Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/F8F1CAD6F09D11ED96BA6D66C4F9AE02.roa
File: F8F1CAD6F09D11ED96BA6D66C4F9AE02.roa (raw, json)
Hash identifier: dtAwsC0MBacsw/J4dTALOo9/yboj/IV5Vf9WlbnlpWQ=
Subject key identifier: 9C:66:93:EC:22:6D:BA:05:B1:38:CD:EA:3F:75:CF:BD:83:6B:FC:79
Certificate issuer: /CN=A91CC1E9/serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7
Certificate serial: FD
Authority key identifier: 72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/F8F1CAD6F09D11ED96BA6D66C4F9AE02.roa
Signing time: Tue 13 Aug 2024 06:38:16 +0000
ROA not before: Tue 13 Aug 2024 06:38:16 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 136993
IP address blocks: 103.69.132.0/22 maxlen: 24
103.69.152.0/22 maxlen: 24
103.206.188.0/22 maxlen: 23
137.59.100.0/22 maxlen: 23
180.149.236.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Aug 2024 07:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC1E9/serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7
Validity
Not Before: Aug 13 06:38:16 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=66baff58-3d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:34:29:f7:e3:90:bb:40:88:8b:d2:bc:6c:
af:c6:ab:c6:a1:ef:f6:1b:04:9a:80:81:b6:77:ba:
f7:47:76:83:62:58:a7:79:c6:5f:bb:98:0d:77:64:
04:29:9f:00:66:a1:93:dd:51:a7:bd:2a:e1:32:6e:
fc:25:97:a0:70:81:89:d6:d0:85:fc:cf:f3:f7:a8:
65:b2:fb:b9:92:25:27:9b:f1:f9:05:c6:a4:9c:dd:
18:78:e5:56:26:22:b5:d2:44:48:52:c8:b7:0d:5e:
8f:73:02:f7:d9:e0:10:3f:cb:5e:53:48:c0:4a:04:
25:a1:f5:5c:f5:f5:24:8d:8e:79:c1:c2:52:11:fd:
0e:de:a3:b5:3c:89:1c:cb:9b:f2:bc:4e:34:22:1d:
8f:84:ff:15:4f:64:7f:e8:60:a2:c9:d2:ff:1d:ed:
16:7a:da:58:c2:72:be:7e:1a:fc:bd:8b:53:ee:de:
23:39:47:24:8e:5d:c8:1e:e9:1e:e9:07:1a:76:71:
74:1f:49:9c:19:23:af:e1:ce:8a:f9:f3:b1:30:6f:
a7:93:37:4c:37:cc:21:80:ef:18:14:29:15:f2:e7:
85:5a:b5:9b:98:be:59:8f:53:f6:84:96:d4:19:6f:
2d:af:9d:12:71:e3:ab:46:a1:73:78:31:b9:34:04:
f4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:66:93:EC:22:6D:BA:05:B1:38:CD:EA:3F:75:CF:BD:83:6B:FC:79
X509v3 Authority Key Identifier:
keyid:72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/F8F1CAD6F09D11ED96BA6D66C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.132.0/22
103.69.152.0/22
103.206.188.0/22
137.59.100.0/22
180.149.236.0/22
Signature Algorithm: sha256WithRSAEncryption
30:91:19:3e:5e:b2:29:21:fb:14:f2:a9:c2:8a:3d:dd:bf:64:
