Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/4FC496A657BC11EE9025060BC4F9AE02.roa
File: 4FC496A657BC11EE9025060BC4F9AE02.roa (raw, json)
Hash identifier: t9JXjGRiZJRaRIkD8UWGwvtm6rQfd2ZXh3xYo44qscI=
Subject key identifier: 87:8A:B3:0E:F8:CD:17:20:35:FE:06:C5:0A:2D:DD:E9:F5:9A:FC:13
Certificate issuer: /CN=A912294F/serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C
Certificate serial: 02
Authority key identifier: ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/4FC496A657BC11EE9025060BC4F9AE02.roa
Signing time: Wed 20 Sep 2023 13:48:00 +0000
ROA not before: Wed 20 Sep 2023 13:48:00 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 151794
IP address blocks: 103.77.176.0/24 maxlen: 24
103.77.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 07:45:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912294F/serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C
Validity
Not Before: Sep 20 13:48:00 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=650af810-fe0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ec:b0:4f:a7:9d:d9:67:42:ba:22:70:8b:a9:
9c:92:93:7d:16:97:af:b5:a1:e0:1b:fe:7a:0e:90:
f3:1d:40:76:8d:f3:e6:66:75:98:81:b2:5a:32:cf:
e8:21:c6:26:a0:6c:25:e0:d0:3a:4f:51:2c:93:75:
0a:38:68:43:c6:ae:c8:fc:99:0c:e6:47:98:52:bf:
b9:12:ad:c4:75:fe:54:e7:26:6f:05:df:48:8c:91:
1f:2d:4c:8f:3f:bc:bc:93:74:61:34:05:cb:17:d6:
ca:62:16:0c:84:ea:88:17:fb:71:54:dd:96:37:9b:
e4:15:80:6c:32:a2:ec:22:ce:ee:be:71:e4:5a:50:
50:2f:04:fc:9a:62:77:c5:38:49:d8:3a:1b:5a:60:
0e:18:31:22:ef:13:15:29:1d:54:46:62:cc:82:dd:
ca:77:3c:cf:46:18:10:95:2f:25:d0:45:d4:32:a2:
94:84:89:55:09:4d:59:fe:e1:e4:9f:b5:72:30:aa:
76:1b:b7:56:c3:b5:d8:89:65:b7:26:04:79:b4:c7:
60:73:b0:44:26:7b:4e:f4:be:3f:ce:57:e9:a4:bf:
58:f2:00:7d:95:ab:e0:34:3a:df:eb:09:81:db:a2:
73:1d:a9:f9:f5:91:31:dc:d9:f2:d0:bc:81:ee:07:
9a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8A:B3:0E:F8:CD:17:20:35:FE:06:C5:0A:2D:DD:E9:F5:9A:FC:13
X509v3 Authority Key Identifier:
keyid:ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/4FC496A657BC11EE9025060BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.77.176.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:ec:4b:e1:42:ef:85:5d:3e:91:3c:df:b9:1c:81:f8:de:ba:
4e:40:14:8d:02:53:fa:ad:b6:9a:58:f6:dd:7f:d1:80:8d:fd:
14:95:88:f6:1f:fa:2e:03:1c:bf:f6:88:23:5f:8d:7f:ae:1a:
c0:75:f7:49:85:f0:ad:f8:6a:aa:7f:bf:73:65:a1:60:73:18:
a0:99:ec:47:d1:31:e7:2b:c7:a0:5e:23:28:d9:64:15:e7:21:
b7:2d:e6:70:d0:43:d2:fb:67:40:bc:66:1f:2f:8f:eb:24:bf:
b5:0c:51:11:49:2a:0b:70:30:c5:12:a8:59:f5:6a:50:dc:4c:
a8:43:e8:bd:6f:87:91:4b:9c:8a:d5:35:3a:50:2f:60:47:bb:
1a:bf:98:98:e1:c2:e3:b4:dd:42:a1:43:c7:a9:60:10:ab:01:
86:cd:f7:04:91:ab:d9:bd:e7:97:8c:bd:d5:17:d0:02:b0:00:
18:e0:46:37:cc:f1:2c:cb:7d:f2:d9:ef:fb:73:a1:c5:d3:de:
e5:6c:4f:d1:1d:89:23:fe:90:80:b6:a9:72:c4:96:ad:36:74:
4b:d4:52:c9:cb:ed:2b:e3:18:19:69:c0:1a:f0:d8:88:8a:d2:
53:f3:8a:42:70:3f:1f:a8:bd:72:bc:45:f0:d5:ca:ff:02:3e:
40:17:7a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 09:36:57 2024 by rpki-client on console-ams.rpki-client.org