Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/4F7BE82E397311EDB1F6BE2DC4F9AE02.roa
File: 4F7BE82E397311EDB1F6BE2DC4F9AE02.roa (raw, json)
Hash identifier: TIqqrp0emgHvZ/pwNsz30a8tRWqKOYNVX3FKyHMWO4o=
Subject key identifier: AF:41:CB:5A:DF:2A:B4:36:A9:DD:53:69:26:36:07:39:FF:34:8D:85
Certificate issuer: /CN=A91F86D2/serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903
Certificate serial: 02A0
Authority key identifier: B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/4F7BE82E397311EDB1F6BE2DC4F9AE02.roa
Signing time: Sun 03 Mar 2024 03:15:29 +0000
ROA not before: Sun 03 Mar 2024 03:15:29 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 149522
IP address blocks: 103.182.122.0/24 maxlen: 24
103.182.123.0/24 maxlen: 24
2400:5ce0::/44 maxlen: 44
2400:5ce0:10::/46 maxlen: 46
2400:5ce0:18::/45 maxlen: 45
Validation: Failed, certificate revoked on Tue 24 Sep 2024 13:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672 (0x2a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F86D2/serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903
Validity
Not Before: Mar 3 03:15:29 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=65e3eb51-295f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e6:f5:a3:8d:dd:e9:ed:bd:5e:c2:cf:01:bf:
5f:99:e0:3a:84:a2:93:30:16:f4:78:72:fc:0a:b2:
66:00:40:11:ae:9a:61:3a:c5:50:4e:93:e6:41:a6:
2e:a5:a7:f7:b1:3a:b9:63:d9:bb:d7:98:3e:15:1c:
3a:c8:fe:07:cd:45:e1:de:74:10:99:ef:93:df:9c:
76:99:08:cb:1e:a0:3a:24:87:8e:a4:d1:7a:27:69:
01:49:3a:d4:de:8d:d3:b8:0c:a3:6e:4a:cd:53:ee:
4b:44:bd:73:38:a9:7d:3c:40:6b:4c:d0:be:70:ca:
e3:3e:a3:ca:67:a5:d6:10:08:f2:9d:b1:26:50:b9:
1a:27:cb:8d:cb:31:5e:40:27:12:e5:65:db:c5:42:
a5:bb:cd:31:6e:95:f8:c5:44:13:13:b4:b3:c3:80:
a6:b3:06:26:36:3b:b6:ae:8f:12:be:3e:3b:80:e8:
8f:84:64:fd:63:33:65:34:56:00:f5:66:aa:a8:33:
47:5a:1f:86:bf:99:f3:2b:7e:a6:52:58:6a:02:08:
33:6b:d4:15:3f:41:b6:9b:75:e3:a8:70:02:b2:86:
18:14:b1:40:d1:f2:39:48:4c:ca:97:e2:de:2a:ec:
9e:a8:80:cd:98:1b:dd:19:7b:ec:13:61:7f:6a:78:
b3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:41:CB:5A:DF:2A:B4:36:A9:DD:53:69:26:36:07:39:FF:34:8D:85
X509v3 Authority Key Identifier:
keyid:B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/4F7BE82E397311EDB1F6BE2DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.182.122.0/23
IPv6:
2400:5ce0::-2400:5ce0:13:ffff:ffff:ffff:ffff:ffff
2400:5ce0:18::/45
Signature Algorithm: sha256WithRSAEncryption
6d:c9:a1:77:14:a4:5c:43:30:ac:4b:a8:af:c7:52:fd:b4:ec:
44:4d:6c:11:d7:d3:3d:7d:2f:54:5d:20:c9:90:cc:38:89:cd:
29:4f:85:78:0d:81:27:6d:86:08:3c:d5:b6:a2:d1:4e:bb:6a:
47:e1:d2:84:50:ba:73:a6:ac:5b:e7:70:18:80:d0:b8:02:68:
ef:9a:9d:37:8e:73:ea:b1:5b:8e:95:42:58:20:80:f8:36:be:
f4:f5:4d:7c:c9:1c:38:86:b9:40:f1:70:a9:7b:7e:5b:5c:38:
4a:83:44:2d:24:ff:39:9a:84:b7:88:f7:f2:44:07:14:ea:9f:
47:cb:2e:f8:cb:6f:52:5f:00:f1:56:52:dc:f6:98:50:44:88:
46:d9:e7:60:02:e3:f9:0e:af:fd:a3:d4:74:ac:e0:69:e6:a5:
d1:b1:4d:76:a7:4d:78:d3:cc:25:0a:47:38:27:0b:de:49:1a:
a3:1d:69:fd:d1:61:14:c4:0e:cb:fb:ba:1d:a3:d3:72:ea:a6:
75:be:9f:33:c3:97:8d:0c:eb:41:a9:2e:89:04:d2:a0:77:14:
26:ef:ef:b0:40:90:0e:02:4c:4a:fd:c8:7a:51:2f:5c:59:ad:
be:1d:70:09:3d:ee:5d:14:1f:65:ea:17:a5:55:eb:9a:22:58:
14:36:3f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 16:53:34 2024 by rpki-client on console-fra.rpki-client.org