Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/0FB333E6AA1011EE9E1B2978C4F9AE02.roa
File: 0FB333E6AA1011EE9E1B2978C4F9AE02.roa (raw, json)
Hash identifier: 0d+VIKoHzPg20RKs+SvHaOuxxWidW/HSi28p+AGyPM8=
Subject key identifier: 8A:8E:6F:5D:C1:8D:61:FC:99:BE:7C:33:93:6E:6D:5C:95:84:1F:A8
Certificate issuer: /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Certificate serial: 01B9
Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/0FB333E6AA1011EE9E1B2978C4F9AE02.roa
Signing time: Wed 03 Jan 2024 08:14:06 +0000
ROA not before: Wed 03 Jan 2024 08:14:06 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 20473
IP address blocks: 103.190.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 06:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Validity
Not Before: Jan 3 08:14:06 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=6595174d-4adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ea:6a:d2:99:bd:97:74:2f:99:b1:74:cd:f6:
b2:eb:42:41:c1:36:fb:bd:c8:e1:0d:30:6f:b1:3a:
a9:2b:94:32:7c:ed:8d:88:70:5a:e4:8c:37:79:1e:
db:61:35:a6:68:7b:d6:45:b7:ef:b3:b1:fe:f4:3e:
f0:6e:c6:69:9b:0c:2e:1e:cf:b1:8e:da:12:5e:96:
2d:1c:de:79:54:dc:c3:86:51:50:b8:1c:13:68:2e:
97:6a:cf:64:27:47:94:59:84:e4:61:ed:dc:83:c1:
cd:23:8a:0a:53:87:75:8a:f3:23:d8:89:27:fb:40:
5a:40:14:5c:d1:1b:d4:70:64:4e:fd:62:10:6a:54:
88:e7:7c:38:2c:00:ce:d6:36:56:e6:5f:91:0c:ec:
7c:37:5c:96:43:af:d6:dc:d2:75:2f:51:e4:a6:45:
5f:9b:f5:9e:c7:0b:ad:1b:91:22:d4:c7:92:b2:a2:
c2:ea:5f:ec:42:9a:78:c4:16:d6:d1:bb:26:d7:fb:
05:84:f3:d0:7a:55:c7:ce:96:35:a2:eb:68:f5:14:
a4:ac:32:3c:18:5b:df:30:71:61:68:6f:d9:67:5a:
3a:f5:dd:8f:35:d2:db:14:4b:45:8f:7f:bb:c4:b4:
9a:cd:12:b3:7a:c5:5a:8d:fc:bb:ce:66:1d:fe:37:
96:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8E:6F:5D:C1:8D:61:FC:99:BE:7C:33:93:6E:6D:5C:95:84:1F:A8
X509v3 Authority Key Identifier:
keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/0FB333E6AA1011EE9E1B2978C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.190.102.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:2f:94:89:f8:1d:31:9c:9d:10:65:a1:94:29:a5:6f:71:5d:
41:dd:9c:f9:d0:d2:b0:01:6b:8c:e8:42:dd:0e:b3:ae:1c:f8:
83:13:d6:b1:cb:0e:98:30:02:8c:03:d2:c8:f7:f3:50:97:f2:
40:7e:f7:d1:79:b1:fd:a0:23:68:83:5c:37:75:14:26:08:b6:
54:6f:8b:74:4a:67:38:08:48:1a:cd:4a:d2:1b:32:e8:cd:dd:
d6:56:d6:48:a9:f1:50:09:32:13:47:03:f6:39:bc:23:db:84:
2f:a3:1c:0d:62:44:ca:43:81:c4:9b:a2:72:b0:49:3d:9e:df:
cc:05:76:4a:81:4b:d4:88:28:50:2b:bf:3d:a1:29:c5:b1:16:
52:fb:46:83:e8:89:2a:7e:b6:17:da:70:40:13:d8:fa:34:5b:
26:38:81:75:1d:34:14:06:a3:4e:e6:9f:aa:ae:dd:59:87:72:
d4:99:0c:7e:57:48:c9:b3:77:d9:a4:df:60:48:12:c7:12:90:
9e:95:b1:b6:4f:dd:01:a0:3b:a8:17:22:99:82:be:4c:0d:ba:
39:fc:12:bd:53:85:6b:b2:8b:ea:ac:d4:dd:fc:bb:a6:06:17:
67:cf:ed:f9:51:c7:08:25:33:a0:28:e3:3c:d7:0b:d8:0b:a6:
9f:02:7f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 06:53:35 2024 by rpki-client on console-fra.rpki-client.org