Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/873A15DA140C11EB9204AC24C4F9AE02.roa
File: 873A15DA140C11EB9204AC24C4F9AE02.roa (raw, json)
Hash identifier: fRM0jqz5a9wFrUiEPAdykbnexHhjhgbm5yaWbMLGzlI=
Subject key identifier: 96:01:12:D0:67:CF:1A:2E:67:B5:FE:77:05:EF:F7:19:DC:0C:00:E7
Certificate issuer: /CN=A91FDFB7/serialNumber=EA51CE20A59E42B8C71D26AA6B886690CD152984
Certificate serial: 06E9
Authority key identifier: EA:51:CE:20:A5:9E:42:B8:C7:1D:26:AA:6B:88:66:90:CD:15:29:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/873A15DA140C11EB9204AC24C4F9AE02.roa
Signing time: Fri 31 May 2024 00:02:00 +0000
ROA not before: Fri 31 May 2024 00:02:00 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 10143
IP address blocks: 103.94.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 05:10:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1769 (0x6e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDFB7/serialNumber=EA51CE20A59E42B8C71D26AA6B886690CD152984
Validity
Not Before: May 31 00:02:00 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66591378-f0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:75:9f:a8:35:05:00:00:8a:67:3a:31:fd:98:
a9:d1:ad:6c:2b:ba:06:f6:4f:3a:1d:eb:3a:1e:75:
c7:90:6b:82:69:de:6e:b4:bf:41:35:38:41:a3:f4:
c3:2f:b1:03:3f:a1:7b:46:82:38:75:21:18:ba:a1:
56:7d:1d:c7:ec:0e:e6:47:93:6a:27:12:7b:52:d9:
a4:25:ce:8b:3c:cf:5d:84:39:42:15:9d:d3:1d:4c:
dc:c2:5e:fb:11:18:6e:c1:0c:56:04:50:90:9c:fb:
4e:91:4e:20:c5:15:7d:b4:7d:d3:1e:71:5a:55:fb:
85:7d:be:f7:b6:2f:4d:5d:c3:55:5b:7d:2e:50:c0:
98:55:3a:50:94:c9:3b:17:29:02:fa:ef:32:0e:49:
d0:df:21:20:2a:d9:ce:8c:30:c2:e3:91:23:c7:38:
99:ca:fd:d1:3e:3e:ec:43:f1:e7:3b:91:73:b2:e4:
f2:d8:7b:95:04:e0:94:aa:46:bb:8a:2a:77:fd:f6:
ae:1d:27:81:e8:06:d8:ea:be:a5:b2:c6:4d:11:58:
7c:e2:50:68:eb:fc:03:43:0f:10:c2:db:95:6d:8c:
2b:d3:7c:d5:79:77:c3:3c:9e:01:a9:b7:c9:ec:8f:
72:e6:92:c9:06:b0:02:6b:30:71:7c:ac:95:5d:8c:
85:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:01:12:D0:67:CF:1A:2E:67:B5:FE:77:05:EF:F7:19:DC:0C:00:E7
X509v3 Authority Key Identifier:
keyid:EA:51:CE:20:A5:9E:42:B8:C7:1D:26:AA:6B:88:66:90:CD:15:29:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/873A15DA140C11EB9204AC24C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.94.62.0/24
Signature Algorithm: sha256WithRSAEncryption
73:03:98:71:84:b6:20:69:a0:d0:53:90:75:91:eb:7d:e8:3d:
93:25:7e:28:3e:51:fe:11:4a:62:86:b0:85:a5:e6:32:ae:f5:
d9:94:e1:f9:09:bf:e5:0c:17:f0:4d:b2:52:1a:ab:bc:ed:3a:
b9:fc:a6:9c:93:92:df:f0:72:fd:af:9a:76:d8:c5:03:7e:02:
bb:18:c6:5c:b0:58:f7:48:ea:dd:e7:19:01:45:69:96:1b:ed:
3d:1c:12:2d:e3:c9:4e:cd:5c:0b:fc:02:5d:1a:56:8a:c3:b3:
be:1f:9d:22:73:46:51:33:4a:7b:f4:c0:77:c3:58:84:08:d3:
ce:e0:df:be:e8:9a:d3:f1:7b:18:2f:e7:f9:12:d7:99:31:07:
49:c3:e2:ea:2a:95:a7:11:dc:43:be:ae:5a:8c:0d:4a:63:bb:
1d:47:27:b7:9e:27:35:62:bb:d7:4d:e8:47:80:0e:dc:1e:1d:
31:c8:78:00:9b:c8:96:69:f6:9b:03:fc:94:96:5e:7e:5d:81:
a6:ad:25:ce:64:41:a2:07:97:a2:11:10:75:4f:32:52:05:78:
10:b6:93:6e:16:0b:c5:55:5b:e8:86:68:2f:01:ec:5f:bb:28:
ae:31:18:a6:ef:f0:e7:67:87:96:87:4b:81:1c:b9:87:b9:cf:
2c:d3:9f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:38:00 2024 by rpki-client on console-fra.rpki-client.org