Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/E444D58C3DBA11EE89340463C4F9AE02.roa
File: E444D58C3DBA11EE89340463C4F9AE02.roa (raw, json)
Hash identifier: baH0SYtKW9C3JkjIPGYZyNOVhb4NlqoH9UzXz+/uWZw=
Subject key identifier: AD:A9:D4:36:68:7E:DC:9E:D3:16:1D:E4:E6:A0:06:F0:BE:12:20:6F
Certificate issuer: /CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43
Certificate serial: 015D
Authority key identifier: BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/E444D58C3DBA11EE89340463C4F9AE02.roa
Signing time: Fri 18 Aug 2023 11:32:20 +0000
ROA not before: Fri 18 Aug 2023 11:32:20 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.25.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349 (0x15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43
Validity
Not Before: Aug 18 11:32:20 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64df56c4-c7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:45:af:f8:6a:80:d0:d3:c3:0b:6d:fe:c8:f4:
eb:3a:58:59:65:c8:0f:1c:d8:88:49:3e:c1:82:0c:
4c:9c:fb:14:53:61:dd:fe:de:ab:dd:dd:8d:40:be:
d9:43:d3:77:e1:d4:65:e7:0f:2c:0f:8a:0c:79:a3:
08:bc:8d:f7:19:15:6c:19:d9:b1:75:e3:f8:d3:aa:
7d:96:00:97:13:ef:9c:2b:37:8a:4f:4b:45:94:1c:
29:5f:1d:ad:c3:31:bf:0b:8e:bb:e6:28:55:30:82:
6c:6c:1f:93:3e:52:70:1f:a3:cc:29:58:31:b0:9c:
6a:58:bd:bc:cd:7f:a3:29:c7:b3:c8:06:f9:59:a7:
43:16:38:77:17:61:e7:29:82:35:75:29:e5:23:0d:
11:d8:5b:b7:e9:b3:f7:66:14:5e:e1:10:cb:b5:f8:
c7:c9:dc:6c:32:8c:b8:fa:d8:f6:5c:31:dd:fa:4a:
4e:94:0b:51:bd:80:fb:d1:64:21:bb:5b:5f:9c:67:
48:da:a8:c3:e8:06:ef:33:04:42:46:47:d7:66:ad:
7e:b6:b4:a3:6f:15:7d:98:60:c6:1a:e0:cd:cd:fb:
db:04:7c:cc:9a:bc:16:fd:c2:5b:99:36:fe:b1:1f:
d8:89:b4:8e:f6:eb:37:3f:42:10:22:c3:46:a6:ca:
47:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A9:D4:36:68:7E:DC:9E:D3:16:1D:E4:E6:A0:06:F0:BE:12:20:6F
X509v3 Authority Key Identifier:
keyid:BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/E444D58C3DBA11EE89340463C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.25.126.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e2:c5:d3:fe:ad:08:62:31:fb:7a:87:f4:1f:83:70:6f:a6:
8d:3c:16:1a:b6:99:f3:cd:57:dd:bc:3d:29:19:13:2a:90:12:
2c:cc:ce:e4:c0:c1:88:50:f1:a8:98:26:e1:2c:1c:ac:ad:a4:
fc:f2:fe:37:20:4d:e1:07:56:f1:a7:bb:81:3d:41:7b:3c:31:
f4:e0:33:f2:f3:c6:08:fd:eb:4c:45:b4:89:91:94:f8:35:6a:
c6:cb:75:1f:76:ed:89:09:06:85:53:87:0d:72:ce:be:73:36:
3f:f7:2f:6c:e9:b3:ca:ce:40:7a:49:55:2f:c2:33:a7:60:3f:
d3:cd:09:c0:25:f6:28:99:3e:97:96:4e:bf:74:90:56:64:8d:
91:59:08:e7:69:87:48:ec:ed:47:44:59:c5:4f:6f:0b:41:c2:
29:32:6c:87:96:4f:57:d1:1e:3c:9e:61:7c:73:f7:96:25:96:
84:56:f0:95:78:34:be:46:01:f1:d2:23:fb:06:9e:92:85:3b:
b3:18:5c:6a:ed:e1:be:99:97:d6:97:71:a3:99:33:0b:ec:61:
e0:07:d3:96:e6:61:5a:07:fe:ec:9c:04:9f:a7:0c:a4:4f:07:
28:aa:46:4b:44:df:d7:8e:44:fb:4a:a9:26:9d:b9:cf:59:92:
0d:73:99:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 09:33:59 2023 by rpki-client on console-ams.rpki-client.org