Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/34C3AF9E01E711EDB2C82D0FC4F9AE02.roa
File: 34C3AF9E01E711EDB2C82D0FC4F9AE02.roa (raw, json)
Hash identifier: NLJYINXqPSTxYj64unfdQaagTngIjzCUufCjIBP7+Kk=
Subject key identifier: 69:B9:99:0D:0E:9F:AD:24:49:BD:9A:AD:83:F7:E5:05:C7:3C:3B:47
Certificate issuer: /CN=A9111F34/serialNumber=460FA8FAFFC8BE409EC2BDF8463705863A45E8E8
Certificate serial: 01D7
Authority key identifier: 46:0F:A8:FA:FF:C8:BE:40:9E:C2:BD:F8:46:37:05:86:3A:45:E8:E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg-o-v_IvkCewr34RjcFhjpF6Og.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/34C3AF9E01E711EDB2C82D0FC4F9AE02.roa
Signing time: Wed 01 May 2024 05:07:26 +0000
ROA not before: Wed 01 May 2024 05:07:26 +0000
ROA not after: Thu 29 Aug 2024 00:00:00 +0000
asID: 17483
IP address blocks: 103.227.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 02:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471 (0x1d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111F34/serialNumber=460FA8FAFFC8BE409EC2BDF8463705863A45E8E8
Validity
Not Before: May 1 05:07:26 2024 GMT
Not After : Aug 29 00:00:00 2024 GMT
Subject: CN=6631ce0d-5520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:88:05:b9:64:d0:42:b8:7e:bf:f9:76:a4:
b1:35:d7:b4:1a:96:69:71:6c:2e:41:c8:81:f2:ea:
97:f8:6f:bd:2d:57:0f:bb:d4:78:7c:29:da:d5:4f:
b2:16:93:1d:c4:74:de:6f:8d:6a:56:64:a0:4b:48:
b1:66:11:09:c8:3f:33:4b:a0:6c:ae:8f:2f:1d:fa:
01:70:17:ab:9b:a4:55:7b:74:af:36:aa:f5:b5:d0:
8c:51:5b:ce:23:df:75:9e:54:54:1d:4b:d0:3e:58:
3d:d1:6b:43:1d:ad:ee:84:8f:e6:9f:18:73:15:dd:
d9:6e:a1:61:56:5b:a6:a7:38:74:40:dd:54:d4:9e:
7c:f6:d8:ee:dd:74:8d:1e:58:53:d9:d3:9f:9f:14:
0a:16:0a:95:0e:07:4e:e0:3e:a1:89:e0:28:e3:ac:
3b:3c:ac:be:14:c0:bb:eb:bb:e4:9a:c5:a4:4b:be:
95:61:9a:c5:3a:58:6f:35:fa:9c:24:28:27:9b:4e:
77:e6:c6:fa:2e:c2:77:2d:bd:be:74:e4:cd:16:c4:
68:df:a7:8c:99:8d:44:cc:6c:0a:74:fa:86:3e:32:
f1:91:5a:1a:ae:d2:a9:22:f9:65:d7:0a:77:b4:00:
18:36:44:25:01:b3:45:20:4d:ce:6e:99:f0:7e:60:
a0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B9:99:0D:0E:9F:AD:24:49:BD:9A:AD:83:F7:E5:05:C7:3C:3B:47
X509v3 Authority Key Identifier:
keyid:46:0F:A8:FA:FF:C8:BE:40:9E:C2:BD:F8:46:37:05:86:3A:45:E8:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/Rg-o-v_IvkCewr34RjcFhjpF6Og.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg-o-v_IvkCewr34RjcFhjpF6Og.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/34C3AF9E01E711EDB2C82D0FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.227.56.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:64:17:15:63:12:48:6b:3e:ef:30:6d:02:11:fb:12:04:fe:
90:fa:bb:ec:a3:c8:ad:c6:a1:19:88:a9:59:79:06:f1:63:cc:
d9:74:6b:e6:a2:fa:c7:e6:3d:0b:9f:82:e6:52:61:f1:51:c3:
b3:f4:84:4c:f9:2d:f2:20:2d:88:f7:e0:83:70:5f:ac:6f:4a:
e7:e9:04:d3:cf:a7:69:38:8b:f2:c5:0a:36:e2:99:40:0b:d0:
08:57:7d:7b:b3:54:65:56:32:7c:ae:c4:be:fe:29:a5:2d:c6:
87:1a:fc:7c:5a:d8:e8:d6:d0:6c:51:75:72:26:fb:93:3f:59:
78:84:76:65:6c:7b:47:c2:34:6b:5a:fa:be:77:f0:26:11:f1:
c5:ca:8d:cc:08:6f:2a:d0:7b:58:61:de:4c:6f:62:d6:ef:10:
f8:64:83:0b:11:03:64:05:2d:80:b6:92:98:e8:bc:3c:d7:d7:
ca:e9:39:98:1f:e0:13:ab:0c:a9:e4:29:e3:69:fe:cc:b5:20:
0f:ff:33:dc:d4:83:74:83:fc:d7:f2:3e:98:b3:b8:b9:68:62:
be:81:c7:5e:63:29:b8:d9:5d:18:86:89:cc:4d:9e:d9:f6:bd:
65:18:97:d0:22:33:2b:09:74:36:13:5b:65:68:62:2e:ab:6c:
8a:5e:61:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 04:36:19 2024 by rpki-client on console-fra.rpki-client.org