Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131927/E99772F896E911EBB258E562C4F9AE02/9FD744CE96EC11EBA1E20768C4F9AE02.roa
File: 9FD744CE96EC11EBA1E20768C4F9AE02.roa (raw, json)
Hash identifier: +Vd0IaQ4jj/+4L8N/wel9tJtKXTtdDD5MMfIEsnvfdc=
Subject key identifier: BD:8D:98:6C:22:F6:AF:1D:4B:02:72:91:05:79:FA:C8:A5:63:A4:F1
Certificate issuer: /CN=A9131927/serialNumber=7E8103C8659B2DF67273B504AF75C66665310116
Certificate serial: 058C
Authority key identifier: 7E:81:03:C8:65:9B:2D:F6:72:73:B5:04:AF:75:C6:66:65:31:01:16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foEDyGWbLfZyc7UEr3XGZmUxARY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131927/E99772F896E911EBB258E562C4F9AE02/9FD744CE96EC11EBA1E20768C4F9AE02.roa
Signing time: Mon 01 Jul 2024 00:22:18 +0000
ROA not before: Mon 01 Jul 2024 00:22:18 +0000
ROA not after: Wed 30 Oct 2024 00:00:00 +0000
asID: 16509
IP address blocks: 103.165.160.0/24 maxlen: 24
2001:df6:6880::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 Aug 2024 22:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1420 (0x58c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131927/serialNumber=7E8103C8659B2DF67273B504AF75C66665310116
Validity
Not Before: Jul 1 00:22:18 2024 GMT
Not After : Oct 30 00:00:00 2024 GMT
Subject: CN=6681f6b9-ae94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7d:a3:df:43:4c:8f:f1:67:0e:b6:c8:9c:bb:
f7:bd:3a:08:59:18:fa:07:09:7c:31:3f:b4:19:54:
a7:15:cc:9e:db:3f:27:34:b7:34:e1:0e:a4:56:a1:
10:a2:4c:31:81:6c:77:6d:28:8c:f5:85:57:73:d2:
07:d2:36:25:e6:01:71:7f:f8:6d:8b:e3:56:72:f9:
81:bf:fd:fd:42:8a:b4:b9:7e:99:a8:96:71:46:54:
a1:80:0e:b3:aa:91:c1:7b:83:c5:80:4f:3e:04:69:
42:a4:be:23:2f:2c:92:29:36:60:e2:6b:38:e2:f0:
3a:7d:20:a9:88:72:45:08:6a:06:00:f7:3a:77:3a:
d8:d1:62:3f:13:41:62:83:7b:e3:98:d1:f8:3e:d3:
83:78:84:8a:75:a1:ad:15:7c:50:29:1c:d0:68:14:
55:46:b5:2d:d9:81:84:93:db:8f:3f:eb:d5:b4:fa:
93:39:72:13:2f:14:8c:dc:47:2f:19:f0:75:64:61:
6c:d2:3f:aa:6b:07:dc:19:67:e4:d0:34:48:77:d0:
a7:32:d4:57:1f:d2:72:fd:b1:33:9b:b5:0b:65:b8:
d8:15:8f:f0:9a:d4:e3:8e:2a:64:80:33:56:84:0e:
60:38:72:11:f0:fb:55:78:be:cf:8c:8a:10:90:45:
79:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8D:98:6C:22:F6:AF:1D:4B:02:72:91:05:79:FA:C8:A5:63:A4:F1
X509v3 Authority Key Identifier:
keyid:7E:81:03:C8:65:9B:2D:F6:72:73:B5:04:AF:75:C6:66:65:31:01:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131927/E99772F896E911EBB258E562C4F9AE02/foEDyGWbLfZyc7UEr3XGZmUxARY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foEDyGWbLfZyc7UEr3XGZmUxARY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131927/E99772F896E911EBB258E562C4F9AE02/9FD744CE96EC11EBA1E20768C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.165.160.0/24
IPv6:
2001:df6:6880::/48
Signature Algorithm: sha256WithRSAEncryption
44:a3:12:af:51:bf:72:b2:ca:3c:db:8c:a3:61:6e:4a:66:a8:
94:9d:04:7c:73:73:d8:9f:85:39:54:68:67:e3:c3:43:d3:14:
cc:85:1b:60:1a:7b:5a:ea:ac:67:f9:f7:65:4c:74:16:46:c1:
e6:0e:ae:2d:25:9d:c5:54:11:cb:b1:df:0e:cc:9b:8b:a9:02:
3c:a0:ba:e3:c1:1b:eb:a9:23:8a:04:2d:1e:cd:27:16:5d:77:
66:d6:db:27:e7:dc:c8:54:3e:d6:63:fa:48:ac:4d:e5:6f:88:
59:83:a9:66:04:9d:0d:d7:33:50:5c:f6:d0:aa:30:7a:33:c8:
79:d7:1b:6b:0e:cd:8c:5e:ac:4e:d3:e7:40:1e:78:47:91:9b:
ac:5e:b7:c1:2e:d8:6c:25:aa:6e:1c:cf:56:39:e4:f0:88:c5:
40:65:8e:6b:fe:88:a1:8b:a6:a4:0e:38:93:32:2d:4b:25:fc:
1e:48:4f:64:16:75:21:17:cd:0e:12:aa:90:1e:93:06:a6:88:
cd:42:0e:c3:49:b9:b1:5f:12:d0:c1:26:0e:93:21:70:eb:04:
45:af:2d:f4:8f:64:29:c8:f6:f7:da:9d:8e:7a:2d:c5:a1:f5:
4d:9a:12:25:79:e3:2d:15:9d:5e:bf:d8:4b:d8:b5:33:a0:61:
09:1c:34:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 02:27:08 2024 by rpki-client on console-ams.rpki-client.org