Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/2DC1D20ED58A11EC909EE44AC4F9AE02.roa
File: 2DC1D20ED58A11EC909EE44AC4F9AE02.roa (raw, json)
Hash identifier: Y6OsSHNeVk9ngp6pYoUl+xgfCxlC9H/4ljl58PHlhJc=
Subject key identifier: 7E:73:24:6E:87:83:46:DB:D0:C9:37:51:0E:F3:A6:B5:F1:21:26:00
Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Certificate serial: 13C7
Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/2DC1D20ED58A11EC909EE44AC4F9AE02.roa
Signing time: Tue 24 Oct 2023 17:24:50 +0000
ROA not before: Tue 24 Oct 2023 17:24:50 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 135106
IP address blocks: 103.209.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 10:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5063 (0x13c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Validity
Not Before: Oct 24 17:24:50 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=6537fde1-25bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:57:75:55:6d:05:ee:f4:6c:b0:0e:ae:5f:
f3:19:49:a6:6d:bf:7e:a3:0c:90:6b:fd:5e:0e:32:
14:d8:f5:4c:e2:6c:d5:f5:8f:63:31:ce:1b:83:b3:
57:10:c1:5e:a6:ca:b2:42:ad:c2:88:43:b6:38:bd:
bf:39:72:b2:43:18:0a:86:62:71:23:46:2c:d3:09:
b8:3b:56:b3:d0:cc:69:4d:fb:24:69:1c:18:7a:20:
52:95:4a:45:cf:d1:b1:81:21:d5:15:46:c7:25:5d:
40:e7:2f:25:23:90:6d:f5:1e:27:1d:a0:3e:a2:a9:
9d:65:af:98:65:23:84:76:8f:48:56:5f:31:f0:a3:
42:a9:54:99:a4:b9:7f:24:f9:8e:49:6e:c0:c1:a3:
01:8b:e6:21:f6:2a:d9:0b:7d:9e:a3:52:b3:4a:ec:
a5:26:98:3c:d7:18:89:9f:f5:f4:ac:da:63:56:7c:
cc:d3:85:bf:44:d2:dd:d2:ba:dd:74:1e:ea:04:87:
5d:ee:ab:47:5f:9a:d9:ae:9a:d8:28:75:d9:09:2e:
46:85:c5:54:fd:3c:ff:33:9a:02:8b:be:24:73:bf:
06:fc:52:c8:5b:99:c6:fe:b5:08:43:c4:5d:5f:32:
87:98:ff:f0:be:ac:15:be:d4:cc:fb:5a:f7:e1:e4:
7c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:73:24:6E:87:83:46:DB:D0:C9:37:51:0E:F3:A6:B5:F1:21:26:00
X509v3 Authority Key Identifier:
keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/2DC1D20ED58A11EC909EE44AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.209.124.0/24
Signature Algorithm: sha256WithRSAEncryption
00:b2:48:27:d7:91:26:e9:0f:ae:01:69:b4:b6:ba:e5:e6:06:
19:f9:91:8d:28:1e:85:9b:d9:95:2d:db:08:b6:7d:05:eb:fd:
e1:1c:b9:bb:72:c8:82:46:70:a2:2d:54:56:3d:c9:c6:6f:3e:
8a:c1:57:8c:96:b9:d5:9a:49:d3:3d:bf:df:fe:96:9a:a7:65:
3e:53:a0:95:bd:d3:ed:88:bd:bf:8d:fd:61:82:53:36:26:35:
1d:c3:69:20:4f:a8:64:6f:2f:e3:6e:5b:ed:60:e0:88:c3:c8:
16:86:f7:b9:4d:b6:9c:23:83:bf:58:c5:6b:c0:28:ae:d1:f4:
85:dd:3b:2a:56:59:dd:59:79:47:7f:2e:ae:78:e2:ff:e6:05:
e5:87:c4:9a:11:01:72:9a:37:9a:b5:17:32:ae:e1:ad:4a:e5:
7e:f8:c2:26:d0:28:a2:ee:33:fb:71:f0:25:f9:28:ce:a7:70:
ff:25:5a:d5:b0:50:47:51:31:22:5d:89:da:9e:d7:bf:b7:4b:
b4:16:40:60:67:62:17:3b:43:09:99:a3:ac:e7:fc:c4:5b:b1:
36:32:75:25:d9:28:3e:ff:73:13:43:1b:d3:e0:eb:71:f0:37:
7d:2d:cf:ce:00:34:80:79:57:cf:2f:bd:ed:b3:23:34:8f:42:
11:3c:60:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 14:06:36 2024 by rpki-client on console-fra.rpki-client.org