Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B8E886AAFBD811EDBC5C2B51C4F9AE02.roa
File: B8E886AAFBD811EDBC5C2B51C4F9AE02.roa (raw, json)
Hash identifier: ji1nPRqnmRHCX6isD0g536HfiXwFcpDWGVQXc1JiQb0=
Subject key identifier: D8:48:F6:E3:66:D7:3D:52:B0:F1:05:87:A8:82:82:08:CE:B9:38:B5
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 124B
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B8E886AAFBD811EDBC5C2B51C4F9AE02.roa
Signing time: Fri 24 May 2024 22:32:20 +0000
ROA not before: Fri 24 May 2024 22:32:20 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 131471
IP address blocks: 103.11.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 09:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4683 (0x124b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 24 22:32:20 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66511574-709b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:2a:74:0f:4e:1c:7e:ce:be:26:b4:f3:68:
d3:9f:a9:44:a4:15:91:ce:03:7b:3b:f1:8a:0e:35:
41:d3:e9:30:fa:33:de:f7:8c:4d:59:4c:d4:3b:ea:
99:4b:cc:a0:1a:59:b1:d8:75:4c:e0:63:0f:fa:fd:
c0:c9:d1:55:fa:8d:57:63:84:39:59:fd:2f:0b:6b:
55:54:e5:a8:25:64:44:1c:b6:2b:46:a3:c5:7f:9a:
0a:b6:04:da:9f:eb:8b:c9:35:d3:04:12:7f:6d:77:
c1:5c:12:a8:60:f5:79:d9:22:6a:b5:ed:9e:49:41:
91:18:3a:04:ba:83:93:2d:04:54:15:2b:e8:4b:75:
b3:47:87:dd:92:1b:f9:2c:3e:6c:7a:05:c3:c3:4f:
22:2a:a7:62:ca:86:94:97:e0:a8:b1:de:2d:e8:6f:
fb:b9:d1:b3:54:25:b3:b6:30:b8:c6:e7:4b:49:03:
5e:cb:71:8b:a9:d9:40:3c:50:75:f0:5c:1a:0b:ea:
f5:05:90:64:95:cb:5e:90:4c:be:39:91:3f:94:ed:
e5:a8:28:ed:a9:78:84:cc:cf:91:60:52:c1:a2:45:
29:13:0e:8d:9c:93:a0:0a:95:0b:a7:80:96:02:23:
00:27:9c:d0:90:03:2f:39:3a:ce:41:03:63:90:3b:
24:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:48:F6:E3:66:D7:3D:52:B0:F1:05:87:A8:82:82:08:CE:B9:38:B5
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B8E886AAFBD811EDBC5C2B51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.63.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ee:f2:4e:3c:49:d5:55:f2:7e:dc:0e:43:32:fc:0c:10:2a:
9a:f7:d9:14:32:09:19:b5:56:93:e9:c9:4b:bd:2e:98:f8:16:
ec:f0:53:98:c5:bf:2f:39:8e:c3:a2:d4:b4:be:eb:a4:42:6e:
da:3b:b6:30:1d:77:d2:01:6e:b8:fc:e1:cc:91:1e:ef:69:11:
a5:45:f0:bf:04:d0:54:25:74:ce:6d:00:2d:31:70:ee:6f:6e:
cf:ee:ba:c7:31:de:5b:ec:4a:d0:15:3b:2d:54:b8:aa:b8:9a:
9d:cd:92:b3:9f:f9:6b:ce:ea:28:1b:01:09:90:c7:1e:c3:b8:
fa:82:43:74:49:21:e0:b2:ae:70:d7:1f:78:85:68:ac:37:b9:
04:28:41:a5:1a:75:ee:4a:80:df:7a:e9:85:9c:8f:0e:bb:79:
93:c0:01:51:7c:a9:d0:d8:e7:34:1a:5e:d8:0f:6a:23:ef:2d:
79:0c:12:a0:a3:b1:d6:ca:0a:cd:7f:5f:40:d8:ad:f1:4f:38:
8d:91:eb:ae:76:0e:5b:18:ca:0e:4b:2a:e0:b9:7b:26:f7:2b:
3a:3c:8c:fa:1c:56:ef:6d:2b:f3:eb:1a:5d:d2:b7:3a:f6:aa:
27:38:83:68:e2:ff:9c:f9:0a:4e:d4:ce:21:7f:10:71:c5:4b:
c5:d8:35:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:16:52 2025 by rpki-client