Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/3430A42E01E711EDB2C82D0FC4F9AE02.roa
File: 3430A42E01E711EDB2C82D0FC4F9AE02.roa (raw, json)
Hash identifier: Z3wHg0UuYuLm0nqnohTVvKyFnUldmMhCETtmA2WvNO4=
Subject key identifier: 80:98:BC:FD:DE:E2:91:EA:A1:4F:04:A0:D8:F7:65:10:A3:9D:21:23
Certificate issuer: /CN=A9111F34/serialNumber=460FA8FAFFC8BE409EC2BDF8463705863A45E8E8
Certificate serial: 01D6
Authority key identifier: 46:0F:A8:FA:FF:C8:BE:40:9E:C2:BD:F8:46:37:05:86:3A:45:E8:E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg-o-v_IvkCewr34RjcFhjpF6Og.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/3430A42E01E711EDB2C82D0FC4F9AE02.roa
Signing time: Wed 01 May 2024 05:07:25 +0000
ROA not before: Wed 01 May 2024 05:07:25 +0000
ROA not after: Thu 29 Aug 2024 00:00:00 +0000
asID: 135602
IP address blocks: 103.227.57.0/24 maxlen: 24
103.227.58.0/24 maxlen: 24
103.227.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 02:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470 (0x1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111F34/serialNumber=460FA8FAFFC8BE409EC2BDF8463705863A45E8E8
Validity
Not Before: May 1 05:07:25 2024 GMT
Not After : Aug 29 00:00:00 2024 GMT
Subject: CN=6631ce0d-c9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d8:1e:69:db:5e:9f:a7:05:ad:b2:b8:04:3f:
b7:92:0a:07:d6:bc:95:27:58:ac:2f:e5:92:11:65:
67:8b:a4:0d:42:58:25:2b:ac:44:74:a5:ea:43:32:
41:e1:a6:a0:b1:21:47:fb:08:15:5d:24:01:cf:9e:
ef:50:af:81:58:00:5f:56:11:14:4b:82:d9:8d:b6:
b1:4f:fe:8e:38:07:60:4d:93:19:19:80:a1:0f:72:
51:cf:64:d8:ac:a8:37:72:d0:14:cd:b5:b3:da:0f:
96:08:a4:e1:43:1c:90:f5:5a:d3:f4:ed:e8:6e:f5:
22:57:fa:60:af:6e:2f:9d:b3:7e:52:1c:78:96:86:
1f:59:ed:b5:4f:42:96:35:bf:03:54:51:b6:1d:f0:
78:d9:bf:92:9e:c6:15:e1:c6:d1:d7:1c:ab:9a:bc:
51:d0:f4:23:8c:62:1a:d6:5c:ba:bb:e8:d5:68:a8:
e7:eb:2d:2e:e8:70:1e:b8:da:d5:e3:00:87:80:46:
18:31:90:dd:b6:17:95:90:90:f5:17:86:64:3d:15:
3f:fc:4e:01:f0:1d:d1:e3:8a:75:73:e7:40:8f:be:
99:da:a8:9d:53:fd:dd:92:9d:1c:bb:ca:69:08:35:
ff:8b:5e:be:28:6b:82:8d:4f:0b:5c:c8:97:38:83:
61:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:98:BC:FD:DE:E2:91:EA:A1:4F:04:A0:D8:F7:65:10:A3:9D:21:23
X509v3 Authority Key Identifier:
keyid:46:0F:A8:FA:FF:C8:BE:40:9E:C2:BD:F8:46:37:05:86:3A:45:E8:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/Rg-o-v_IvkCewr34RjcFhjpF6Og.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg-o-v_IvkCewr34RjcFhjpF6Og.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/3430A42E01E711EDB2C82D0FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.227.57.0-103.227.59.255
Signature Algorithm: sha256WithRSAEncryption
c5:2b:20:01:5b:f2:6e:6e:e1:49:7f:be:20:59:2f:b1:40:f3:
8c:81:13:40:72:03:4d:c7:96:fa:f2:76:7f:cc:c0:ed:4a:0e:
12:9d:b0:78:04:f3:97:cd:95:39:98:6b:b5:e3:23:3c:ed:60:
7e:82:fa:7b:0b:67:2d:db:c1:39:31:e0:55:31:f2:ec:e3:0d:
1a:69:ac:9e:4f:f4:c0:93:fd:6d:2b:6f:8b:ad:53:4f:28:86:
cd:d0:52:12:c7:67:c5:4f:ff:5d:09:a0:50:32:f2:1e:be:2f:
a3:a9:e0:01:51:bb:a0:1e:31:a6:a0:13:34:14:bf:89:13:fb:
c2:fe:7a:e9:c6:20:0f:4f:c2:b3:49:24:e8:9e:3b:1d:de:fd:
4e:96:90:0a:8a:09:25:e3:13:07:a3:2c:91:be:95:0c:7f:60:
08:7a:8e:a8:d3:5a:2c:dc:32:c1:a9:6e:00:f4:b4:c7:0d:d3:
71:83:20:17:74:f8:91:1a:de:1a:ec:c5:bd:ad:73:a3:15:1c:
af:9f:1f:bf:bb:e4:89:9c:db:3b:e3:b8:d7:be:a6:52:4f:7c:
7e:f7:ab:4b:fc:1b:9c:24:c0:06:82:43:d1:54:f2:38:0a:83:
83:58:36:19:0d:31:09:9b:ab:d7:41:46:f6:01:b4:32:50:4c:
88:dc:44:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 04:36:19 2024 by rpki-client on console-fra.rpki-client.org