Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/9DB1D80C01EF11EDA0677F53C4F9AE02.roa
File: 9DB1D80C01EF11EDA0677F53C4F9AE02.roa (raw, json)
Hash identifier: vF171claUGrx1Gna+K9/RQlnfYp0tLA2behBMHHDxb0=
Subject key identifier: 48:2E:49:C7:A7:E1:6F:B6:44:00:20:95:3A:77:35:4B:BE:8C:2C:38
Certificate issuer: /CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43
Certificate serial: 0122
Authority key identifier: BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/9DB1D80C01EF11EDA0677F53C4F9AE02.roa
Signing time: Wed 31 May 2023 06:08:45 +0000
ROA not before: Wed 31 May 2023 06:08:45 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 58925
IP address blocks: 103.25.124.0/24 maxlen: 24
103.25.125.0/24 maxlen: 24
103.25.126.0/24 maxlen: 24
103.25.127.0/24 maxlen: 24
2406:db00::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 03 Jul 2023 04:52:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43
Validity
Not Before: May 31 06:08:45 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6476e46d-f994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:9d:f4:0f:72:a4:8c:aa:c7:13:99:fb:08:
96:3b:6f:9e:7b:13:06:80:37:9a:c6:94:b7:ab:56:
a9:62:da:e3:93:34:78:9b:fe:65:61:7d:0a:f8:5f:
63:56:45:2e:98:f1:e3:9a:d6:69:a6:76:f5:87:87:
a1:2c:c2:6c:a2:f9:c7:9f:6e:7b:18:d4:17:a6:a3:
e5:2e:9f:b7:f0:32:63:d6:5e:2d:d7:99:92:a0:3f:
9e:2a:4e:f2:4d:9a:d0:69:5c:68:eb:8d:6f:57:e6:
e1:d7:eb:d2:21:be:bc:70:f0:f9:53:6c:61:0f:46:
ff:8f:64:49:1e:da:36:ae:8f:d7:4e:c9:5f:84:9d:
61:45:f5:8a:aa:ca:9b:40:4d:30:e6:be:4d:15:f2:
bc:49:1f:0e:64:6b:88:40:1a:ac:43:6c:70:63:3c:
75:26:ed:68:bf:59:b8:e7:07:e1:59:83:70:16:f3:
e6:56:80:52:06:20:c3:e2:b6:f0:42:b2:5b:85:26:
e3:3d:26:30:b1:a4:f3:11:e7:a7:08:58:d0:86:41:
d7:dc:f1:17:eb:2b:cc:6d:0b:bb:4c:e9:02:08:59:
1f:c8:5a:35:8a:5e:73:2a:f1:19:10:8d:30:a3:10:
3b:84:6f:e1:47:6d:86:58:ce:3e:1f:c9:b8:ea:bf:
38:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2E:49:C7:A7:E1:6F:B6:44:00:20:95:3A:77:35:4B:BE:8C:2C:38
X509v3 Authority Key Identifier:
keyid:BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/9DB1D80C01EF11EDA0677F53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.25.124.0/22
IPv6:
2406:db00::/32
Signature Algorithm: sha256WithRSAEncryption
33:75:dc:a2:4c:94:41:58:31:7f:e1:68:4a:12:3d:e9:86:76:
bf:85:da:a5:d5:36:d9:0d:39:9d:a3:bc:a2:fe:a1:fc:91:18:
03:65:e6:27:e5:ff:51:52:72:25:30:10:24:0f:1e:35:be:ce:
7c:d2:a0:13:16:81:75:b3:cc:39:cd:5a:58:20:7d:8b:92:24:
0f:13:f6:6b:af:9d:d8:0f:4d:b6:af:80:a5:72:92:ab:95:d7:
4f:14:a8:f1:a8:87:0f:16:39:37:c4:cf:48:ff:69:95:00:ae:
c8:76:40:3a:b9:f4:26:2a:f0:ba:02:3d:1e:09:4c:ff:12:1e:
d6:aa:6e:04:8b:b8:1e:5e:7d:94:b7:d2:0e:67:79:87:94:26:
9a:c0:1c:c9:fe:66:c7:36:68:1b:b3:ec:95:b5:a8:12:d6:08:
d7:d3:94:c4:c6:92:7c:fd:6d:e2:e3:90:b0:f4:1d:de:ff:e3:
af:3a:3c:d0:5d:20:8b:40:0e:fc:90:cc:67:09:d8:74:a0:84:
21:3f:4e:f2:ef:13:67:56:37:ae:a1:80:40:df:ae:36:32:64:
d2:4f:7c:3a:96:5a:69:74:b4:4b:46:f8:15:b5:2f:77:2e:7c:
e6:d9:24:4d:81:d4:c7:fb:c3:9a:8e:c1:8d:6d:ea:76:e2:79:
e9:8e:c1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:57 2024 by rpki-client on console-fra.rpki-client.org