Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/D4CA6A8820BC11EEA6EA411FC4F9AE02.roa
File: D4CA6A8820BC11EEA6EA411FC4F9AE02.roa (raw, json)
Hash identifier: mBNKlJjr3BdZNOLCNAoJrw7ZKzJVJ3KSLvs1AzBJH6w=
Subject key identifier: A2:E0:35:4F:AC:08:1C:51:F1:D0:00:90:C4:17:2F:62:07:D1:6C:2A
Certificate issuer: /CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43
Certificate serial: 0224
Authority key identifier: BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/D4CA6A8820BC11EEA6EA411FC4F9AE02.roa
Signing time: Wed 05 Jun 2024 05:21:47 +0000
ROA not before: Wed 05 Jun 2024 05:21:47 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 59216
IP address blocks: 103.25.127.0/24 maxlen: 24
2406:db00::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 25 Jul 2024 05:18:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43
Validity
Not Before: Jun 5 05:21:47 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=665ff5eb-7250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:58:5e:f1:43:0a:6d:23:27:c8:0a:32:25:f2:
19:b9:64:67:59:c3:36:f3:64:05:cd:cc:55:28:fe:
0c:a8:3e:cf:90:95:2a:19:fd:0e:99:55:b4:8c:a7:
68:2d:c5:4d:c9:a4:10:33:7d:0d:cc:ae:3b:1e:49:
2e:72:ec:98:a8:89:db:76:30:48:d9:04:20:39:03:
6c:bf:3c:e9:5e:eb:e9:12:f5:b8:dd:7d:e9:b8:ff:
c7:c8:93:46:9a:3f:0c:c9:da:c9:45:05:29:10:a9:
49:28:21:68:b4:03:6a:8c:fe:75:2e:2f:01:dc:40:
5a:30:ff:51:e5:a2:6b:47:54:a2:68:68:e3:ae:f3:
1f:f1:0d:4b:91:38:e7:b3:56:b9:0b:bc:56:de:07:
a1:b1:53:10:bb:34:a5:3f:26:7d:47:38:e7:1c:96:
cd:0a:5c:37:63:f0:4d:a5:66:11:80:25:cc:7d:74:
84:b7:10:d9:af:a5:96:b1:78:39:d3:a3:8d:4e:11:
74:70:f3:f4:d8:18:a5:7c:a3:75:cc:0a:54:37:f0:
34:58:5d:ea:21:f0:70:f7:de:88:7e:c4:fb:6a:e3:
49:95:8f:55:1b:c4:11:2f:ce:7b:a5:27:9d:2e:86:
bf:28:92:34:e5:83:a8:a0:55:bc:1a:7b:68:6c:3f:
88:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E0:35:4F:AC:08:1C:51:F1:D0:00:90:C4:17:2F:62:07:D1:6C:2A
X509v3 Authority Key Identifier:
keyid:BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/D4CA6A8820BC11EEA6EA411FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.25.127.0/24
IPv6:
2406:db00::/32
Signature Algorithm: sha256WithRSAEncryption
66:13:aa:0e:e4:64:9a:a6:4d:96:12:b7:c9:4f:f1:8a:9e:cb:
38:47:17:8f:bf:47:d9:0f:fe:28:df:09:96:60:2f:5d:9c:bc:
07:b6:9a:a4:e9:75:bd:15:62:66:34:5d:8b:17:03:31:65:d4:
9b:46:c2:fd:fe:31:0f:af:12:d2:91:c8:47:fe:b4:45:cd:4c:
d5:e3:e5:77:82:26:84:58:d8:80:f0:29:b2:b2:49:f2:3f:93:
80:eb:34:08:7b:5d:42:a6:5e:a5:3b:4d:3b:87:69:9b:65:53:
3c:09:2b:de:ca:fb:77:34:96:07:e6:b5:3d:49:0a:a6:a1:cd:
55:e5:1b:ba:5a:d4:ae:cc:eb:6a:fd:66:ad:76:fa:b6:52:68:
67:ff:45:4d:e7:86:65:b9:36:01:34:29:dc:f9:c8:a9:96:d3:
ba:46:df:a2:ef:02:74:98:01:9c:99:05:6c:bb:cc:68:e5:45:
21:5b:79:9d:59:9d:76:39:8c:66:41:69:d3:89:43:cf:55:69:
d1:ad:eb:fd:5a:8f:16:10:27:e9:4d:ce:7c:de:54:8b:b5:0f:
c5:68:c3:30:93:ff:94:b0:63:ba:5d:03:7b:6c:91:36:74:98:
18:0d:ae:07:59:65:4b:2a:45:d1:6c:b0:8c:7e:01:74:43:05:
d9:89:dc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 07:42:30 2024 by rpki-client on console-ams.rpki-client.org