Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/5DEC11C69A4D11EFB947A67BC4F9AE02.roa
File: 5DEC11C69A4D11EFB947A67BC4F9AE02.roa (raw, json)
Hash identifier: vxKko/rc70sBBQbTJ8YU5E1lbYMbYJCgq5zEkmaQU7Y=
Subject key identifier: FB:A8:FD:18:13:01:17:36:28:1B:DA:C7:D8:FC:57:3C:29:4A:1D:C5
Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD
Certificate serial: 0771
Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/5DEC11C69A4D11EFB947A67BC4F9AE02.roa
Signing time: Mon 04 Nov 2024 01:37:35 +0000
ROA not before: Mon 04 Nov 2024 01:37:35 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 136897
IP address blocks: 103.39.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 02:54:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1905 (0x771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD
Validity
Not Before: Nov 4 01:37:35 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6728255f-af86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:65:d1:a1:eb:80:35:4b:5f:96:22:8b:26:e0:
78:3a:bc:2a:f6:51:45:29:f1:36:c2:31:2e:10:e6:
e0:59:65:2a:24:89:fa:76:ef:f1:89:e3:b3:05:27:
13:f1:8c:db:ac:25:10:24:4c:11:7e:e3:0b:3b:d6:
a3:0b:cf:32:38:77:ca:2b:7b:93:3e:ea:5e:40:46:
63:c1:8a:04:fb:68:f8:56:fe:e4:d0:17:23:3b:54:
d5:dc:87:09:07:81:17:b4:70:a7:3a:06:21:7d:06:
54:e7:9e:00:6c:d0:9e:14:b6:ef:04:9a:76:8a:d7:
89:94:e3:d0:06:84:57:45:a6:e0:30:2f:68:a1:3a:
06:84:07:dc:67:5d:e2:db:5e:71:2d:3c:15:48:cc:
48:3c:50:ba:e7:02:b0:62:84:f7:4f:90:48:65:eb:
07:3a:63:44:0e:d7:06:1b:9d:50:09:b5:cf:8a:25:
22:83:f8:2a:e2:7e:b3:ab:7f:b5:65:21:fc:8b:bd:
18:89:d5:7c:61:d2:f8:a5:7b:b1:6b:e4:2c:69:bb:
1d:78:ba:f6:1a:9d:b6:2c:e9:ed:82:e9:ef:d1:0a:
d1:1c:3e:e2:18:c0:e4:ad:83:92:db:c9:b3:c6:0f:
99:0d:0b:86:97:20:c3:5e:e1:c2:a8:52:b8:ab:cd:
cb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A8:FD:18:13:01:17:36:28:1B:DA:C7:D8:FC:57:3C:29:4A:1D:C5
X509v3 Authority Key Identifier:
keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/5DEC11C69A4D11EFB947A67BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.39.110.0/24
Signature Algorithm: sha256WithRSAEncryption
14:bf:83:ba:e3:7c:0a:6b:a7:be:37:58:48:30:8e:be:d4:65:
2d:8f:0c:19:fa:46:5b:db:01:9b:ac:a1:2e:3a:f9:27:fa:48:
a5:a1:1a:dc:7c:78:e7:22:41:3f:e8:9a:d5:c0:9e:08:1d:56:
69:5f:c0:4f:ec:1c:5c:e6:a8:01:82:e2:7e:37:a1:4d:cd:ae:
4b:86:84:18:6a:ae:7f:2a:2e:62:ba:d6:e8:87:c7:b7:a2:5a:
f0:73:37:d0:7f:28:a3:7e:08:78:e9:45:32:3f:12:22:d5:4c:
e6:3d:ed:6c:ac:76:11:32:47:e1:ec:89:a2:b6:2b:2c:c4:ae:
89:eb:1e:f6:8d:7a:f2:7f:04:e4:a5:ec:be:d8:d1:1d:d1:1e:
f6:51:c4:f9:15:96:3c:68:78:77:13:af:4e:e0:85:38:38:9f:
cd:d3:0b:b2:ef:51:0c:3d:91:4d:59:68:5f:55:01:a3:1f:b8:
9f:67:68:80:4d:f7:ee:9b:43:99:c5:a1:5a:f2:30:e7:f6:d1:
2d:06:4e:0e:f1:6c:06:0e:3a:57:1b:e5:bd:a8:17:99:41:62:
69:08:f2:ed:6f:2b:07:14:17:90:51:2c:19:de:e9:03:1d:d7:
a5:f4:d7:be:bb:dc:67:a3:5d:44:a6:5c:1f:70:1c:50:ef:61:
f1:64:07:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 07:12:07 2024 by rpki-client on console-ams.rpki-client.org