Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6B4F0D8E392911EB84534380C4F9AE02.roa
File: 6B4F0D8E392911EB84534380C4F9AE02.roa (raw, json)
Hash identifier: 6QNX9cg518yMSC4thvkQ9E4rdDZfAD5IQlatX4TieYY=
Subject key identifier: 61:E8:1A:70:A9:7E:30:11:D5:67:B6:1A:93:73:14:2F:6F:88:4C:C1
Certificate issuer: /CN=A912A138/serialNumber=E889DDD5542C6D2C9DC740E1246A9E748E751352
Certificate serial: 0689
Authority key identifier: E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6B4F0D8E392911EB84534380C4F9AE02.roa
Signing time: Fri 12 Jul 2024 23:42:44 +0000
ROA not before: Fri 12 Jul 2024 23:42:44 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 139281
IP address blocks: 103.140.211.0/24 maxlen: 24
180.189.52.0/23 maxlen: 23
180.189.54.0/23 maxlen: 23
2405:4c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 03 Oct 2024 09:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1673 (0x689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A138/serialNumber=E889DDD5542C6D2C9DC740E1246A9E748E751352
Validity
Not Before: Jul 12 23:42:44 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6691bf74-e884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:47:2c:f3:ba:76:e7:3a:cd:3a:4d:db:7e:98:
20:63:69:cc:d5:13:8f:6e:98:5a:a6:0b:d5:03:99:
2e:43:d1:6c:5e:c7:51:6f:9e:47:64:20:e2:83:b3:
0c:55:dc:4f:01:78:1a:1e:70:2e:ca:6d:d6:b4:7f:
c0:4f:f6:dd:7d:e9:18:a5:05:a0:48:de:4f:7d:23:
1a:05:bb:e7:3a:88:08:67:04:6d:85:3f:81:5f:df:
78:b8:75:25:40:11:48:32:18:c9:ef:f2:ee:d9:06:
7f:d2:a0:0c:5c:38:45:7c:a1:5d:03:35:19:1f:78:
bf:21:a1:aa:79:8b:4b:15:f7:30:18:51:b3:9b:cd:
70:a4:f5:d5:f6:cc:28:6c:ed:b6:36:36:92:fe:dc:
29:ed:4b:38:1a:a3:93:f9:bc:13:e8:02:df:c1:6d:
38:90:ac:ce:c4:ce:43:90:64:87:38:67:c0:e9:5f:
60:32:18:26:86:38:98:02:e2:98:f7:35:ab:77:58:
42:dd:06:7b:e2:0e:af:9d:df:fb:40:2a:39:53:d9:
52:c2:54:b7:f7:f4:89:38:13:55:b4:7a:b3:65:43:
0b:60:2f:5b:26:18:c1:cb:79:f2:d1:8b:0a:9e:da:
b2:42:72:bd:5f:c8:29:ac:c7:92:f9:76:a4:b7:85:
0f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E8:1A:70:A9:7E:30:11:D5:67:B6:1A:93:73:14:2F:6F:88:4C:C1
X509v3 Authority Key Identifier:
keyid:E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6B4F0D8E392911EB84534380C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.211.0/24
180.189.52.0/22
IPv6:
2405:4c0::/32
Signature Algorithm: sha256WithRSAEncryption
70:ac:ea:f9:e1:47:16:51:89:80:ac:76:36:c3:13:49:dd:f4:
7f:59:69:b8:be:52:00:57:bc:e9:23:e7:85:07:b0:2e:5e:a1:
00:2f:c8:4d:72:85:13:4c:da:82:54:d4:c4:4a:1a:f6:0c:6c:
97:0a:dd:5d:54:4b:64:74:64:fd:c9:a3:37:05:28:21:9e:ce:
8c:1d:1a:4a:35:cd:0d:db:82:b2:ce:6c:f6:a6:96:8e:07:44:
26:59:e7:4b:3f:fc:b4:0a:32:9b:24:8e:bd:70:9a:0a:d1:5c:
e1:1d:40:cb:8f:bc:c1:66:ba:d8:7c:b3:01:62:10:cc:82:58:
fc:7d:3f:3b:09:fa:c4:d1:30:07:ce:e4:ff:2f:0b:41:f5:41:
7c:fa:20:30:13:76:5c:7f:c9:69:72:7e:c6:e9:dd:dd:f8:0d:
ca:a7:ae:a2:b6:c5:9a:b9:91:b7:a2:0f:86:01:5e:6e:c8:8d:
14:4f:5a:12:32:eb:5b:de:44:ad:da:6a:73:c8:5b:b2:b8:da:
12:6e:38:09:1e:42:0a:5b:d7:8b:59:bc:39:12:09:97:a1:a8:
96:4e:d0:f3:b1:39:0b:24:3a:12:1d:ce:cb:1f:8a:bb:6a:46:
a6:fd:2b:ce:13:90:78:23:fc:5c:8c:d4:88:67:5d:fe:45:cb:
52:9b:2b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 12:20:05 2024 by rpki-client on console-ams.rpki-client.org