Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/EF2D0AB84BC611EEBFFD4D71C4F9AE02.roa
File: EF2D0AB84BC611EEBFFD4D71C4F9AE02.roa (raw, json)
Hash identifier: aKnxB1apnusneHix+HiEWil1HmpCNUx8I3Or8utuGHg=
Subject key identifier: DC:58:2E:53:3D:93:6F:D4:C8:5C:D1:FF:F7:DE:B5:92:25:04:44:89
Certificate issuer: /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Certificate serial: BB
Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/EF2D0AB84BC611EEBFFD4D71C4F9AE02.roa
Signing time: Wed 15 May 2024 06:40:54 +0000
ROA not before: Wed 15 May 2024 06:40:54 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 134489
IP address blocks: 103.69.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Oct 2024 05:58:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Validity
Not Before: May 15 06:40:54 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=664458f6-a82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:f3:d1:24:6b:0a:6c:55:74:0a:2f:3c:69:
eb:ce:ec:7e:6e:44:72:ee:01:24:c0:7b:9c:80:78:
91:80:b9:28:0c:6a:ee:ca:4e:c3:5e:a5:a6:3d:34:
ce:72:53:a6:46:ef:f0:1e:25:dc:38:48:54:40:ac:
a2:5c:ce:2d:61:ea:a2:4a:51:fc:e0:a2:f9:b1:8b:
88:a5:14:d2:a8:5f:0a:db:e7:74:ff:b5:95:db:91:
9b:5a:33:60:f6:96:e0:18:7e:fa:e1:46:80:5a:e4:
8b:9f:11:59:0d:57:91:ff:9c:be:92:89:88:d1:a5:
ee:e6:94:ce:dd:89:da:fc:ca:46:e4:c3:b4:d7:02:
82:1f:54:90:b3:82:49:d8:91:ec:a3:4b:7a:cc:09:
d2:10:59:26:79:27:82:22:5d:3e:3f:b7:d8:19:b0:
ac:34:3d:1c:79:a8:95:05:69:79:76:ed:96:2b:d7:
1c:6b:0a:bf:a5:35:d7:39:c9:59:b3:e8:fb:bc:f6:
32:4b:9a:ad:3a:0d:07:a5:b6:27:2d:e4:d0:ee:b9:
22:15:f0:ea:ad:49:8c:f7:ad:f8:1a:cd:c4:dc:a7:
fb:d7:5e:49:15:75:36:b2:b6:ac:2a:8f:68:b7:b5:
21:a6:3c:03:17:0f:6b:91:03:1f:31:0a:50:bd:69:
63:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:58:2E:53:3D:93:6F:D4:C8:5C:D1:FF:F7:DE:B5:92:25:04:44:89
X509v3 Authority Key Identifier:
keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/EF2D0AB84BC611EEBFFD4D71C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.57.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:06:99:0a:72:14:4c:af:92:e0:a7:1a:60:78:3b:ee:b8:d0:
8f:98:e6:f1:8d:2e:ee:77:be:b0:6d:9a:0f:a8:30:f2:cf:8e:
70:46:8a:bf:b4:8b:e6:ee:fa:7c:b8:92:18:c1:dd:a0:3f:e7:
ef:9f:36:f7:c8:15:95:a0:ef:84:91:cf:bb:9e:05:4b:3e:5c:
75:99:be:b2:00:92:d8:6b:93:ee:cb:db:3e:74:70:ec:e6:51:
c0:bb:c7:77:16:d6:f7:cf:f1:51:fc:87:aa:55:de:96:6f:51:
a3:1f:17:2d:dd:5e:90:d0:00:2d:7f:20:de:04:64:2c:1b:65:
9a:cc:f9:1d:49:2e:b9:15:10:93:b6:97:4f:59:d5:ec:6b:39:
b3:0f:3f:12:54:14:96:7f:7e:18:60:25:fb:b7:cc:94:b5:15:
c2:fc:2e:d0:1a:d0:5f:f5:76:0d:82:f0:37:30:43:ad:98:eb:
f2:20:3f:4c:f0:0b:c8:64:d6:cc:aa:79:36:65:85:0b:50:61:
54:a9:69:76:30:5e:5f:22:69:11:b0:6c:df:e7:8b:a2:61:d9:
fe:54:e0:5e:6e:86:c3:c2:bc:c2:c3:86:8c:e1:99:6b:dd:19:
3c:ed:1c:7d:d4:8e:0c:97:2a:d5:22:70:10:eb:bb:2c:fa:7e:
69:bd:ec:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 06:50:39 2024 by rpki-client on console-fra.rpki-client.org