Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/8A788C649A7B11EF93EAFD30C4F9AE02.roa
File: 8A788C649A7B11EF93EAFD30C4F9AE02.roa (raw, json)
Hash identifier: LoQASgIdVkZlHmCOg2tewK/Wi/r01FWJ+q988aRuGtw=
Subject key identifier: 0A:23:F7:F9:33:AA:B9:CB:15:93:FC:FD:A9:60:FC:06:E0:40:73:6D
Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD
Certificate serial: 0778
Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/8A788C649A7B11EF93EAFD30C4F9AE02.roa
Signing time: Mon 04 Nov 2024 07:08:07 +0000
ROA not before: Mon 04 Nov 2024 07:08:07 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 136897
IP address blocks: 103.39.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 08:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1912 (0x778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD
Validity
Not Before: Nov 4 07:08:07 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=672872d6-507c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:04:ec:e4:d4:b1:ef:94:f5:8e:29:7c:6d:
09:b3:8f:00:35:69:21:84:5a:07:33:24:df:d2:92:
bd:df:54:ea:25:df:13:58:f1:0b:a5:90:1c:af:0d:
27:11:2e:98:e0:74:4d:47:87:d4:7a:1b:ea:4c:25:
96:65:01:cb:e0:37:54:bf:1a:89:27:7d:96:12:eb:
c8:0e:61:c5:cf:6a:e8:c8:6f:d9:b4:b9:46:ce:aa:
a6:42:f3:b0:a0:3f:a5:66:38:04:e9:59:fe:88:55:
2b:c0:a0:c6:c9:9f:b9:73:54:a7:98:75:a8:5a:0a:
d3:11:17:0b:bb:e3:da:f2:fc:ca:4e:dc:e7:78:39:
f7:86:b6:a9:32:d3:96:1e:d2:0b:75:c3:06:7e:82:
9e:c0:09:ee:9e:d6:0d:cd:35:6f:19:fb:95:f6:e6:
c4:f1:07:b9:28:fe:7c:eb:b9:19:2b:91:ae:20:08:
4f:c0:38:2d:de:25:8a:2c:a6:6f:ae:85:52:5f:1b:
10:b1:ad:e0:00:8d:2f:ac:a5:f8:98:a3:b8:8e:2c:
f4:94:5a:d8:a4:7a:c4:43:e9:dd:46:0b:ae:5b:95:
d1:4b:d1:f7:c0:f3:14:fa:c2:26:85:f8:6b:1a:b2:
78:4b:60:d8:29:0f:1e:9f:97:19:c1:0e:3d:ab:12:
02:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:23:F7:F9:33:AA:B9:CB:15:93:FC:FD:A9:60:FC:06:E0:40:73:6D
X509v3 Authority Key Identifier:
keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/8A788C649A7B11EF93EAFD30C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.39.110.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:f5:d8:23:1c:da:4c:fc:70:6c:b5:2d:94:46:23:9d:14:1c:
bd:cd:b9:b2:5f:26:b7:45:e8:31:4e:e3:e0:f4:7d:72:9a:94:
90:17:28:65:7c:2e:f6:6d:53:6b:d5:95:c3:a9:1b:e3:10:08:
5e:21:1d:83:da:24:17:6a:1d:ce:5c:2a:38:e2:02:0d:48:dc:
79:c0:26:1e:d7:f1:14:d7:63:a5:77:3d:ed:9d:4e:6a:72:0d:
37:be:90:6f:8b:ee:cd:04:8f:2a:96:bb:8c:7e:30:c5:dc:d5:
9c:8b:90:2e:ca:bd:9a:91:08:58:64:e0:9b:b2:06:12:ff:7b:
c8:9f:95:fd:10:2b:f3:14:27:d1:6b:4d:20:2e:55:54:13:7c:
79:9a:41:7f:af:10:f7:49:a9:97:b4:e4:dc:e2:3f:8b:43:92:
58:2f:b2:cb:bc:ce:24:cf:8e:ca:c6:e0:d8:10:10:5a:8a:dc:
7c:1e:73:c2:40:be:54:9e:24:85:0a:f5:d1:d2:74:ef:94:fc:
4d:18:98:43:6e:42:d9:f4:10:08:f9:a8:3d:81:24:d4:2c:0b:
7e:62:c6:57:4e:fe:c0:09:0c:20:ba:ef:cb:1f:cc:a0:58:3a:
47:03:2a:e3:5d:42:39:4a:b4:57:06:a1:b8:69:eb:e1:41:97:
b7:4a:59:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 10:08:01 2024 by rpki-client on console-fra.rpki-client.org