Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/5997926C379C11EF8E435A66C4F9AE02.roa
File: 5997926C379C11EF8E435A66C4F9AE02.roa (raw, json)
Hash identifier: 1e9M0OlnNVlOiLfkBlZA/N8SdD9lXLMGMsxGjE8WKIM=
Subject key identifier: 69:07:7C:D5:A3:3D:33:AC:22:62:7C:33:2F:4F:47:83:4B:86:4D:12
Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E
Certificate serial: 06E7
Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/5997926C379C11EF8E435A66C4F9AE02.roa
Signing time: Wed 03 Jul 2024 07:17:43 +0000
ROA not before: Wed 03 Jul 2024 07:17:43 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 2914
IP address blocks: 103.3.167.0/24 maxlen: 24
117.120.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jul 2024 20:37:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1767 (0x6e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E
Validity
Not Before: Jul 3 07:17:43 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=6684fb16-295b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:84:87:c8:58:c4:b0:87:06:41:79:06:c5:
18:0f:7b:69:f5:b2:f3:74:5e:71:62:75:c7:d4:e2:
85:80:57:d6:96:84:51:fa:73:fd:7d:e6:12:55:cb:
96:0e:9b:b7:a6:bb:a7:35:9f:f9:e9:47:d6:0b:5e:
ef:90:43:b4:02:b4:45:5a:ae:80:b2:fa:88:96:27:
0c:46:63:d5:9b:fb:03:ba:7d:6d:89:2b:73:27:6e:
bc:e3:14:32:32:fd:26:a1:79:d4:e2:be:dc:72:fd:
04:55:2a:fa:a7:1b:13:c2:dd:20:a3:e4:5e:33:0e:
b5:1f:42:2f:ca:a7:4e:cd:46:4d:a3:45:b8:cb:ed:
51:ab:39:aa:55:5b:72:cc:66:a7:bf:be:eb:60:9f:
8c:e2:c3:2d:47:1c:f2:09:43:9c:84:00:bc:69:fc:
61:31:ae:ff:f7:46:93:2e:1b:47:95:0a:16:e3:2d:
f2:f3:7c:ac:ce:0c:5f:c7:30:6a:b3:ab:5d:05:d3:
29:9f:39:3e:bd:a5:c0:b1:8c:04:5f:48:e1:53:f4:
25:46:51:74:57:d5:f2:bd:b1:ee:0c:80:cd:fe:9b:
43:f6:21:ca:fe:04:ff:6e:4d:cd:9f:e9:55:d9:05:
7a:99:f3:ab:b4:d3:db:ea:e1:d6:5f:ed:35:ad:c9:
07:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:07:7C:D5:A3:3D:33:AC:22:62:7C:33:2F:4F:47:83:4B:86:4D:12
X509v3 Authority Key Identifier:
keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/5997926C379C11EF8E435A66C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.3.167.0/24
117.120.0.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:fd:b9:d3:ee:f3:90:cc:9f:5f:d2:c8:50:5e:74:9c:e1:1f:
c0:bc:70:4d:ca:44:ca:3b:63:f2:b3:eb:9e:ac:88:43:82:43:
a0:fa:7b:2e:05:ee:12:f1:32:29:77:8e:1b:0b:db:88:e4:5b:
b2:d8:8c:a0:c1:1f:e9:51:91:32:fe:22:10:f3:ae:11:9a:11:
1e:e3:ae:2b:54:0f:b8:6a:2f:6d:68:e4:53:47:b8:a0:c3:44:
88:82:7c:e1:fe:ab:ee:55:ca:ba:ac:67:a1:1a:62:c1:96:d5:
c3:3a:16:1f:42:28:5b:23:85:3c:c7:1a:90:d8:d5:90:fc:a5:
e8:62:b0:d8:82:20:28:e7:26:6b:7b:4e:91:90:b2:9e:21:24:
db:d6:68:f7:53:e9:15:67:67:30:70:8c:e4:bc:d9:cd:e6:16:
cc:73:fb:09:51:a6:d8:22:a3:46:ff:8a:17:6e:43:1d:35:23:
c5:c1:39:b4:fc:28:90:bc:70:d9:7c:6b:ac:c2:c0:6d:fb:87:
07:9f:72:8e:f1:1b:f0:9d:eb:92:b6:f1:c0:4e:f4:34:aa:ec:
e3:33:85:e1:db:94:b2:1e:33:0e:ad:63:5f:a5:22:88:b1:21:
ae:7d:5b:d5:ba:ad:67:e2:96:54:3a:15:17:86:29:f3:e1:0a:
40:4a:d2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 22:27:55 2024 by rpki-client on console-ams.rpki-client.org