Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/3F4648C2739F11EC97D44D10C4F9AE02.roa
File: 3F4648C2739F11EC97D44D10C4F9AE02.roa (raw, json)
Hash identifier: LoNlEiX8OTvSg7pVFJZC3MRR4y+GnV2LG+jKAeZIf8U=
Subject key identifier: D6:9A:A1:84:45:06:F2:56:E0:25:01:F9:57:E9:B7:78:65:A7:9F:9E
Certificate issuer: /CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
Certificate serial: 05BB
Authority key identifier: D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/3F4648C2739F11EC97D44D10C4F9AE02.roa
Signing time: Tue 27 Feb 2024 00:02:29 +0000
ROA not before: Tue 27 Feb 2024 00:02:29 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 134806
IP address blocks: 103.162.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 May 2024 15:13:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1467 (0x5bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
Validity
Not Before: Feb 27 00:02:29 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65dd2695-1ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:0e:95:53:b8:b2:75:2c:4b:a2:3f:ec:92:
16:fe:55:5e:d5:22:4c:f1:9c:b1:05:f6:5b:e2:25:
16:8b:e9:eb:ee:30:b3:81:37:a2:87:f9:95:bb:ed:
c8:e2:b2:da:cd:c5:dd:61:1f:37:ff:4a:4a:6a:39:
06:af:91:b3:08:6a:dc:26:5c:25:5b:92:1c:3a:5f:
56:44:b8:9d:d5:ee:20:9a:fb:47:a2:7b:1e:dc:ae:
4f:22:d5:ec:57:03:b0:de:87:43:d6:c1:cb:c5:a4:
4a:87:51:c3:39:c3:87:16:69:c8:23:14:23:41:35:
a5:7e:17:06:8d:22:22:55:19:14:6c:50:64:da:26:
58:f0:38:c8:8f:7b:8d:3b:02:b5:42:c5:80:96:79:
94:20:a0:22:38:ba:5f:c7:93:35:95:39:b2:0e:94:
09:e9:0a:f0:8e:54:5d:9e:36:39:f6:fa:fd:45:84:
a9:d9:e5:ce:e3:c2:b6:1f:a7:21:f6:3f:9e:df:37:
1a:b7:c0:c6:6a:d6:ae:d0:c7:00:61:ef:e5:6e:85:
c6:08:73:1e:b8:08:d4:df:72:d9:92:4f:8a:ae:65:
cf:5b:58:8f:46:f7:13:f4:38:d6:f0:9b:4a:f3:7a:
11:ce:d7:b6:26:d3:29:b3:d4:05:2f:8a:fc:dd:e6:
8c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9A:A1:84:45:06:F2:56:E0:25:01:F9:57:E9:B7:78:65:A7:9F:9E
X509v3 Authority Key Identifier:
keyid:D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/3F4648C2739F11EC97D44D10C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.57.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:3d:00:c1:cd:2e:d7:a8:36:7f:a3:a2:af:75:cc:94:9b:e9:
a5:ca:74:87:87:cc:80:33:c2:ff:56:d2:ed:06:36:05:23:2f:
1d:dc:71:80:bb:6f:49:40:a2:3f:8b:d2:e7:c2:3d:08:af:66:
6d:3b:b0:d3:42:ea:93:b2:dd:c3:19:6a:84:42:26:95:0d:1d:
8f:44:ee:d5:e2:a2:02:9b:b4:fc:fc:f4:7c:56:c5:b1:56:a2:
89:f0:e1:07:a2:9e:69:b7:db:7e:de:26:bb:0f:af:0a:52:00:
cb:ac:e2:97:d4:83:bf:6d:52:8f:da:5e:6c:67:1a:c6:12:ac:
9d:07:10:c5:87:6e:b2:6a:31:44:91:b9:34:a5:b6:26:49:c6:
2d:bf:2d:2d:44:06:04:68:ae:c6:b8:30:f0:72:ce:e9:f9:22:
f1:26:25:72:50:cc:8f:f4:68:57:e5:86:43:03:d4:60:9b:98:
99:47:92:e4:4f:c6:61:fb:e2:4d:ed:5d:e6:6b:ee:1c:4d:80:
7a:a7:cd:0f:80:4a:b5:a7:94:8c:5c:b7:6c:35:7c:76:15:e2:
1f:3b:0c:5f:2e:93:85:f0:6c:9a:1b:bc:83:d8:a4:3a:5c:66:
26:28:3f:40:ef:4b:51:18:1e:a3:e2:0f:bf:40:28:65:72:35:
ea:86:94:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 17:52:11 2024 by rpki-client on console-fra.rpki-client.org