Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/1871B5940F7C11EFB4F8F171C4F9AE02.roa
File: 1871B5940F7C11EFB4F8F171C4F9AE02.roa (raw, json)
Hash identifier: Hppq0cG0buizfUltS5jJ6a2OYZApcNl3wnmy7YXuTxQ=
Subject key identifier: D0:99:82:76:7F:76:55:38:04:54:D2:90:20:33:83:93:8A:F8:96:19
Certificate issuer: /CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
Certificate serial: 0BD4
Authority key identifier: 54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/1871B5940F7C11EFB4F8F171C4F9AE02.roa
Signing time: Sat 11 May 2024 09:51:53 +0000
ROA not before: Sat 11 May 2024 09:51:53 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 215133
IP address blocks: 103.205.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 May 2024 13:37:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3028 (0xbd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
Validity
Not Before: May 11 09:51:53 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=663f3fb9-bb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c4:bc:4f:e9:99:d6:15:ca:e4:55:94:29:42:
b8:29:7d:d8:4e:37:b2:0a:b2:c6:f6:7a:fe:57:f6:
97:e7:0d:67:ee:57:c3:3c:6e:a5:dc:9b:1c:ce:19:
2f:22:dc:ec:18:31:a6:02:5f:07:71:a9:5a:1c:19:
a7:cf:0e:1a:d7:84:93:a5:8b:fc:8e:cd:23:59:77:
c0:4a:19:f7:93:db:65:38:d2:42:d0:bc:54:fc:f4:
ef:e1:26:3a:fa:dc:a7:6e:f9:b2:bc:95:17:70:84:
e1:44:e9:0a:75:05:85:d3:e4:28:23:f2:cf:ce:17:
80:6c:16:11:ea:58:cb:05:31:b2:44:46:25:34:ff:
d8:9d:46:a1:4a:76:7f:0f:45:6c:e1:5f:fa:49:1a:
69:be:42:13:ac:61:a0:22:1d:0f:1e:88:3d:46:5d:
1c:6c:8f:ed:57:92:b7:a9:b6:4a:c6:5f:5c:7f:87:
44:4d:93:b7:92:49:d8:d5:dd:22:1f:02:91:36:39:
fb:d4:c1:9c:22:45:9f:b3:53:5a:39:66:54:b6:86:
e5:0b:29:8c:6e:5f:56:09:27:1c:7e:17:43:26:f8:
00:3d:49:2c:34:cc:82:35:cf:86:5c:53:ff:07:df:
57:26:34:61:a8:f4:cb:f3:b8:73:fc:6a:14:20:89:
81:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:99:82:76:7F:76:55:38:04:54:D2:90:20:33:83:93:8A:F8:96:19
X509v3 Authority Key Identifier:
keyid:54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/1871B5940F7C11EFB4F8F171C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.205.182.0/24
Signature Algorithm: sha256WithRSAEncryption
47:f4:c3:d5:10:a5:a9:fd:c1:96:95:46:67:19:2a:5f:bd:fe:
24:12:d8:54:d9:aa:8d:e2:05:8d:c8:62:6d:2d:15:ec:3f:87:
d3:b2:46:28:4a:5a:e8:3a:5b:e1:bd:f8:da:d6:f5:40:79:c9:
5e:1c:dd:c6:0f:d3:82:82:fe:76:66:5a:f9:a7:a7:33:8a:24:
82:87:15:a2:01:e0:04:f5:70:5b:f9:33:14:25:c5:08:12:3b:
fa:31:c8:59:b0:3f:85:09:7c:53:c5:89:b3:0b:72:72:39:f8:
02:b2:28:aa:3d:f2:6a:17:40:a9:90:65:03:01:34:65:0c:54:
38:13:8d:f6:00:6b:c3:5f:f4:34:2f:e0:d7:ca:0a:f2:b7:80:
8e:7e:2d:8d:34:99:1f:7a:f6:8a:9a:29:95:4b:5b:bb:fe:3d:
01:c0:c7:eb:e0:ab:31:45:93:ea:7a:fc:b9:72:5a:ca:14:7a:
b2:a3:04:78:49:ac:fb:d5:d7:4c:93:f4:f5:d7:b5:6d:10:0d:
6e:f5:60:cb:67:9f:8e:ca:aa:26:53:0e:b3:7e:8a:66:1e:0a:
f5:a3:89:84:b1:ec:bd:7b:1b:83:74:4c:22:05:ab:92:92:5a:
43:f1:31:ca:32:a5:50:97:ee:a1:42:ca:98:2f:bb:f6:02:27:
36:e9:97:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:29 2024 by rpki-client on console-ams.rpki-client.org