47:1c:eb:af:6e:0e:c5:1d:e1:1a:41:3f:73:62:b4:de:0d:9c:
a1:ef:a7:e7:d8:d9:74:ad:16:24:b0:9f:f6:8d:b2:4c:87:3a:
97:c5:b1:99:92:bb:a7:5e:8b:dc:61:db:06:cd:a2:d5:a1:f0:
4e:87:ca:ec:4b:25:4f:d4:4d:0f:28:ee:94:00:86:d2:5b:65:
6b:43:b6:0e:72:c3:49:c3:cc:a1:09:77:9c:31:41:f4:c9:8d:
58:8d:a3:c1:37:03:a7:49:a9:ca:8b:ec:b5:98:fd:e4:10:11:
54:ab:2a:fd:90:f3:b0:64:ce:14:9f:ae:59:23:b7:bb:b0:6f:
15:2b:8f:75:15:a0:c1:b0:51:a3:72:36:8d:a7:30:c0:d1:6a:
8b:f5:55:94:ab:95:1b:ea:52:7e:bc:77:51:14:8a:48:c0:55:
d3:dd:14:da:ca:59:eb:f4:10:8d:b0:56:b7:88:80:f3:ab:44:
a1:aa:49:2c:39:2d:df:c8:ed:57:ae:79:95:6b:11:f2:51:c9:
a1:7a:e8:8b:b0:08:0a:d0:16:3c:26:11:d9:fb:b7:8a:1e:87:
be:cc:65:b2:a0:f3:17:f5:dd:b1:88:eb:34:67:74:98:58:d4:
6a:82:c5:f0
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0MxRTkxMTAvBgNVBAUTKDcyRDE1NzQzRjU5QzgzQTVDMTk1QTVFNkRCMUVBNDY0
NzYzNEJFRjcwHhcNMjQwODEzMDYzODE2WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmJhZmY1OC0zZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsTk0KffjkLtAiIvSvGyvxqvGoe/2GwSagIG2d7r3R3aDYlinecZfu5gNd2QE
KZ8AZqGT3VGnvSrhMm78JZegcIGJ1tCF/M/z96hlsvu5kiUnm/H5BcaknN0YeOVW
JiK10kRIUsi3DV6PcwL32eAQP8teU0jASgQlofVc9fUkjY55wcJSEf0O3qO1PIkc
y5vyvE40Ih2PhP8VT2R/6GCiydL/He0WetpYwnK+fhr8vYtT7t4jOUckjl3IHuke
6QcadnF0H0mcGSOv4c6K+fOxMG+nkzdMN8whgO8YFCkV8ueFWrWbmL5Zj1P2hJbU
GW8tr50SceOrRqFzeDG5NAT0RQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJxmk+wi
bboFsTjN6j91z72Da/x5MB8GA1UdIwQYMBaAFHLRV0P1nIOlwZWl5tsepGR2NL73
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFFOS9CQkNENUQyQ0VG
Q0MxMUVEQjI5QkIwNkNDNEY5QUUwMi9jdEZYUV9XY2c2WEJsYVhtMng2a1pIWTB2
dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N0RlhRX1djZzZYQmxhWG0yeDZrWkhZMHZ2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0MxRTkvQkJDRDVEMkNFRkNDMTFFREIyOUJCMDZDQzRGOUFFMDIvRjhGMUNBRDZG
MDlEMTFFRDk2QkE2RDY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E
KDAmMCQEAgABMB4DBAJnRYQDBAJnRZgDBAJnzrwDBAKJO2QDBAK0lewwDQYJKoZI
hvcNAQELBQADggEBADCRGT5esikh+xTyqcKKPd2/ZEcc669uDsUd4RpBP3NitN4N
nKHvp+fY2XStFiSwn/aNskyHOpfFsZmSu6dei9xh2wbNotWh8E6HyuxLJU/UTQ8o
7pQAhtJbZWtDtg5yw0nDzKEJd5wxQfTJjViNo8E3A6dJqcqL7LWY/eQQEVSrKv2Q
87BkzhSfrlkjt7uwbxUrj3UVoMGwUaNyNo2nMMDRaov1VZSrlRvqUn68d1EUikjA
VdPdFNrKWev0EI2wVreIgPOrRKGqSSw5Ld/I7VeueZVrEfJRyaF66IuwCArQFjwm
Edn7t4oeh77MZbKg8xf13bGI6zRndJhY1GqCxfA=
-----END CERTIFICATE-----
Generated at Wed Aug 14 09:28:03 2024 by rpki-client on console-ams.rpki-client.org