Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/015594DCF0D911EEA6B1AC5CC4F9AE02.roa
File: 015594DCF0D911EEA6B1AC5CC4F9AE02.roa (raw, json)
Hash identifier: PJtsgbBvToeR9XY/XhwPkNmw7aystL5t6cf45F7Ban0=
Subject key identifier: 1F:95:F0:54:A1:49:D4:4D:96:30:99:27:70:4F:76:97:83:22:7B:55
Certificate issuer: /CN=A9119ED6/serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF
Certificate serial: 06B8
Authority key identifier: 23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/015594DCF0D911EEA6B1AC5CC4F9AE02.roa
Signing time: Tue 02 Apr 2024 10:13:31 +0000
ROA not before: Tue 02 Apr 2024 10:13:31 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 9449
IP address blocks: 103.84.226.0/23 maxlen: 23
2400:a4c0:e024::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 21 Apr 2024 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1720 (0x6b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119ED6/serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF
Validity
Not Before: Apr 2 10:13:31 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=660bda4a-ca09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:70:59:36:5e:c2:d4:0c:80:c2:a4:c6:ae:
b4:72:28:44:29:62:0a:97:a2:59:eb:7f:74:42:03:
80:28:fa:af:cb:46:10:bd:29:06:5e:5c:54:14:29:
ae:61:24:cc:03:95:cc:5b:c6:5b:9f:d2:54:d2:fe:
6d:13:45:56:af:8a:72:96:ca:69:bd:96:88:2d:b3:
56:f2:f0:24:ff:50:28:3d:80:18:82:ff:f1:30:14:
8a:69:9e:8f:ad:44:69:4f:77:7c:98:74:f3:54:ce:
b5:5a:04:be:84:ae:c3:e1:9b:dd:74:2d:ba:18:1e:
30:02:4e:aa:30:17:f4:a9:0d:09:78:b7:bb:2b:54:
57:95:e1:94:03:ef:19:f3:8b:f0:28:ad:b1:ed:d9:
04:4b:db:6b:03:ad:21:01:11:52:af:a8:9f:8c:ed:
f0:93:42:01:d8:c3:6b:71:db:25:1e:1e:ac:22:cd:
84:39:d3:70:88:cf:5e:8b:f8:2d:aa:df:04:9f:08:
46:a1:7f:96:86:64:27:aa:78:ce:54:3d:6a:89:7c:
57:b8:a5:55:c5:d1:92:60:bc:72:c0:97:66:5e:1d:
16:34:f5:20:ce:55:c3:1b:12:a9:47:dc:55:99:a0:
79:c7:74:ec:4d:0b:68:92:a3:40:ce:9b:68:5d:2c:
d4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:95:F0:54:A1:49:D4:4D:96:30:99:27:70:4F:76:97:83:22:7B:55
X509v3 Authority Key Identifier:
keyid:23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/015594DCF0D911EEA6B1AC5CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.226.0/23
IPv6:
2400:a4c0:e024::/48
Signature Algorithm: sha256WithRSAEncryption
14:9f:7a:83:4a:2e:7b:d1:cc:a5:1e:06:ee:a7:58:6f:92:be:
da:ae:4d:c7:b6:1e:42:3c:c7:d4:a3:7b:27:e7:d4:f5:4b:b7:
b6:af:dd:10:4b:02:8c:07:9b:f0:95:61:af:62:ab:a8:a6:80:
0d:0d:62:f1:d2:9a:f3:1e:39:fe:c8:a0:51:04:87:ca:1d:d0:
45:5d:24:cf:34:e4:63:5a:b1:18:0d:c7:9f:01:99:ba:c3:f7:
f3:e7:bf:ab:a7:b8:84:0a:1d:09:4c:c1:09:67:79:57:7f:94:
19:10:8b:49:5d:ad:d2:3c:53:b5:e4:d9:5e:36:d6:9b:60:bf:
d5:24:a4:6c:5e:45:e5:76:05:ad:a5:36:71:fc:3b:a5:c6:6d:
7a:e9:05:09:23:34:ab:1b:44:28:f2:ac:13:47:8e:c9:51:71:
3a:f2:7b:73:a1:79:e8:20:b0:5f:1a:e8:91:22:5a:aa:17:48:
3e:98:fa:76:37:6e:73:81:fe:87:b6:d7:18:14:84:0d:df:27:
a4:a0:fc:4a:c7:45:57:e4:6c:3c:c7:30:09:53:a8:f0:a9:9a:
8e:b2:58:05:ec:74:8a:eb:00:3f:ae:8a:50:72:b2:67:12:ec:
5a:8d:c7:d1:fa:32:e4:ef:d4:63:37:62:8c:04:77:7b:81:f3:
ec:22:f3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:55 2024 by rpki-client on console-fra.rpki-client.org