Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/5CC3F79AE15911ED94EA9944C4F9AE02.roa
File: 5CC3F79AE15911ED94EA9944C4F9AE02.roa (raw, json)
Hash identifier: Weik/Ku6tontw5wuZ7FGJg5l6Na3lCXzHTB1Ls3Duh4=
Subject key identifier: 16:04:A5:0F:15:41:E9:B1:C0:DC:A2:01:40:00:1B:9C:C2:72:6D:BF
Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial: 04C5
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/5CC3F79AE15911ED94EA9944C4F9AE02.roa
Signing time: Tue 05 Sep 2023 00:51:47 +0000
ROA not before: Tue 05 Sep 2023 00:51:47 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 932
IP address blocks: 103.30.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Sep 2023 13:14:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1221 (0x4c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Validity
Not Before: Sep 5 00:51:47 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=64f67ba2-dff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ca:6f:4e:87:91:9a:f7:e1:9e:45:39:14:68:
9b:38:58:4b:1c:49:9a:40:98:e3:ad:4b:be:4d:40:
52:4e:ed:38:f6:d1:7b:86:d2:3d:ce:35:be:61:00:
67:13:bf:fa:82:ed:45:0f:96:12:33:db:93:87:a0:
02:ee:91:1c:cd:34:3f:58:1f:d9:6b:f9:f3:cb:9d:
48:c1:09:1f:62:ba:65:c9:3e:09:9e:25:72:b6:02:
93:95:7b:33:13:fb:af:fe:f7:3b:29:9b:d9:ca:4a:
b5:db:64:d2:82:97:5b:d4:95:1a:c6:c9:a0:80:5b:
8f:6e:f0:0c:0b:53:93:82:a1:54:a9:4e:f2:19:72:
47:31:a6:83:07:77:a8:cc:ad:8e:ba:83:61:8b:a2:
7e:a8:07:ab:bb:da:34:1d:52:dd:ed:d1:9c:c9:c4:
74:69:b2:48:b5:89:0c:55:3e:96:63:53:df:f0:8d:
62:75:6b:f8:ef:2f:df:46:a5:a9:4c:a8:fb:eb:38:
bb:4e:57:d6:d2:69:8a:94:3a:35:fd:9e:2d:0c:2a:
ef:de:d7:a6:f7:18:89:cc:cd:d7:a3:97:e9:aa:9f:
c3:84:be:77:6d:d5:21:87:c8:02:bb:31:25:ad:ed:
19:36:38:56:9a:0d:2f:2a:c4:5f:bb:bf:af:d3:4e:
eb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:04:A5:0F:15:41:E9:B1:C0:DC:A2:01:40:00:1B:9C:C2:72:6D:BF
X509v3 Authority Key Identifier:
keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/5CC3F79AE15911ED94EA9944C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.30.76.0/24
Signature Algorithm: sha256WithRSAEncryption
72:99:de:22:ec:46:28:d8:18:09:54:57:8c:af:ee:e6:11:c7:
e7:97:2e:ac:68:a6:ca:f6:ab:35:26:90:af:37:ca:a2:3f:71:
f3:30:bb:fe:3b:b2:72:ab:4f:18:26:c9:dd:a5:16:50:54:93:
c5:c1:12:17:ae:28:be:7c:43:8d:78:43:98:80:31:5f:41:2c:
04:d3:61:5d:16:e1:ed:dc:86:df:d8:6c:fe:5a:9a:39:ad:fc:
15:90:ce:13:68:09:98:0a:5e:18:d2:13:51:95:21:d2:11:c5:
6e:45:29:55:c3:b0:9d:2d:6e:8c:a6:61:07:0b:1c:d2:31:6e:
4c:4e:6a:3b:9b:6d:9a:09:db:49:77:ae:ff:9a:af:62:ff:45:
ea:99:db:2f:a1:8e:e5:2e:b2:66:74:cd:32:b3:9f:4c:7b:09:
d9:44:c5:1a:93:aa:d0:5e:51:53:f1:b0:e5:11:a0:04:07:85:
85:db:ca:d1:5e:42:46:e2:c7:a7:4e:f2:da:bb:0e:14:6c:24:
e0:ad:eb:5e:73:c2:10:d0:ac:f6:df:8d:a6:05:e6:14:72:a7:
d9:55:4b:44:d2:d1:2e:ad:90:22:de:4a:a3:30:c9:6d:37:ff:
31:6b:01:5c:28:d7:b3:9a:82:68:43:14:ed:49:48:ec:12:f2:
dc:32:30:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org