Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/2D45FF2E20A911EEBEC77485C4F9AE02.roa
File: 2D45FF2E20A911EEBEC77485C4F9AE02.roa (raw, json)
Hash identifier: hXY2y3Pxe2q8UOsvNqh43gpSQM0ejjgTxI6qh7bR8UA=
Subject key identifier: A5:E1:FA:6E:59:65:C2:21:3F:2B:36:63:40:EC:CE:AE:B2:95:4B:E8
Certificate issuer: /CN=A913BEF9/serialNumber=0555D04D6AA7CD08907385B9EFAF7FECE6C35E18
Certificate serial: 031B
Authority key identifier: 05:55:D0:4D:6A:A7:CD:08:90:73:85:B9:EF:AF:7F:EC:E6:C3:5E:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BVXQTWqnzQiQc4W5769_7ObDXhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/2D45FF2E20A911EEBEC77485C4F9AE02.roa
Signing time: Wed 31 Jul 2024 02:34:33 +0000
ROA not before: Wed 31 Jul 2024 02:34:33 +0000
ROA not after: Fri 29 Nov 2024 00:00:00 +0000
asID: 149629
IP address blocks: 103.182.246.0/24 maxlen: 24
2001:df0:8040::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 Aug 2024 22:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 795 (0x31b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BEF9/serialNumber=0555D04D6AA7CD08907385B9EFAF7FECE6C35E18
Validity
Not Before: Jul 31 02:34:33 2024 GMT
Not After : Nov 29 00:00:00 2024 GMT
Subject: CN=66a9a2b9-8737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:51:0d:3a:e1:a8:f9:84:33:45:b5:3c:b5:3e:
23:7f:43:7a:fb:a0:57:07:48:d2:f3:c2:42:32:eb:
89:70:82:ba:30:2d:6b:fd:57:a4:58:1a:6c:2f:a2:
8b:6a:9b:52:4d:8e:c7:f9:b0:e3:db:ab:79:06:11:
9f:6b:39:16:e8:eb:7f:fe:91:6d:8f:e2:d8:be:77:
c1:96:08:62:ff:7d:5f:83:c6:b5:80:01:de:1f:07:
b9:ca:40:30:b3:5f:5c:08:a5:b5:45:26:98:40:fa:
2a:04:ab:4a:c2:39:71:aa:22:21:03:ce:1b:10:88:
c3:89:31:d5:21:fd:8c:fe:ae:a6:aa:7d:76:e9:2f:
26:84:4c:6b:9d:62:02:64:c3:93:48:83:bd:21:ac:
a8:3f:b8:1c:75:e6:90:9d:2c:b3:47:cb:e4:61:35:
5a:9d:1f:82:4e:6b:98:5a:09:70:54:8c:7c:22:70:
5b:f4:47:ed:0a:c4:e3:3a:25:05:79:6f:ba:8b:eb:
c5:85:f5:78:ba:dc:b3:a2:f0:34:07:1d:54:cf:a5:
c8:cb:90:7f:22:49:ec:80:82:fc:e6:83:5f:66:85:
0d:7f:96:60:65:a4:ee:fc:80:99:2e:83:55:2f:e8:
94:6a:35:38:76:eb:ff:c4:63:ca:56:36:47:84:02:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E1:FA:6E:59:65:C2:21:3F:2B:36:63:40:EC:CE:AE:B2:95:4B:E8
X509v3 Authority Key Identifier:
keyid:05:55:D0:4D:6A:A7:CD:08:90:73:85:B9:EF:AF:7F:EC:E6:C3:5E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/BVXQTWqnzQiQc4W5769_7ObDXhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BVXQTWqnzQiQc4W5769_7ObDXhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/2D45FF2E20A911EEBEC77485C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.182.246.0/24
IPv6:
2001:df0:8040::/48
Signature Algorithm: sha256WithRSAEncryption
3d:76:1e:d2:d4:52:f2:7a:30:18:1e:ee:0f:68:ae:8e:4b:c0:
e6:c1:33:70:b8:72:04:bd:37:3a:db:32:7c:c3:1e:91:88:57:
52:76:33:56:6d:69:d3:8d:16:c0:ef:85:14:08:7a:53:39:e0:
58:79:f1:51:e8:90:42:51:2b:9e:f8:1e:41:7c:e0:0b:97:e2:
80:ca:30:01:f7:84:fd:86:e0:87:36:87:c1:ac:15:ad:0c:71:
78:7b:e0:45:25:d6:c9:58:8d:f2:2c:24:5c:74:f1:a3:55:8b:
bf:a7:d7:7d:7f:53:68:18:29:14:d3:fd:0e:1f:a3:fe:91:81:
9d:6c:0f:ba:54:48:77:70:ce:8c:e8:73:7b:04:df:25:18:cb:
87:2c:9d:e2:e5:75:17:a5:c3:ef:d9:97:80:2b:61:32:69:68:
61:4e:5b:55:0a:75:43:0c:d2:5d:7c:ca:a2:cc:06:b1:3e:27:
69:91:e9:64:d2:79:d5:04:87:c5:cd:0b:cc:ec:00:a6:38:c6:
fc:64:11:60:5e:46:75:b1:bf:c1:bf:bf:d3:37:72:2d:7a:8d:
84:2a:c4:60:95:55:71:97:51:26:62:34:ea:4f:55:b4:23:fd:
60:df:66:21:52:6a:97:5e:69:dd:7c:63:69:e0:44:05:88:95:
8c:a6:d7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 02:19:45 2024 by rpki-client on console-fra.rpki-client.org