Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/8286E2B61F4311EFA56C4243C4F9AE02.roa
File: 8286E2B61F4311EFA56C4243C4F9AE02.roa (raw, json)
Hash identifier: gqpwqHUB3C5eXG3LH06AZuPC0/q3PGUbf+zOMTdUJIQ=
Subject key identifier: 4C:34:CF:09:67:3A:E6:E9:8C:0F:0E:AD:5A:60:54:9F:B3:83:C9:E3
Certificate issuer: /CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43
Certificate serial: 0221
Authority key identifier: BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/8286E2B61F4311EFA56C4243C4F9AE02.roa
Signing time: Wed 05 Jun 2024 05:21:44 +0000
ROA not before: Wed 05 Jun 2024 05:21:44 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 103.25.124.0/24 maxlen: 24
103.25.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 04:51:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43
Validity
Not Before: Jun 5 05:21:44 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=665ff5e8-d52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:20:f8:de:67:d2:15:5a:1f:c7:1c:47:d1:
c1:e7:1d:8a:da:02:c3:2f:ba:bc:96:35:2e:89:c0:
42:6e:b2:84:cb:ac:58:6b:dd:5d:6b:bf:fd:0e:64:
55:90:b5:de:13:4c:6e:91:01:0a:8c:4c:3e:dc:56:
99:6f:54:62:73:aa:f1:b4:11:06:95:cd:e0:5a:76:
25:29:74:43:12:ec:aa:1b:7d:85:70:18:03:70:44:
4b:4a:f3:d4:2f:3a:c2:31:53:92:40:0f:85:1d:9d:
dc:f6:5d:5b:af:53:db:95:fe:75:dc:fc:88:ee:00:
f9:89:66:42:fa:04:d2:f1:03:cb:6a:67:fd:01:46:
8f:06:26:66:f5:d3:94:58:ae:76:f6:03:38:95:57:
5b:ef:58:d1:f3:a0:1c:13:97:04:f0:17:58:32:80:
26:84:6a:df:f2:18:81:3b:62:06:3e:fa:8d:67:63:
5c:98:e5:33:92:49:e8:57:f9:20:57:38:29:7a:52:
d2:ef:66:f9:1f:09:85:69:bc:b0:b2:1c:b5:be:90:
85:0c:8c:00:3f:e7:33:ee:15:d1:21:d2:e3:9a:06:
5e:9f:18:cf:e5:c3:49:a0:c0:61:6e:b2:11:5b:8f:
b1:48:ab:64:06:8a:d6:a5:31:64:bb:9f:b3:00:c6:
11:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:34:CF:09:67:3A:E6:E9:8C:0F:0E:AD:5A:60:54:9F:B3:83:C9:E3
X509v3 Authority Key Identifier:
keyid:BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/8286E2B61F4311EFA56C4243C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.25.124.0/24
103.25.126.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ca:b6:04:a7:fe:c9:06:31:25:df:3c:32:37:d5:8d:d0:2e:
c3:67:96:24:f9:c9:9e:39:1b:25:82:04:72:44:91:41:02:7b:
7f:38:6e:40:4b:a9:6b:2c:b8:f5:d0:ca:a9:9d:e1:87:8e:4c:
44:f5:3d:33:1f:ed:c6:08:a0:aa:3a:56:09:27:e4:de:39:1e:
94:a3:75:02:fe:6e:f0:07:5e:72:c0:01:07:73:3a:13:61:c8:
23:54:c1:36:af:b1:80:be:dd:dc:f3:48:d2:6e:e7:b6:87:0a:
f7:66:20:66:1c:b9:00:1c:65:eb:a0:64:c3:3f:b4:f9:25:59:
2d:90:56:cf:15:11:50:3f:8c:48:af:a4:bb:66:c8:b4:4c:9e:
7f:d7:0d:f1:b5:58:19:ca:57:be:6e:d9:08:f2:f4:35:2c:e4:
1d:22:11:0d:90:8d:22:eb:0a:95:3d:2e:37:3e:03:13:78:3d:
db:74:7d:6d:76:2f:22:45:2f:6e:0c:4b:5f:39:1f:bf:b5:61:
38:d2:a4:dc:a8:e2:22:19:1a:fb:8c:c4:9a:a7:1a:d3:cc:59:
3c:be:cc:1e:33:57:c7:68:49:0e:89:a4:b2:a9:c3:2b:23:94:
21:d5:43:71:46:94:d3:54:47:64:00:e0:2e:bc:0c:1f:38:f2:
96:38:c9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 06:29:46 2024 by rpki-client on console-fra.rpki-client.org