Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/55CF919AF0AF11EE889B2B60C4F9AE02.roa
File: 55CF919AF0AF11EE889B2B60C4F9AE02.roa (raw, json)
Hash identifier: IBsZVKFGc+PIwOHp42TSjWT8vse/tZrFOaXZXP8Wt/E=
Subject key identifier: 73:95:74:3F:80:1C:48:AC:89:69:9B:86:85:72:DE:F4:CF:93:24:27
Certificate issuer: /CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Certificate serial: 03A6
Authority key identifier: 11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/55CF919AF0AF11EE889B2B60C4F9AE02.roa
Signing time: Tue 02 Apr 2024 05:10:35 +0000
ROA not before: Tue 02 Apr 2024 05:10:35 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 137897
IP address blocks: 103.177.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 03:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 934 (0x3a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Validity
Not Before: Apr 2 05:10:35 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=660b934a-38fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:03:96:6c:08:9f:9d:c6:b7:1b:06:0b:35:5b:
2e:a5:10:7f:7c:f1:38:38:b5:4b:c3:cf:6e:5b:f0:
c0:ea:49:5f:a9:a0:97:1f:93:13:74:a7:d1:83:a4:
7e:00:d0:6c:06:18:46:8b:00:1d:95:8d:7a:64:cb:
42:e4:14:4f:5c:3c:e3:20:b9:44:e5:a8:18:d4:43:
aa:91:df:72:23:8a:a3:3b:0b:a1:70:01:07:e7:00:
67:e4:71:ca:93:5a:94:6c:49:28:a5:29:3e:95:5c:
23:e1:b3:e5:de:05:95:8a:e0:f2:b4:72:ef:15:1e:
c3:35:89:90:c4:1a:32:53:29:aa:4c:10:54:01:ea:
3a:a8:b0:2a:cf:f0:c8:c1:9c:cc:ae:04:1a:c9:4c:
7b:9c:b5:b7:11:f3:2f:11:27:bc:c4:da:76:af:ff:
db:34:75:65:53:ec:2f:40:6d:cf:e0:1e:41:43:2c:
08:15:d3:b8:26:18:95:1d:fb:92:55:53:b4:b7:66:
39:48:17:1f:3c:f9:35:f7:3b:78:da:0a:d4:81:e9:
26:c8:1f:a9:1c:fa:a4:10:3e:a5:cc:5d:f4:f0:dc:
ad:37:40:3b:4d:8e:d5:c0:4e:d6:48:87:31:67:50:
09:02:74:38:97:5a:ac:d8:21:fb:22:eb:44:31:ae:
74:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:95:74:3F:80:1C:48:AC:89:69:9B:86:85:72:DE:F4:CF:93:24:27
X509v3 Authority Key Identifier:
keyid:11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/55CF919AF0AF11EE889B2B60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.44.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:3f:b8:a5:59:5d:46:ff:ed:39:0e:6c:97:e9:1a:fa:9c:56:
e3:a4:46:23:f5:b1:be:05:3a:66:2d:d0:ed:30:85:00:17:20:
66:ec:8d:3a:86:55:ee:be:e8:d2:d1:3b:3a:83:5b:d9:ab:12:
ff:68:5f:98:d4:be:9c:b1:6c:84:71:34:f1:30:ca:d5:62:00:
d2:92:36:47:71:a7:be:36:8c:a8:d0:50:c1:22:82:fc:58:93:
ce:0a:84:7c:75:f9:73:85:0f:49:02:fb:f9:49:f9:e5:81:68:
09:ad:40:51:f0:7c:e0:a3:39:bb:89:e0:81:08:93:f9:b1:7a:
24:8b:43:7c:a3:0a:83:04:29:1f:20:93:49:54:cd:04:fb:0d:
92:02:69:7a:c3:fd:ae:d8:d4:57:eb:23:47:22:35:ed:20:ed:
38:75:12:87:06:d9:8b:a3:a1:f4:f2:00:6f:31:18:bf:8b:f0:
ee:e0:12:50:cb:49:ab:70:78:85:d4:c8:bb:8e:3f:a6:0f:43:
98:fc:d1:25:4d:b9:8b:75:15:41:0b:e8:b5:c5:b0:e2:0b:2c:
40:06:bc:53:ba:64:25:88:c6:e4:2a:63:e6:73:85:fb:37:74:
59:fe:46:11:c5:d8:4e:7f:14:0d:81:29:f2:af:e8:e2:5a:e0:
1a:35:75:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 06:05:29 2024 by rpki-client on console-ams.rpki-client.org