Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/EF980EA6140D11EBB0DCE540C4F9AE02.roa
File: EF980EA6140D11EBB0DCE540C4F9AE02.roa (raw, json)
Hash identifier: oIaFwpDyfwgsUddbOthZhrpds1m0PnOfdLNv2bQkD0E=
Subject key identifier: 4F:04:98:DD:C4:61:0D:7C:2E:B3:BC:0F:20:3F:73:2D:D9:5C:53:84
Certificate issuer: /CN=A91FDFB7/serialNumber=EA51CE20A59E42B8C71D26AA6B886690CD152984
Certificate serial: 06EE
Authority key identifier: EA:51:CE:20:A5:9E:42:B8:C7:1D:26:AA:6B:88:66:90:CD:15:29:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/EF980EA6140D11EBB0DCE540C4F9AE02.roa
Signing time: Fri 31 May 2024 00:02:07 +0000
ROA not before: Fri 31 May 2024 00:02:07 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 38195
IP address blocks: 103.94.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 05:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1774 (0x6ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDFB7/serialNumber=EA51CE20A59E42B8C71D26AA6B886690CD152984
Validity
Not Before: May 31 00:02:07 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6659137f-26ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:dd:01:83:bc:67:5e:5f:92:12:7f:e4:7a:60:
7b:5f:29:ee:e1:16:7b:22:eb:5c:b9:86:0d:36:f6:
9c:d9:cc:5d:8d:3a:0d:5a:f0:0c:ea:4e:ba:fe:76:
67:a4:40:49:38:ed:1b:f3:78:8a:32:6f:3e:06:0b:
24:2f:1a:76:33:8d:dc:9a:bb:29:9d:0f:64:4a:ba:
97:e2:2e:5a:6d:14:8a:d1:8c:be:b6:94:86:65:31:
f3:3f:b3:27:78:36:ca:3f:7e:3c:5b:00:92:03:4b:
ea:94:87:c8:31:71:a9:75:d7:84:3d:34:38:bc:2b:
82:88:a2:b3:27:29:f5:28:ba:85:43:c3:6c:96:6b:
1b:87:fe:94:f9:37:43:41:b5:66:02:9e:bd:3f:d0:
85:55:d1:30:9c:89:f0:5e:d5:9e:d6:82:f4:9a:77:
f3:23:77:ae:77:94:a4:52:73:a2:f1:ba:a8:98:a7:
05:56:10:73:52:70:62:1d:9e:4f:50:03:e0:7e:36:
47:31:ac:71:aa:cf:c8:ee:3a:a3:a9:79:f7:a5:9c:
57:33:ae:97:cb:c1:d6:a0:61:30:1d:1f:d8:1e:47:
40:87:03:1e:70:8d:a2:ab:83:12:66:dc:d3:2c:a1:
03:40:98:17:1c:2d:7d:4b:60:de:80:89:78:9d:fa:
97:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:04:98:DD:C4:61:0D:7C:2E:B3:BC:0F:20:3F:73:2D:D9:5C:53:84
X509v3 Authority Key Identifier:
keyid:EA:51:CE:20:A5:9E:42:B8:C7:1D:26:AA:6B:88:66:90:CD:15:29:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/EF980EA6140D11EBB0DCE540C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.94.63.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:25:e2:da:a1:c2:76:37:08:19:a3:2c:7a:22:72:e0:49:66:
66:65:91:b8:9d:20:b3:c2:28:ad:f9:4c:ec:ee:4f:15:8f:08:
a9:20:34:39:98:4a:30:db:e0:64:d1:fa:d3:6e:9c:95:28:29:
e6:3f:61:9c:68:84:51:db:df:50:9a:06:1f:19:bd:99:3d:df:
92:48:99:1e:e2:13:74:bf:fe:e1:de:6b:d6:c7:58:45:4d:88:
28:38:7d:ab:80:71:18:1d:19:13:6c:c9:50:6e:91:17:29:5e:
f9:5f:8c:17:37:6e:c9:b8:cc:25:06:7c:4f:27:a4:75:0d:9f:
25:b5:72:63:f3:e7:12:63:2d:e9:73:8b:f7:6c:ab:43:ef:fe:
2d:b0:6b:e3:63:4e:9e:c7:d6:1d:76:7c:7b:5f:a5:62:bb:66:
bc:d9:e3:2d:64:0e:da:f8:89:10:9b:36:25:1b:eb:95:3c:e5:
7c:ee:8d:5d:95:01:04:ee:9a:34:31:80:03:9e:79:8c:c9:52:
8d:91:e0:bd:c2:d7:2a:e3:3a:b5:aa:f8:d4:71:ac:8d:2c:97:
1d:d2:15:5c:65:e7:a2:ba:10:85:ce:55:9d:94:16:85:ff:43:
6b:0d:09:6c:07:31:3a:8d:c6:56:49:80:e6:ab:24:23:dd:64:
d6:1f:5b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:38:01 2024 by rpki-client on console-fra.rpki-client.org