Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e203631333137.roa
File: 3130332e3233382e3132382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: +2PPAFSrEL+tAdtsTgmSh5jngvsWjpZ1tLCWNJiSZuo=
Subject key identifier: E5:46:A1:64:E1:32:4C:A3:65:08:16:8E:3D:DA:61:A8:C9:C9:51:A9
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 0D52EE768D3FDCC88CFADC2C4F3DC09AE4D10D91
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e203631333137.roa
Signing time: Thu 11 Jan 2024 06:59:43 +0000
ROA not before: Thu 11 Jan 2024 06:54:43 +0000
ROA not after: Thu 09 Jan 2025 06:59:43 +0000
asID: 61317
IP address blocks: 103.238.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 16:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:52:ee:76:8d:3f:dc:c8:8c:fa:dc:2c:4f:3d:c0:9a:e4:d1:0d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Validity
Not Before: Jan 11 06:54:43 2024 GMT
Not After : Jan 9 06:59:43 2025 GMT
Subject: CN=E546A164E1324CA36508168E3DDA61A8C9C951A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:78:0e:68:d8:bd:4f:a4:00:0f:45:d1:f5:29:
1d:42:79:77:ee:a5:d0:b8:58:4f:d4:21:c4:dd:05:
b1:e1:db:1d:af:18:f7:e6:db:16:ea:cb:9f:c9:98:
09:d9:5f:cb:00:c2:f7:e4:84:52:95:51:bf:ab:fa:
46:a5:8d:6d:36:41:44:1d:54:3a:42:b1:19:6d:5f:
32:46:dc:7e:3d:c9:33:6f:70:ed:d7:16:ef:3d:05:
c5:6a:7f:dc:11:52:05:1b:21:92:fc:43:c1:cb:0c:
16:b8:7c:3a:95:c7:36:3e:20:38:31:fb:9e:e8:81:
b5:90:9a:a1:e8:4c:cb:1c:c1:41:0e:36:80:49:00:
a3:d8:96:cb:d0:a5:24:5e:64:e9:f2:7e:07:a1:9d:
42:89:74:c5:20:54:5a:b9:37:38:bc:3a:8e:11:af:
72:0c:89:38:ac:2e:d0:49:10:77:12:a8:87:5b:0a:
26:f7:01:c6:38:16:a4:9c:b1:07:f4:50:a4:eb:43:
f8:20:c6:21:44:4a:3f:4a:73:cd:f0:7f:11:54:9c:
27:79:ea:00:be:44:75:56:89:3f:dc:49:5b:96:aa:
9f:c0:e6:30:54:b2:25:59:2a:07:92:62:61:28:c2:
c0:b7:19:15:ef:63:b2:2f:2e:53:44:7a:1c:19:88:
67:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:46:A1:64:E1:32:4C:A3:65:08:16:8E:3D:DA:61:A8:C9:C9:51:A9
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.128.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:fd:69:d4:1e:6f:ec:6e:0a:e2:86:7d:d9:1f:08:1d:cc:d4:
3a:ed:45:2a:c1:ba:60:c7:0d:df:4a:be:c6:47:2e:d5:ab:04:
2c:31:3b:b5:2b:39:67:17:20:e6:0e:ac:9e:f5:57:06:29:90:
e1:34:98:cc:35:4f:e7:d1:2d:f0:56:5b:81:c9:2c:b3:64:43:
c6:ad:80:1f:45:ec:93:5b:f0:81:97:8a:bd:47:55:05:1c:82:
45:a3:6e:d8:97:ad:56:7a:68:63:7a:b3:b2:5d:73:f9:35:20:
6d:76:1e:4a:ca:67:79:9c:8e:39:39:b3:3b:64:5f:d0:d1:80:
a0:f1:2e:95:3b:59:63:27:22:09:1d:8b:cb:38:17:ae:c2:18:
2b:21:5d:30:59:49:3f:37:42:93:fa:82:53:32:23:7e:7f:25:
f8:51:35:c6:56:cb:c7:7f:85:d2:9e:1c:31:0b:63:02:05:a7:
92:72:37:fd:95:51:fa:7c:b1:58:59:3c:db:89:22:40:4b:3c:
cb:57:1b:2f:45:d3:c0:11:03:83:56:61:f8:8c:3c:5d:49:30:
4e:a3:b7:b5:34:67:ef:f4:d9:a6:0a:8a:ee:20:a0:12:a4:4c:
c8:19:59:69:58:93:84:da:43:8b:1b:20:4b:c2:90:48:7c:f4:
ba:1a:8a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 20:57:27 2024 by rpki-client on console-ams.rpki-client.org