Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/7476B58CFDE911EEB42ED448C4F9AE02.roa
File: 7476B58CFDE911EEB42ED448C4F9AE02.roa (raw, json)
Hash identifier: ZDmNlrK+cbChgn/pdCbnWgfz43Isdmo9AVKwIYFtURA=
Subject key identifier: 56:44:10:0D:4F:70:EA:BE:46:C7:98:2E:33:80:3E:CF:49:5F:8A:4E
Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Certificate serial: 0106
Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/7476B58CFDE911EEB42ED448C4F9AE02.roa
Signing time: Fri 19 Apr 2024 01:09:22 +0000
ROA not before: Fri 19 Apr 2024 01:09:22 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 17941
IP address blocks: 103.71.92.0/24 maxlen: 24
103.71.94.0/24 maxlen: 24
103.71.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 14:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Validity
Not Before: Apr 19 01:09:22 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=6621c442-7f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:19:68:11:89:82:3a:2a:64:8e:d7:67:aa:
29:21:9d:a8:76:dd:4a:49:51:2e:68:21:fd:f5:6f:
49:f0:d3:1a:5f:c2:48:50:ac:9f:a4:3d:49:ac:3f:
00:2d:1e:6e:9b:c9:7d:ab:ff:2e:bc:b6:93:f3:57:
c8:50:94:18:a8:6f:8c:9a:3b:8d:c3:34:0b:9d:da:
47:19:73:db:25:fe:ee:45:ca:22:02:ae:50:4c:da:
79:25:72:d8:60:35:37:46:a5:f6:e5:3a:e8:ab:31:
42:26:d8:13:36:23:bd:31:92:2b:f8:a1:04:76:d2:
c3:6a:df:6b:fc:9b:d7:97:b1:f7:ed:a8:61:f5:7e:
b3:95:d6:99:1c:86:bf:a0:1d:59:f9:c9:2f:f5:a8:
02:25:87:d6:9f:2b:02:0e:1c:15:fc:c8:db:cb:74:
e4:cb:30:64:62:d2:f3:e0:2c:a4:72:2b:b8:71:6a:
8d:d7:ad:c6:77:6e:49:48:84:65:0b:6d:de:fa:62:
c5:44:cc:cc:b3:9b:aa:80:6a:90:20:79:a6:b0:91:
25:1b:f2:61:94:9a:d2:86:1a:1b:e7:77:27:ff:fc:
6e:d7:fb:df:22:da:6d:e9:27:19:dd:d1:32:fc:b7:
fb:c7:bc:3a:0f:dd:2e:7c:6e:12:1d:0b:7c:c9:3e:
47:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:44:10:0D:4F:70:EA:BE:46:C7:98:2E:33:80:3E:CF:49:5F:8A:4E
X509v3 Authority Key Identifier:
keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/7476B58CFDE911EEB42ED448C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.71.92.0/24
103.71.94.0/23
Signature Algorithm: sha256WithRSAEncryption
25:37:a5:f9:00:69:f1:84:70:1a:8c:40:45:a2:22:b0:0e:19:
b9:48:97:40:23:9c:f9:14:db:63:0b:a7:10:d8:21:b7:54:53:
99:e3:3e:28:d2:6d:0c:82:72:05:36:54:74:38:56:17:7f:1c:
cf:16:0e:b9:b6:8f:78:ef:9e:7f:8d:62:be:fd:4d:8a:f8:b1:
04:a4:69:ae:e9:15:eb:fd:65:3c:fc:9f:b3:a5:b3:05:c9:4d:
ef:2c:69:41:8c:5e:3f:fe:89:ef:9f:f0:e8:65:3e:03:47:4a:
9c:27:f9:37:b8:27:bb:bf:8d:7f:c9:df:ad:f7:8b:5f:12:ae:
ba:0c:9f:9a:70:5c:dc:9d:c2:2e:1d:ea:e3:a3:a9:d4:86:e3:
d3:04:ee:06:8b:36:d5:c7:5c:4e:52:c7:63:47:14:ce:e5:bd:
ad:59:ed:a7:b6:81:dc:4c:3c:90:37:d1:a1:08:c8:d0:5e:f6:
ea:6b:f0:c4:00:86:a2:0f:0c:ce:93:8c:58:e9:21:a9:35:d7:
2e:89:7e:65:6a:ab:59:a0:3b:8c:90:02:9d:30:d2:12:a4:2e:
a8:f1:85:d3:8e:36:52:88:6c:c4:59:00:83:83:22:f0:e1:f8:
a5:62:e5:80:ce:19:8c:66:55:8d:3b:08:08:2a:4f:39:b3:fa:
d4:b5:a1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 16:53:34 2024 by rpki-client on console-fra.rpki-client.org