Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/436594DA24C311EFB4027909C4F9AE02.roa
File: 436594DA24C311EFB4027909C4F9AE02.roa (raw, json)
Hash identifier: JP6COe6BwgjWIJILxY1Iu01mVGqCVxTujSW+rkPYfoE=
Subject key identifier: F1:1F:F7:03:67:C5:C4:67:3B:07:F5:AF:6B:BA:8D:62:18:76:19:3D
Certificate issuer: /CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Certificate serial: 03CC
Authority key identifier: 11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/436594DA24C311EFB4027909C4F9AE02.roa
Signing time: Fri 07 Jun 2024 11:44:14 +0000
ROA not before: Fri 07 Jun 2024 11:44:14 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 204174
IP address blocks: 103.177.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jun 2024 13:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 972 (0x3cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Validity
Not Before: Jun 7 11:44:14 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=6662f28e-a25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:23:70:ca:47:a2:c9:5c:a3:b2:d0:7e:71:
78:ac:9d:dd:57:4e:e2:61:5f:ce:49:d1:61:a0:17:
80:87:8b:74:3f:df:86:15:fb:f8:9d:9f:fe:c0:66:
1a:df:77:52:67:e7:c1:db:80:7e:c0:15:35:98:89:
01:9f:26:ed:b5:3f:ab:8c:8a:83:78:53:eb:04:62:
26:1a:28:ad:0e:c6:ee:69:b5:10:db:72:2d:83:6e:
f0:0b:f4:e2:7c:fa:eb:b9:bf:f8:c2:30:4b:9a:6a:
12:93:0f:0b:58:c1:d5:d0:dc:61:fe:7f:44:e0:7d:
ff:00:9e:13:c7:01:bd:46:1a:44:5f:05:14:09:9a:
27:0a:80:49:c6:59:9c:a0:b5:ad:7c:dc:21:e7:4a:
41:fc:51:83:f3:90:4d:d7:09:de:c3:26:f5:70:c8:
3b:10:6d:7a:ef:1e:72:a6:b3:5f:00:a7:5f:8b:f5:
1a:57:a9:c6:6d:db:38:55:a8:cc:db:d8:08:a9:74:
da:3f:e7:dc:b0:38:88:ed:78:40:a5:76:d3:9e:e4:
99:02:2d:9f:15:04:96:c8:81:62:cc:1d:89:95:2f:
1d:3f:3f:68:f1:c6:89:9a:6f:71:7c:80:8e:39:67:
55:56:b7:50:35:39:84:cc:8c:d8:05:14:5d:1c:3b:
0b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1F:F7:03:67:C5:C4:67:3B:07:F5:AF:6B:BA:8D:62:18:76:19:3D
X509v3 Authority Key Identifier:
keyid:11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/436594DA24C311EFB4027909C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.44.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:f9:76:b3:5f:72:51:e4:38:38:90:52:e2:0f:0d:7f:56:24:
d7:70:98:1e:e6:58:c5:3d:3d:92:00:48:4e:be:84:66:b8:b3:
c8:37:fa:0d:73:88:2d:2e:77:a1:9c:43:7e:64:3b:1e:89:b3:
87:23:f8:6e:4e:67:5c:11:0c:4d:bc:a5:42:92:dd:a3:a0:03:
3b:a3:a8:75:48:eb:1b:6b:b8:36:ae:98:f9:14:7d:b2:1a:eb:
26:5f:96:db:85:02:ed:0e:dc:07:7a:cb:76:fb:28:42:ff:6e:
55:27:51:f0:20:99:5d:01:27:5b:92:e6:ba:b7:28:75:a0:6e:
0a:82:01:e5:27:72:27:2d:54:71:66:e7:11:8a:53:01:e2:77:
9e:0a:e6:8a:0a:75:e9:c4:9f:6d:d0:97:08:62:f9:2b:42:de:
f1:bd:c3:82:ef:1b:5a:c4:07:5b:5b:f8:0d:f3:04:e5:60:a2:
db:75:c9:2d:dc:7f:8b:9b:5b:02:7f:2b:6b:80:fb:3e:f2:91:
74:84:06:69:b0:d5:53:b8:71:e1:70:60:91:38:fd:59:c8:65:
36:37:61:b8:49:51:86:c1:a0:8a:17:45:f8:76:c9:50:ce:27:
2c:e6:56:cc:d5:b6:67:81:bb:c8:28:86:50:4d:53:3a:74:ff:
1c:1d:07:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 18:13:00 2024 by rpki-client on console-ams.rpki-client.org