Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/8F1265301E4D11ED8E43BE2DC4F9AE02.roa
File: 8F1265301E4D11ED8E43BE2DC4F9AE02.roa (raw, json)
Hash identifier: yeuoU/dgyn6HT1a90g8SdlTmQ7iLxWcuH9H/2b77o3s=
Subject key identifier: 38:12:98:71:06:7B:9D:02:81:EF:89:A5:9F:43:2B:FC:77:94:2A:BB
Certificate issuer: /CN=A912BAAD/serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576
Certificate serial: 0B3B
Authority key identifier: DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/8F1265301E4D11ED8E43BE2DC4F9AE02.roa
Signing time: Thu 30 May 2024 20:35:11 +0000
ROA not before: Thu 30 May 2024 20:35:11 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 139722
IP address blocks: 103.113.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jul 2024 09:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2875 (0xb3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BAAD/serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576
Validity
Not Before: May 30 20:35:11 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6658e2ff-8a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fe:88:d5:8f:21:5d:b4:e2:76:b9:1b:df:c7:
70:39:db:d3:bc:32:2e:3b:a0:7c:98:1f:34:02:e3:
98:75:2b:97:b6:a7:11:3f:ba:b1:08:3c:9d:75:97:
8c:65:3f:96:7c:61:46:c8:d5:84:fa:2c:89:69:e2:
42:7d:62:e3:69:bc:ed:8b:6a:d9:fb:d0:48:13:e5:
91:59:4e:b8:a2:81:f8:bf:6c:b7:f7:bf:6a:9b:75:
0f:98:f5:bd:3a:77:79:54:bd:4c:24:cf:32:26:30:
14:96:0a:cd:5d:72:c3:2b:84:b2:8d:e5:f2:88:6c:
80:87:45:86:c5:a2:78:5b:61:34:49:0d:4f:12:db:
2f:68:b8:55:98:55:47:74:5d:c4:23:a2:cf:29:20:
16:a2:50:3f:6c:e2:90:ad:f8:09:c5:84:1f:aa:36:
fb:85:d9:1e:70:00:c2:f3:9a:cc:e8:75:84:4a:92:
f4:f3:ad:3e:e0:a1:df:99:33:d3:59:17:d9:30:28:
5a:5a:61:28:45:16:4b:dc:fc:64:70:d7:d4:6b:d3:
25:d8:30:14:cd:43:16:bb:80:3f:c2:2c:69:e3:6b:
c4:b7:b0:2e:de:8a:53:ed:35:50:b8:0d:d5:90:1e:
42:03:41:d0:0f:e3:ba:bd:76:3c:f6:a2:03:21:99:
ba:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:12:98:71:06:7B:9D:02:81:EF:89:A5:9F:43:2B:FC:77:94:2A:BB
X509v3 Authority Key Identifier:
keyid:DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/8F1265301E4D11ED8E43BE2DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.113.211.0/24
Signature Algorithm: sha256WithRSAEncryption
63:2e:e9:80:89:7e:75:ae:b3:f3:55:a0:7c:67:1f:46:69:bb:
73:aa:20:44:e0:e8:49:1d:48:36:2e:31:a0:b3:3f:d9:21:17:
bf:00:c7:9c:f8:bb:27:18:73:2d:96:3b:4a:bb:41:f3:e6:c3:
f7:7f:1e:91:97:d8:f8:b8:09:d2:1d:16:54:62:5a:20:39:78:
82:17:bc:40:b6:bc:41:c9:56:d6:38:71:e6:4d:34:08:77:28:
0a:7b:0c:2f:bd:66:2c:07:39:51:91:66:fe:91:80:24:b7:9a:
37:ce:79:ac:e3:82:5e:00:ff:1c:d2:21:de:a2:62:20:61:63:
37:6d:17:22:2d:01:82:de:3c:8a:92:70:a1:09:d7:76:ff:32:
53:7e:83:f7:af:f5:18:e0:e5:69:0c:21:be:25:5c:0d:4b:0b:
e1:97:fa:3f:d6:04:bc:c6:59:88:76:6c:77:25:b6:e3:8f:64:
36:c6:7c:ba:d7:30:92:8d:ad:21:e6:96:38:6a:bc:2e:82:0e:
7f:a4:ae:1a:17:77:a6:8a:88:4c:d2:3a:63:dd:16:f1:f9:b3:
4f:fd:d2:39:2b:d7:2e:9c:60:34:66:35:97:f7:43:45:94:1c:
22:26:68:f1:9d:51:ef:34:ed:76:fd:ff:53:a4:61:ab:1b:78:
b8:84:96:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 11:51:32 2024 by rpki-client on console-fra.rpki-client.org