:85:D2:60:1B:BE:CD:28:5D:6C:02
Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial: 08B6
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/24CE39283F0311EFB6E5DD79C4F9AE02.roa
Signing time: Tue 20 Aug 2024 14:20:19 +0000
ROA not before: Tue 20 Aug 2024 14:20:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.112.0.0/24 maxlen: 24
103.112.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 08:06:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2230 (0x8b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Validity
Not Before: Aug 20 14:20:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66c4a622-918f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7e:3c:0e:32:3a:4c:48:e7:e9:a6:e4:54:57:
d4:2e:78:31:8e:68:2e:4e:89:71:e5:00:2c:b8:c7:
ac:5b:88:1e:b7:ae:54:b6:e7:5c:9c:65:5c:f4:14:
3d:61:0f:fd:e8:e0:ad:58:52:18:58:0b:c1:0b:20:
86:1b:cc:ba:c6:38:68:76:39:be:51:14:45:4a:c1:
c8:b8:61:75:88:41:f2:08:02:f6:e3:1d:3d:9d:c3:
89:41:2c:e8:f1:af:d0:6b:b9:4f:c8:f9:1f:ec:98:
39:16:dc:dc:9f:45:7d:ab:ab:cd:d0:00:4d:2e:a0:
90:0c:6c:41:ce:cb:f6:2d:d5:c0:58:59:bc:e9:ae:
ec:93:e5:cb:b8:53:ad:4e:41:70:15:36:ec:69:b5:
9e:79:96:9b:72:48:bf:8b:5e:9f:22:2f:63:09:9e:
9a:cb:58:a7:7e:57:4f:09:72:d2:e1:6e:c3:6d:5b:
19:fe:90:82:56:3d:b5:f6:4f:c1:d1:5e:1b:48:4f:
4d:9b:e5:1f:56:f1:12:ef:57:6e:ab:81:5d:6e:3a:
0a:1b:6e:19:b3:4a:c1:95:14:f3:08:88:5c:13:c0:
1e:fe:a3:c3:6c:21:39:b5:c3:8c:b8:3b:7a:88:c4:
10:77:5d:8e:ed:d0:10:ec:04:de:e8:75:27:ac:89:
e2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AE:6E:41:D1:B5:EA:04:A9:B3:85:D2:60:1B:BE:CD:28:5D:6C:02
X509v3 Authority Key Identifier:
keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/24CE39283F0311EFB6E5DD79C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.0.0/23
Signature Algorithm: sha256WithRSAEncryption
93:cf:72:7f:ac:d4:1a:cd:73:79:d4:72:01:fc:92:6b:d8:ff:
40:c2:59:36:a5:e7:ec:f1:58:7a:4f:c8:c0:24:45:09:6b:d5:
12:f0:bf:24:49:eb:04:0c:3c:a3:1c:cd:a5:8b:b2:20:70:27:
89:0a:3e:0f:2c:02:c4:10:b0:f9:75:e2:93:0a:5b:bf:09:98:
0f:88:bb:4e:9f:83:b1:59:40:d2:af:99:3d:a8:00:8a:0f:26:
6d:2c:8b:3e:aa:69:06:e1:ad:e7:5e:7e:5e:c5:bb:ed:c7:f5:
a7:27:5f:b8:0d:26:04:8d:7d:e8:e9:32:89:d2:b1:90:6e:2f:
20:42:a0:47:7e:3d:80:61:7b:ac:02:54:b0:fb:9e:21:ec:a2:
7a:20:38:c5:e3:97:d7:67:87:06:18:e0:b9:fb:41:7d:84:e2:
57:c8:3e:f5:93:53:77:fa:db:2d:5e:87:58:d3:eb:17:e6:e8:
f1:63:ac:b8:92:05:a8:34:b1:d8:b5:3b:62:b3:e6:84:a3:4e:
8d:ac:4d:63:a1:b4:e5:87:ee:5a:b9:66:2e:0e:8c:06:9f:ef:
dd:d5:bb:a9:7e:28:4a:25:9f:02:06:d6:8d:64:58:99:5a:2f:
45:ad:35:27:1b:a1:d9:68:31:50:4e:d2:a3:34:1a:71:dc:fb:
b3:52:9a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 09:30:18 2024 by rpki-client on console-fra.rpki-client.org