Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/AAC44D305BB711EFA51D595BC4F9AE02.roa
File: AAC44D305BB711EFA51D595BC4F9AE02.roa (raw, json)
Hash identifier: siSwpaYsrAFrAaSeA9+aBtSjK7DzlzQ5rty71XVk5dY=
Subject key identifier: 89:F6:3B:66:EB:2D:7F:EF:B9:05:5F:48:7E:B0:C9:2A:41:DA:83:7E
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 14BC
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/AAC44D305BB711EFA51D595BC4F9AE02.roa
Signing time: Sat 17 Aug 2024 07:13:12 +0000
ROA not before: Sat 17 Aug 2024 07:13:12 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 136030
IP address blocks: 103.151.26.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 10:54:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5308 (0x14bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Aug 17 07:13:12 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66c04d88-cc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a7:df:03:86:73:21:11:5e:f8:0c:bf:b9:a2:
8a:ca:93:9c:ef:13:69:87:7f:bc:ab:17:15:19:ac:
1f:bf:6b:83:aa:60:3c:4b:eb:ab:02:03:77:ea:57:
93:45:73:d0:ec:7a:52:0e:e6:0a:48:85:5f:d3:86:
a3:9d:fb:4c:04:aa:5e:e4:66:cb:79:e9:a7:03:69:
d4:d9:71:35:dc:d5:3f:92:e8:86:6b:63:c0:d4:0b:
3c:3f:c9:78:84:18:2f:c0:d0:7b:01:ad:02:f0:c4:
12:2e:f7:4a:29:14:8a:78:ce:92:ae:a0:c6:02:22:
09:56:f5:c6:ee:e4:08:92:a6:bd:8e:7c:75:03:33:
28:da:d2:6d:e3:89:b9:e6:25:5f:7f:7f:f4:ed:c7:
7d:66:26:57:da:53:ff:c8:3e:57:81:c6:41:a1:47:
ae:03:ac:38:7a:f9:a6:0c:98:19:3c:20:9a:aa:c8:
4e:98:2f:c3:a3:fa:bc:f1:36:6b:73:bc:a8:2e:02:
2e:f4:ec:b5:90:ea:74:86:79:01:8c:91:82:a3:56:
8e:d4:f9:29:1f:3b:0f:63:f6:94:07:74:92:45:d7:
7e:7a:5e:53:ea:6d:bc:8c:6b:02:ff:2f:54:33:6a:
e7:b4:ef:0b:13:09:72:96:9e:96:cc:a3:01:90:08:
23:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F6:3B:66:EB:2D:7F:EF:B9:05:5F:48:7E:B0:C9:2A:41:DA:83:7E
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/AAC44D305BB711EFA51D595BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.26.0/24
115.167.50.0/24
115.167.64.0/24
115.167.66.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b3:f1:72:59:1a:99:16:07:8f:4b:f5:20:16:93:1b:d3:ac:
d0:fe:da:ab:60:d9:3c:b7:b7:39:7d:89:a5:3c:b9:e6:98:8c:
85:ce:65:27:6a:f6:00:53:29:81:5e:6d:ec:8a:1c:0f:70:7f:
23:af:10:94:f8:b1:4a:4f:a8:61:df:e8:ca:dc:2d:d4:fa:e7:
fe:51:0e:d2:96:bc:6f:64:3e:66:40:ad:c6:ce:45:ab:44:3a:
df:c3:a4:ac:dc:a6:b2:d7:82:9a:33:df:21:02:25:37:cf:4e:
19:bc:d3:67:6a:93:c6:4a:10:9f:43:da:02:0f:aa:2f:52:d6:
3e:5a:45:60:e4:84:e5:e1:6d:a4:56:10:94:83:19:ff:6a:5d:
6b:9f:3a:cb:9a:cb:57:0f:2b:e8:b4:44:f8:af:8f:8b:a8:66:
4e:22:8e:bb:ae:25:40:57:fa:79:8a:6e:9e:44:be:98:e9:1a:
a4:ae:ca:53:eb:77:82:2c:a3:a5:22:9e:d4:55:bf:1b:9f:17:
c1:79:b7:1e:1b:5d:d4:d2:a7:07:8a:f1:cf:99:bb:a2:63:b6:
2b:d8:fb:34:cc:0d:f6:ef:25:f4:a4:82:8e:52:63:4b:24:a4:
42:85:d1:b2:23:50:ad:c7:05:34:60:80:c2:41:fd:4a:13:90:
05:5d:5f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:07:26 2025 by rpki-client