Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/FE7AD4B4C3D611ED9FE9A84EC4F9AE02.roa
File: FE7AD4B4C3D611ED9FE9A84EC4F9AE02.roa (raw, json)
Hash identifier: 50j1ig9grKUj7tcIghN3pPvkVTUcrSGBJ7Ep6ZzmB7M=
Subject key identifier: FC:1C:55:FE:7B:6F:29:84:30:CF:CC:6C:5A:27:DD:94:AD:AC:55:B3
Certificate issuer: /CN=A912C2B1/serialNumber=CF3E7B742A4C52E0F8F7F8E7405FB2BBBCF4CAA3
Certificate serial: 0CE8
Authority key identifier: CF:3E:7B:74:2A:4C:52:E0:F8:F7:F8:E7:40:5F:B2:BB:BC:F4:CA:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/FE7AD4B4C3D611ED9FE9A84EC4F9AE02.roa
Signing time: Fri 08 Nov 2024 18:06:45 +0000
ROA not before: Fri 08 Nov 2024 18:06:45 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 43043
IP address blocks: 103.143.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 11:27:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3304 (0xce8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C2B1/serialNumber=CF3E7B742A4C52E0F8F7F8E7405FB2BBBCF4CAA3
Validity
Not Before: Nov 8 18:06:45 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=672e5335-f264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:53:2c:49:92:d1:71:8f:8d:0c:ac:96:69:e0:
21:6e:03:6a:88:8d:bd:b2:02:48:86:38:92:32:6e:
7d:25:27:94:7f:c8:61:73:2f:13:2a:d7:cf:4c:55:
a6:b9:7d:6a:32:b3:fd:1e:c2:a4:ff:a2:79:97:11:
b4:18:12:da:11:66:16:6f:f9:29:20:e1:d9:36:74:
95:eb:0a:9f:3c:3b:51:83:9d:e1:c9:8e:b7:f7:13:
66:b4:4f:83:df:ae:37:77:64:73:da:af:f8:4b:45:
4b:ca:a7:ad:77:07:f2:cd:ff:32:50:76:07:82:1a:
f6:4e:ec:83:85:94:89:cb:17:cd:60:f0:86:3f:f3:
82:92:76:8b:d5:1d:71:5a:12:07:7b:04:37:4f:98:
66:62:43:10:c6:cc:e1:22:0d:24:a7:e0:69:b6:ff:
41:62:02:00:ba:06:4d:fa:b5:0c:b8:65:7e:db:49:
ec:29:b2:0f:fa:ed:7a:37:6e:c3:2b:f8:4c:4d:5c:
c6:81:73:dc:21:c4:88:93:aa:59:3e:f3:38:94:86:
52:20:8d:57:28:45:40:3a:29:a7:5d:01:38:ac:87:
70:00:5c:a3:60:73:c7:20:c1:46:ac:4b:44:0f:c6:
ac:e4:21:4d:00:9e:c4:6f:fe:07:32:d9:ca:e3:1a:
72:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1C:55:FE:7B:6F:29:84:30:CF:CC:6C:5A:27:DD:94:AD:AC:55:B3
X509v3 Authority Key Identifier:
keyid:CF:3E:7B:74:2A:4C:52:E0:F8:F7:F8:E7:40:5F:B2:BB:BC:F4:CA:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/FE7AD4B4C3D611ED9FE9A84EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.143.76.0/24
Signature Algorithm: sha256WithRSAEncryption
33:65:92:44:fc:32:d8:52:f9:9d:4a:e3:c2:cb:ea:16:7c:d7:
56:76:eb:53:48:3e:3e:ca:d7:42:ef:f2:ff:15:0e:d8:fb:ac:
32:62:71:e1:4d:32:ae:0a:55:7d:0f:26:78:4e:08:d5:82:5d:
c6:32:f6:35:e0:57:d3:0d:f5:1e:21:db:71:52:db:88:ab:a7:
3b:8c:55:83:2c:ef:b0:fd:a6:2b:71:65:ec:0f:db:72:32:00:
28:9f:d1:4c:0a:51:b7:1c:23:6d:f3:c3:40:02:e8:bc:05:af:
87:c8:3b:4d:fa:9a:d3:08:38:ac:e1:f7:a6:ba:07:63:c5:e6:
77:6a:0c:d2:74:56:c7:59:15:b7:87:ea:29:55:17:0a:70:95:
63:75:10:02:1d:30:e6:af:96:87:b5:3a:67:f3:0e:c1:ca:a6:
d1:23:18:47:6d:75:01:a6:2b:79:36:52:dc:df:90:e0:38:c3:
fd:d6:a2:57:b9:be:fe:51:c1:8a:9c:65:5f:bf:b9:b2:88:b5:
9d:7d:df:7c:a9:02:78:be:2f:5c:77:78:bd:30:3a:36:4a:e7:
dd:0b:f9:ba:dd:cf:78:c8:72:24:b6:98:20:bd:a3:14:88:a6:
4d:87:e0:af:49:ee:5d:cc:22:b2:a2:ce:67:3c:66:30:34:0c:
19:ae:fc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 14:01:49 2024 by rpki-client on console-fra.rpki-client.org