Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/74F10AEE7C4711EFACFB1228C4F9AE02.roa
File: 74F10AEE7C4711EFACFB1228C4F9AE02.roa (raw, json)
Hash identifier: Z8lmLYIDiFSZc9ZCPC2SCtmrvZRnNrLRaA9Hz+r30/M=
Subject key identifier: 1A:63:8A:79:2E:61:CF:EF:CC:07:3D:B9:47:74:5B:3D:62:26:83:3B
Certificate issuer: /CN=A912C2B1/serialNumber=CF3E7B742A4C52E0F8F7F8E7405FB2BBBCF4CAA3
Certificate serial: 0CE7
Authority key identifier: CF:3E:7B:74:2A:4C:52:E0:F8:F7:F8:E7:40:5F:B2:BB:BC:F4:CA:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/74F10AEE7C4711EFACFB1228C4F9AE02.roa
Signing time: Fri 08 Nov 2024 18:06:44 +0000
ROA not before: Fri 08 Nov 2024 18:06:44 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 30823
IP address blocks: 103.143.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 11:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3303 (0xce7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2B1/serialNumber=CF3E7B742A4C52E0F8F7F8E7405FB2BBBCF4CAA3
Validity
Not Before: Nov 8 18:06:44 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=672e5334-3944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1e:3f:6e:a5:12:20:60:ca:fa:63:00:21:4a:
c1:9b:f3:34:ae:50:bd:7a:72:03:34:1b:7c:74:5a:
67:69:68:3e:60:18:3f:a5:84:0b:83:c4:be:00:9c:
7b:05:ed:b5:16:f0:34:c0:fb:f2:c0:91:54:bb:a8:
f5:a6:7e:f9:fe:c3:f5:b8:3f:32:0b:3e:31:10:a0:
92:e9:f8:29:6e:36:1b:92:63:ee:d6:56:80:f8:1d:
63:c3:9a:04:31:da:70:16:09:ae:b0:9a:93:e6:91:
0e:94:9a:f0:e2:ca:6a:64:96:54:3d:ca:5f:79:d2:
34:a6:74:16:d9:46:78:cc:32:89:46:ef:fb:48:1b:
75:1c:b8:95:08:fe:b3:51:16:41:86:20:bb:51:c2:
d5:87:36:a2:d8:b5:c0:f5:80:0a:4c:d7:6d:ff:80:
28:1d:bd:c7:76:ae:df:60:19:40:2f:a9:b1:19:47:
4d:e1:89:9e:b4:2c:0c:ea:20:11:2b:fe:92:a3:ab:
f2:e9:01:2a:01:e0:23:e1:96:f4:b0:78:d3:ad:7f:
cd:b5:d3:9b:8e:92:d9:8c:21:eb:14:9e:ac:a7:63:
5f:e6:99:3d:d3:07:38:88:0c:61:30:37:70:d4:c5:
1b:64:3d:ae:e7:d8:83:a1:0a:9d:f3:13:35:64:14:
ce:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:63:8A:79:2E:61:CF:EF:CC:07:3D:B9:47:74:5B:3D:62:26:83:3B
X509v3 Authority Key Identifier:
keyid:CF:3E:7B:74:2A:4C:52:E0:F8:F7:F8:E7:40:5F:B2:BB:BC:F4:CA:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/74F10AEE7C4711EFACFB1228C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.143.76.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ff:b1:8e:e9:af:29:16:28:38:95:db:c9:6e:a5:a0:61:4c:
98:c9:e4:18:5b:6e:71:b3:0d:8a:2a:db:13:08:08:3e:b3:94:
2e:92:fe:9e:b3:75:7e:b6:7a:3f:ef:62:ed:82:56:a2:bd:cc:
bc:2c:37:8f:80:c1:5e:3f:4a:9e:87:6d:fb:ed:2e:b0:19:30:
4b:c2:0a:87:a6:a1:e0:2c:c3:88:d7:31:fc:9b:4c:66:ae:3e:
3e:7e:42:c9:d9:25:5f:0b:f5:d6:c5:87:02:68:7f:8f:47:9a:
ca:3c:fe:5f:2d:8a:63:e1:a5:22:de:17:66:09:1a:60:fc:66:
4e:9b:49:9b:07:f0:91:5b:c9:19:09:06:92:50:49:1a:e7:62:
42:6b:8a:38:ee:42:5e:e0:80:3c:bd:24:70:40:f2:a4:14:6a:
5b:61:be:a9:76:a5:db:46:ca:6a:00:1a:71:26:23:c2:42:5c:
2a:75:9c:86:61:2f:12:e0:e5:87:40:cb:21:1d:18:a6:da:2e:
c9:c6:ed:af:6b:14:63:b4:05:14:29:c9:8a:60:4e:13:c3:9d:
6d:e8:d4:78:df:60:b0:17:0e:81:b1:0c:f2:be:86:df:a4:37:
51:84:fc:fe:71:54:34:26:51:5a:36:47:29:c7:7f:e9:31:70:
d1:ed:13:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 14:01:49 2024 by rpki-client on console-fra.rpki-client.org