Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/3B494F10218C11EF92F65225C4F9AE02.roa
File: 3B494F10218C11EF92F65225C4F9AE02.roa (raw, json)
Hash identifier: zk3rO1/HbmUAUQu6SdUmatA/L7VGEOCTAnjQyTAZGds=
Subject key identifier: 02:AA:8F:CB:FD:39:33:90:B7:89:82:9D:9A:20:1E:A2:16:51:B3:DA
Certificate issuer: /CN=A9117257/serialNumber=E9B600C9E6DD8CEEC972195D6349C89838F745BE
Certificate serial: BB
Authority key identifier: E9:B6:00:C9:E6:DD:8C:EE:C9:72:19:5D:63:49:C8:98:38:F7:45:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bYAyebdjO7JchldY0nImDj3Rb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/3B494F10218C11EF92F65225C4F9AE02.roa
Signing time: Mon 03 Jun 2024 09:33:27 +0000
ROA not before: Mon 03 Jun 2024 09:33:27 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 7489
IP address blocks: 103.122.244.0/24 maxlen: 24
103.122.246.0/24 maxlen: 24
103.122.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 12:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117257/serialNumber=E9B600C9E6DD8CEEC972195D6349C89838F745BE
Validity
Not Before: Jun 3 09:33:27 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=665d8de7-fe88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:96:e1:0c:8a:e9:00:ba:b0:f0:28:d0:6c:
25:f6:8c:8e:ad:5e:a1:99:3d:b9:34:ad:86:0c:3e:
c7:91:63:a4:a4:76:dc:26:84:1a:af:f8:4a:50:9d:
61:72:6b:17:81:9b:36:bb:d4:88:b3:27:c7:9d:c3:
88:c4:a3:e1:c2:bb:43:2f:cc:60:28:85:df:a3:5b:
f2:83:0a:27:64:bc:e2:f8:a4:55:0e:49:13:fd:f8:
02:75:b0:a2:c0:45:da:37:99:0a:87:be:1f:1c:3e:
c4:78:ed:2a:64:a1:3a:14:0a:33:df:71:63:83:79:
40:47:1c:90:ef:3e:46:03:c5:cc:01:79:c9:7f:42:
f4:ec:d1:0c:ef:be:fc:73:e6:01:c4:f2:fe:63:1b:
10:86:ce:ee:1d:1b:dd:38:94:9d:16:ed:78:65:06:
1e:33:db:cc:60:34:ed:2f:b2:67:db:bc:f2:38:51:
c6:12:0f:e2:06:21:5c:b7:c3:9d:aa:6d:80:31:f3:
ad:32:0d:02:fd:93:0f:25:02:47:ff:9d:59:ab:c8:
19:7c:31:10:a7:a9:1e:55:47:eb:f5:72:9c:a7:60:
db:d9:f6:7a:93:82:8a:05:91:f5:20:2e:bc:d2:92:
67:86:95:28:03:af:7f:96:20:7d:2b:6e:c8:64:81:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AA:8F:CB:FD:39:33:90:B7:89:82:9D:9A:20:1E:A2:16:51:B3:DA
X509v3 Authority Key Identifier:
keyid:E9:B6:00:C9:E6:DD:8C:EE:C9:72:19:5D:63:49:C8:98:38:F7:45:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bYAyebdjO7JchldY0nImDj3Rb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/3B494F10218C11EF92F65225C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.244.0/24
103.122.246.0/23
Signature Algorithm: sha256WithRSAEncryption
14:98:19:f7:ae:2b:29:38:9b:80:4d:8e:72:2d:5e:ee:af:51:
02:44:f8:d7:ce:c3:17:01:0d:e8:09:f8:34:e7:c2:95:f4:cb:
ac:bd:88:be:5e:17:92:83:90:65:0f:42:2f:4f:39:52:d3:5b:
a0:5f:35:08:ae:de:20:d9:e7:a3:22:cf:ae:39:62:14:48:15:
ec:bd:d9:15:be:67:b1:bd:46:f6:b0:61:96:6e:45:36:7f:0e:
4d:a0:5e:86:27:ff:ef:23:61:46:80:9f:3e:ea:e0:00:3c:b7:
ea:49:fd:89:5f:eb:79:29:5a:1a:85:e1:97:06:93:0c:d2:89:
05:73:d1:1f:c5:ad:e1:d7:dc:a1:ba:f9:65:4b:df:cb:99:6c:
65:d6:81:e4:27:40:25:a0:f2:c1:64:6f:83:20:17:fd:b2:84:
7f:80:67:6e:ab:5d:ec:87:bd:50:ef:2b:c4:de:06:de:d1:ac:
0e:d2:7b:b8:76:08:1b:e7:1c:ea:f9:31:de:0e:c0:e8:5d:53:
fd:7e:51:07:97:e2:f9:f4:af:ef:d1:d1:fe:62:22:42:c3:09:
69:b9:08:35:e0:72:d9:6f:7f:c6:a0:8c:3f:a8:51:75:54:53:
9c:5e:16:64:68:40:33:23:2b:58:7f:31:5a:a8:39:34:7a:0d:
bb:39:e1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 15:02:37 2024 by rpki-client on console-fra.rpki-client.org