Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/6B9197AE1C8311EE8CE0A07EC4F9AE02.roa
File: 6B9197AE1C8311EE8CE0A07EC4F9AE02.roa (raw, json)
Hash identifier: yUK/CaSP6gmWI0nLFli52sgLQtP3TgHeRUEb453/a5U=
Subject key identifier: 85:BC:CB:DE:18:F9:3B:37:DD:B0:26:3F:AC:00:02:29:38:84:C9:1E
Certificate issuer: /CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43
Certificate serial: 013B
Authority key identifier: BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/6B9197AE1C8311EE8CE0A07EC4F9AE02.roa
Signing time: Fri 07 Jul 2023 05:02:07 +0000
ROA not before: Fri 07 Jul 2023 05:02:07 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 31863
IP address blocks: 103.25.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43
Validity
Not Before: Jul 7 05:02:07 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64a79c4e-cdac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:89:a5:95:0e:5d:2b:77:eb:d6:30:60:21:f1:
60:91:77:b9:62:be:18:b7:0e:fb:1a:2f:86:56:ef:
ad:4f:9b:59:c6:91:61:34:7f:97:49:cb:a9:42:13:
ce:f4:3b:64:e4:01:21:8b:65:52:d7:7c:f7:d0:0b:
81:4f:ab:d2:fd:63:db:82:19:ab:8a:0e:24:93:51:
2c:c2:31:aa:b4:00:ef:91:dd:c0:0c:fd:fa:a3:41:
e3:6c:fe:01:19:10:b5:d2:22:fa:cc:7e:7f:08:e6:
34:8c:9a:1b:c7:0c:d4:54:52:aa:67:09:4e:f0:97:
01:d7:e6:0d:8c:33:8e:7b:91:61:2b:06:d7:2b:6f:
9d:23:70:03:52:98:9e:96:16:3e:ce:77:1d:0c:d8:
9b:c0:c7:cb:51:70:9d:c6:89:e3:e2:94:17:3f:54:
44:aa:e3:02:94:a2:91:82:b9:65:88:cd:78:11:63:
20:63:0d:f7:b9:95:2e:b0:31:7c:4d:ed:dd:f9:f9:
e1:96:df:2c:5a:4e:73:ac:de:a5:30:78:2c:f6:2b:
48:32:5f:a0:d7:7e:81:31:1e:ee:1f:38:8c:64:92:
8e:d8:7e:d1:98:12:c4:f1:87:2f:18:b9:f6:b0:96:
f5:ec:ba:38:99:a4:5c:3c:cd:2d:70:e8:77:a2:96:
6e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BC:CB:DE:18:F9:3B:37:DD:B0:26:3F:AC:00:02:29:38:84:C9:1E
X509v3 Authority Key Identifier:
keyid:BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/6B9197AE1C8311EE8CE0A07EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.25.124.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ae:a4:79:83:be:e6:84:3e:0e:72:c9:d5:0d:18:c3:61:59:
f6:79:58:7c:22:c4:51:2f:55:92:2d:91:8d:ab:c1:86:de:c7:
b2:38:e1:1d:68:ca:34:7a:00:ac:6e:48:4b:e1:7f:4a:8d:91:
0b:a5:db:f6:0e:43:00:8c:df:87:8e:1a:14:ae:b4:54:fb:2e:
cc:31:b0:3c:29:a4:33:37:ab:63:bc:8f:08:8e:cd:35:91:a3:
3c:a8:9d:18:a7:37:c0:b8:c2:09:85:d8:10:e8:c9:a7:ac:53:
a1:2d:0a:6a:40:54:e8:7c:e9:0e:ad:7a:99:98:e6:bd:75:b1:
cc:af:d4:a8:12:58:c9:fb:cc:38:06:33:f4:26:c9:2a:a2:b4:
28:d9:cb:6d:b2:d8:cf:7f:0c:11:62:ab:9a:df:9e:2e:d6:d0:
df:3a:50:4d:37:36:b1:c2:dd:0b:2b:26:27:f4:ab:ef:2e:ae:
10:1b:d8:b7:0f:fa:ed:49:21:36:e4:94:65:37:bc:fa:c2:bb:
08:42:48:8d:0e:4e:68:43:63:7b:a2:d9:6e:8b:78:09:85:f1:
b6:c8:3b:26:40:41:83:c0:5b:22:0e:93:b9:44:18:dd:2b:f4:
0e:80:30:77:0f:f7:80:a6:16:5e:3b:2c:86:d4:3a:0a:c9:05:
6d:9d:6e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 10:39:39 2023 by rpki-client on console-ams.rpki-client.org