Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/9FE7159201D611EDA3BFA62EC4F9AE02.roa
File: 9FE7159201D611EDA3BFA62EC4F9AE02.roa (raw, json)
Hash identifier: M3lhfhuNHgxA2T8G8vg6K9H/42bHZ6WgvJTTQuqJjOQ=
Subject key identifier: 6A:4A:9A:50:91:8F:59:23:0E:53:F1:D0:08:6D:73:8E:70:F9:35:3E
Certificate issuer: /CN=A911D8BA/serialNumber=7318DA73A0AB3DD090E6B73FC4DF0D7510185CF1
Certificate serial: 01E6
Authority key identifier: 73:18:DA:73:A0:AB:3D:D0:90:E6:B7:3F:C4:DF:0D:75:10:18:5C:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxjac6CrPdCQ5rc_xN8NdRAYXPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/9FE7159201D611EDA3BFA62EC4F9AE02.roa
Signing time: Mon 03 Jun 2024 05:21:58 +0000
ROA not before: Mon 03 Jun 2024 05:21:58 +0000
ROA not after: Tue 01 Oct 2024 00:00:00 +0000
asID: 59338
IP address blocks: 103.227.236.0/24 maxlen: 24
103.227.237.0/24 maxlen: 24
103.227.238.0/24 maxlen: 24
103.227.239.0/24 maxlen: 24
2001:df3:f800::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 21 Jun 2024 05:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 486 (0x1e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D8BA/serialNumber=7318DA73A0AB3DD090E6B73FC4DF0D7510185CF1
Validity
Not Before: Jun 3 05:21:58 2024 GMT
Not After : Oct 1 00:00:00 2024 GMT
Subject: CN=665d52f5-4ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:0d:61:23:7b:bd:78:56:e7:99:0a:a7:68:
61:6e:28:14:0f:6c:52:1c:d3:cb:c8:72:61:e1:50:
13:8a:a1:e6:26:b3:7d:08:65:84:51:d9:48:8b:42:
76:ff:d2:b7:46:d6:96:02:ed:df:6d:a0:d3:5c:07:
36:6d:6c:8d:f5:3c:a8:2a:ec:95:e5:23:85:7f:e5:
94:10:25:24:a0:3b:4d:28:c0:db:48:8b:53:dc:a7:
03:f4:c6:2d:c5:f9:ed:c3:03:a6:83:f5:e0:3c:5b:
f6:63:1f:0d:df:97:a2:5f:f4:87:c1:f0:b2:ba:4f:
c8:20:78:a5:b0:1b:22:05:d3:dd:b6:01:82:9b:9b:
57:7d:6f:fd:d4:01:15:28:1a:16:7d:2b:e8:8b:7f:
6c:8e:d7:04:a4:92:3a:3d:e2:82:45:81:a9:05:29:
de:eb:42:91:d7:fc:89:bd:61:5b:22:89:08:71:c3:
80:c9:a5:bb:51:19:a6:86:26:d7:dd:c3:40:01:60:
08:c9:f0:04:58:3e:ff:d3:6f:8b:cd:e1:a3:8a:ab:
93:3f:fb:aa:14:2c:ab:34:32:2e:e2:70:b8:83:60:
9e:bd:8b:5a:aa:88:6e:e2:f4:a2:54:b7:47:bd:c9:
1e:bc:6a:1c:e6:ee:94:59:91:78:14:22:62:72:2a:
83:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4A:9A:50:91:8F:59:23:0E:53:F1:D0:08:6D:73:8E:70:F9:35:3E
X509v3 Authority Key Identifier:
keyid:73:18:DA:73:A0:AB:3D:D0:90:E6:B7:3F:C4:DF:0D:75:10:18:5C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/cxjac6CrPdCQ5rc_xN8NdRAYXPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxjac6CrPdCQ5rc_xN8NdRAYXPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D8BA/48B40A8401D411EDA92EAA2DC4F9AE02/9FE7159201D611EDA3BFA62EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.227.236.0/22
IPv6:
2001:df3:f800::/48
Signature Algorithm: sha256WithRSAEncryption
78:ef:95:d7:3f:21:3f:1b:e8:bd:be:70:df:a6:8d:d7:5e:07:
03:9b:b1:b4:ff:4c:20:af:fe:bf:fa:24:84:1b:0f:df:48:2f:
74:f7:99:1a:86:33:dc:62:04:4e:09:52:aa:af:fd:c1:81:48:
ef:09:3f:55:a9:52:af:c8:d5:51:76:4c:53:52:a2:f4:e9:5b:
a5:47:be:05:5c:a5:fa:cc:8c:bf:86:5c:af:d6:ae:b8:8b:6f:
6a:e9:68:21:fc:bd:84:0f:98:17:bb:55:fb:2a:8c:7c:8e:0e:
eb:f3:2f:d0:4a:46:80:a0:11:e1:9c:31:ac:65:1d:40:a5:16:
bf:30:d0:42:e0:66:b9:c4:3f:9b:97:12:d5:c6:4c:c4:c4:05:
30:5e:d1:5d:52:52:1e:89:bf:f8:05:32:00:1a:90:93:b3:b1:
78:7d:6a:3b:b4:3b:db:1b:74:4a:cf:1c:58:6d:b6:de:c7:56:
ba:ac:0f:de:3a:ba:2e:3c:f6:6f:7f:3b:1a:7a:5e:7f:06:b9:
86:07:b5:1d:97:cc:da:b1:d9:dc:0f:db:43:af:fa:0c:dd:df:
5b:5b:e9:f0:97:dc:40:d2:05:6c:22:0e:3d:2d:28:9f:d7:f5:
6d:5d:60:bb:2a:64:38:ae:c3:11:a0:a4:d4:a1:a2:eb:d2:f6:
61:44:b5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 08:54:26 2024 by rpki-client on console-fra.rpki-client.org