Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B00/14C28082F1AA11ECBF355C29C4F9AE02/7B0369F6422011EF896D0432C4F9AE02.roa
File: 7B0369F6422011EF896D0432C4F9AE02.roa (raw, json)
Hash identifier: xX00tyjop5enyNF5VzqX2CDGeL2oolN46l3F4QYXvsI=
Subject key identifier: 4B:6E:77:0C:02:08:9D:6C:F7:22:BA:0E:A5:AC:14:4F:67:CF:6F:C2
Certificate issuer: /CN=A9122B00/serialNumber=93C12D83DBB88F2177AB58E39FAE8ACA31239D91
Certificate serial: 021C
Authority key identifier: 93:C1:2D:83:DB:B8:8F:21:77:AB:58:E3:9F:AE:8A:CA:31:23:9D:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8Etg9u4jyF3q1jjn66KyjEjnZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122B00/14C28082F1AA11ECBF355C29C4F9AE02/7B0369F6422011EF896D0432C4F9AE02.roa
Signing time: Sun 14 Jul 2024 20:34:34 +0000
ROA not before: Sun 14 Jul 2024 20:34:34 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 45641
IP address blocks: 103.123.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Nov 2024 20:12:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540 (0x21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122B00/serialNumber=93C12D83DBB88F2177AB58E39FAE8ACA31239D91
Validity
Not Before: Jul 14 20:34:34 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=6694365a-620c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e9:f1:53:5d:45:ea:20:aa:82:74:1d:e2:28:
83:c1:54:4e:a4:e9:c9:1e:14:02:08:d5:52:52:33:
74:b9:c8:fd:ec:12:00:9f:2f:17:f7:63:8b:78:96:
3f:02:a9:a8:5c:f5:b9:f2:80:a3:2d:e2:d5:4d:59:
68:0c:74:ea:1c:5e:18:fb:4f:75:b5:00:0f:c2:8e:
b8:2b:5b:9c:52:ea:30:4f:01:b8:e5:42:81:d3:72:
fc:0f:92:15:9c:92:3c:8b:4a:39:89:fb:24:bd:3a:
c5:f5:f7:0d:76:e4:ca:29:bf:6e:c2:d0:13:c7:a9:
b5:94:ce:aa:38:06:ff:96:6d:73:03:62:27:f4:f6:
80:cb:cd:a2:fc:35:0f:a3:07:75:a9:dc:82:4b:ab:
4f:62:49:f7:a2:e7:ba:6c:3a:50:fe:ac:1c:fd:7f:
6e:9f:97:29:9f:9c:51:9f:9a:b0:d1:5a:5c:ed:91:
01:06:ae:10:22:4b:f4:fd:7a:48:33:b2:62:d8:39:
77:7d:a6:c6:7b:07:a2:de:03:54:ae:84:dc:53:38:
3d:f3:94:d3:72:64:b9:55:57:29:fe:f5:e0:d5:fe:
43:ba:88:29:8c:b8:8e:90:7c:16:0d:fe:99:2b:c0:
1b:64:08:d9:2d:68:2e:f4:91:de:b4:f0:fa:fe:ca:
7e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6E:77:0C:02:08:9D:6C:F7:22:BA:0E:A5:AC:14:4F:67:CF:6F:C2
X509v3 Authority Key Identifier:
keyid:93:C1:2D:83:DB:B8:8F:21:77:AB:58:E3:9F:AE:8A:CA:31:23:9D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122B00/14C28082F1AA11ECBF355C29C4F9AE02/k8Etg9u4jyF3q1jjn66KyjEjnZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8Etg9u4jyF3q1jjn66KyjEjnZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B00/14C28082F1AA11ECBF355C29C4F9AE02/7B0369F6422011EF896D0432C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.159.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:fe:10:9a:58:af:0a:aa:a9:5c:c1:e2:f9:99:34:ef:a9:58:
71:c7:b0:66:82:3e:da:91:4a:51:2f:10:99:75:45:a4:0c:70:
94:b2:a9:de:2d:da:8d:10:fa:f6:06:65:2b:6b:91:14:25:58:
3e:5e:ce:07:e5:5b:f5:eb:8e:7a:9c:01:5b:7c:f8:8d:8a:46:
f0:10:2c:1b:54:dc:35:53:13:d8:a4:07:52:02:22:15:6a:a6:
0f:0a:82:91:99:8e:54:3f:18:bb:8a:fe:ef:15:f7:9d:35:06:
40:d9:6a:aa:31:6d:36:b8:46:d3:1b:4a:2b:6b:82:48:4a:00:
e8:4a:11:5b:ad:46:09:57:ec:00:90:73:05:b6:a8:27:f2:57:
72:4e:6c:c3:dd:62:5b:17:65:3a:52:a0:ba:e4:3c:a3:c4:2d:
90:17:a6:df:af:1c:15:e0:08:d0:cc:45:95:e9:80:78:24:be:
ae:d3:88:2c:c3:8a:4b:ca:84:2a:1c:97:da:a2:b3:a6:fd:b3:
ea:bb:71:b6:8c:97:7e:80:5b:1e:d7:e8:63:a1:26:a7:a6:ff:
11:4b:0f:e5:03:77:4f:22:47:a9:de:94:4f:d2:95:bb:8c:60:
fb:b2:82:bc:f0:c6:02:e1:3e:df:2e:96:7c:aa:bb:fb:14:e5:
2f:e3:8b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:17:12 2024 by rpki-client on console-fra.rpki-client.org