Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/A91831A81C3411EFBF05095BC4F9AE02.roa
File: A91831A81C3411EFBF05095BC4F9AE02.roa (raw, json)
Hash identifier: rImvbs5/9Ymyln3pgT/woUK8N6BxhiT4Ry6pxeZWotY=
Subject key identifier: 71:AD:8F:B1:6E:3A:F5:31:7B:D7:5C:45:75:2D:D4:8F:45:71:34:D6
Certificate issuer: /CN=A9136D7D/serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78
Certificate serial: 017F
Authority key identifier: 52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/A91831A81C3411EFBF05095BC4F9AE02.roa
Signing time: Mon 27 May 2024 14:23:17 +0000
ROA not before: Mon 27 May 2024 14:23:17 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 174
IP address blocks: 103.209.92.0/24 maxlen: 24
103.209.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 May 2024 09:15:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383 (0x17f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136D7D/serialNumber=5222A1619DFFF04CB097BB516A074CCD1DAFFC78
Validity
Not Before: May 27 14:23:17 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=66549755-72d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:33:de:11:59:00:8a:43:37:c7:23:2c:cf:
a5:f5:ff:ea:72:c2:87:25:67:ab:06:63:03:35:cc:
07:f2:8a:eb:df:6a:fb:88:e8:d4:65:b7:e9:13:1b:
64:74:8f:23:94:86:71:24:d1:81:ab:a5:9e:84:45:
3a:e8:be:a9:9b:56:2a:42:71:ef:b5:0d:0f:23:05:
fd:2c:dc:41:55:6c:60:59:5f:2b:99:78:0e:b3:0f:
dc:b6:8d:41:7d:a6:88:a9:52:d9:b9:eb:29:ac:d2:
c4:20:3d:53:ec:a1:63:81:47:72:2e:75:2c:5c:a8:
fd:a9:7c:a6:dc:b2:51:e4:5d:55:2c:a7:96:a3:e4:
7e:e4:58:68:f6:80:0a:3c:19:3a:8a:83:c6:b0:c8:
10:0a:10:74:a5:57:25:e1:51:13:4a:cb:f7:40:3a:
3d:b9:4f:b6:13:bf:d5:9c:e5:4f:75:ba:2b:e1:99:
34:bf:a6:d0:dd:34:08:5c:fe:38:4b:0f:8e:87:e5:
34:03:a8:a5:19:72:bc:b0:f2:56:9c:e9:99:ad:45:
36:a9:70:9b:2a:c3:5f:0b:06:bd:d4:4c:d2:3f:43:
bf:ea:72:fb:ea:bf:48:cc:95:84:77:35:df:97:cf:
fa:d7:5a:b1:4e:1a:54:f2:f2:b4:12:21:12:bb:ce:
11:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AD:8F:B1:6E:3A:F5:31:7B:D7:5C:45:75:2D:D4:8F:45:71:34:D6
X509v3 Authority Key Identifier:
keyid:52:22:A1:61:9D:FF:F0:4C:B0:97:BB:51:6A:07:4C:CD:1D:AF:FC:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UiKhYZ3_8Eywl7tRagdMzR2v_Hg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D7D/A339630E275011ED9147B273C4F9AE02/A91831A81C3411EFBF05095BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.209.92.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:19:6c:ad:06:7a:ac:cf:39:35:3d:7f:6a:de:f5:a4:b1:5e:
00:6d:22:98:6e:8e:cf:51:3b:5a:81:8e:34:c5:52:66:2b:27:
76:95:62:79:e3:b6:f7:4b:60:66:36:12:1d:c3:e9:14:f6:c6:
50:3c:34:a8:92:03:f2:e0:85:b6:aa:73:bf:36:10:d2:c0:f4:
6c:c5:3c:52:b7:20:73:02:11:11:1d:08:fd:dc:54:77:4e:e7:
8b:a7:17:8c:cc:14:5b:2e:e9:93:25:85:f8:a6:98:ba:f6:4c:
3b:00:75:aa:59:9c:45:9f:95:0f:c8:7d:25:a8:5f:1c:99:9a:
93:05:17:a2:0e:0e:6e:86:91:41:04:b7:40:9d:80:db:b5:df:
d0:af:b7:f3:4c:f5:72:a4:6a:ca:a7:ba:b7:11:73:4f:c3:46:
69:e4:d0:7e:d0:fa:5e:7b:32:0e:6d:91:65:2f:6e:5f:9f:7b:
9b:cb:0c:0c:cc:bc:e7:f8:1f:d3:4c:e8:3b:33:57:1f:19:4d:
6a:5a:53:22:1d:77:09:f6:bd:ae:25:e6:8a:ff:b8:39:47:d8:
ec:5d:05:df:3f:89:27:e6:b2:72:87:1c:c2:22:6d:78:e7:df:
41:16:9b:e5:0d:7e:40:5b:8f:6b:b2:ff:9b:7d:39:4c:2d:51:
97:93:63:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org