Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/0C6B98FA92C611EF9DB17D6AC4F9AE02.roa
File: 0C6B98FA92C611EF9DB17D6AC4F9AE02.roa (raw, json)
Hash identifier: RCGmi7nm8vJWyEzFQkB7pTsz9iHJMveiQJMKg+OTOcI=
Subject key identifier: 4C:7B:1B:BB:DD:8C:B2:B4:5B:07:E6:F2:60:5E:C5:05:01:B0:79:7C
Certificate issuer: /CN=A9119F89/serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820
Certificate serial: 060E
Authority key identifier: 55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/0C6B98FA92C611EF9DB17D6AC4F9AE02.roa
Signing time: Fri 25 Oct 2024 11:41:18 +0000
ROA not before: Fri 25 Oct 2024 11:41:18 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 139076
IP address blocks: 103.137.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 00:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1550 (0x60e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119F89/serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820
Validity
Not Before: Oct 25 11:41:18 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=671b83de-23c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:44:26:a2:4c:36:ee:41:66:97:97:70:e9:
9a:29:d0:04:8e:3b:98:3f:b7:3f:15:7b:b6:57:09:
cd:da:c5:cf:fb:bc:1c:9b:ed:bf:24:af:84:ff:f9:
79:d3:36:db:3d:b4:6c:0b:d3:51:d9:57:8b:8a:1d:
5c:5b:32:11:d5:ca:df:bc:ee:20:b6:90:92:67:ab:
4c:02:7c:d1:32:3f:4d:80:f9:45:38:cb:c8:f4:1e:
e1:6e:27:85:c2:27:0a:7f:b7:64:b8:b0:78:78:72:
97:39:bb:9c:31:7d:ae:38:11:94:1e:d5:ff:39:e9:
55:56:05:e5:bf:40:82:ae:8f:c6:5a:a0:70:df:96:
8c:a0:2c:d3:2a:44:c2:92:1b:5b:42:46:9f:ca:a3:
36:59:7b:d9:84:af:a4:b5:93:da:bb:b6:ad:83:89:
7c:96:bb:95:b9:07:2b:98:bd:a9:e6:a2:1b:5f:d1:
45:61:6c:0a:97:1e:57:05:24:52:04:ae:a9:d0:ef:
07:34:35:b6:d8:00:47:49:17:74:3e:51:92:2d:99:
41:b0:6c:cb:ce:83:0b:a6:47:e4:05:e8:60:ec:49:
11:e8:19:22:92:27:43:b5:95:a2:01:9e:ba:8b:21:
22:09:5b:ac:3d:a1:cb:47:c7:a6:b7:23:bb:b5:d0:
45:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7B:1B:BB:DD:8C:B2:B4:5B:07:E6:F2:60:5E:C5:05:01:B0:79:7C
X509v3 Authority Key Identifier:
keyid:55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/0C6B98FA92C611EF9DB17D6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.215.0/24
Signature Algorithm: sha256WithRSAEncryption
20:9a:d9:33:a7:43:4b:c9:ea:eb:da:68:0f:98:12:c0:e2:00:
6d:d2:e7:8a:55:c2:ea:c2:11:b5:3f:90:27:60:9e:e7:4d:47:
ae:43:54:a9:80:5e:0e:c7:76:35:c3:9c:de:69:51:59:93:a2:
29:1b:6a:c5:b6:80:39:13:28:8c:c9:00:8c:4e:4a:6c:d0:b0:
74:5c:b6:6d:b5:45:51:2f:f5:0a:84:8f:43:ab:f6:c0:96:f5:
9f:1d:56:75:bb:fc:a0:fe:13:31:58:0a:b6:4f:c0:cf:ad:41:
f1:75:90:d1:c3:ed:3a:44:48:83:02:c6:28:a4:b0:69:80:9a:
c8:9a:98:59:9b:f6:1e:5b:af:f6:14:a1:89:0f:a2:9c:33:dd:
8a:a6:b9:1a:d5:9e:f7:e3:2a:d2:9a:8b:76:59:a9:ab:53:b0:
53:05:3c:8e:fd:34:31:04:4a:2a:7d:cf:5d:75:0f:b9:e1:4f:
29:2d:b7:51:82:e7:b6:25:68:29:e1:27:09:de:45:14:67:31:
cc:fd:4e:ce:b1:12:8c:8b:37:b6:4e:a8:4d:ff:51:f1:7b:70:
b3:51:69:d3:f2:98:80:5f:eb:34:a4:f3:99:2b:a6:04:1c:cd:
12:dd:34:6c:cc:b7:9f:e8:0f:63:67:f1:94:90:0d:14:9f:88:
f2:3c:67:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:57 2024 by rpki-client on console-fra.rpki-client.org