Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/97D0D31C312211EE99BC615CC4F9AE02.roa
File: 97D0D31C312211EE99BC615CC4F9AE02.roa (raw, json)
Hash identifier: wwK6E40bJkPj0m1KFhkUpaHjVXuNdtJNNZt0pYLPldE=
Subject key identifier: 8C:33:3E:D3:CC:6A:42:88:8B:FE:B5:7E:DE:19:6F:08:8E:3E:11:C7
Certificate issuer: /CN=A913BEF9/serialNumber=0555D04D6AA7CD08907385B9EFAF7FECE6C35E18
Certificate serial: 031C
Authority key identifier: 05:55:D0:4D:6A:A7:CD:08:90:73:85:B9:EF:AF:7F:EC:E6:C3:5E:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BVXQTWqnzQiQc4W5769_7ObDXhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/97D0D31C312211EE99BC615CC4F9AE02.roa
Signing time: Wed 31 Jul 2024 02:34:34 +0000
ROA not before: Wed 31 Jul 2024 02:34:34 +0000
ROA not after: Fri 29 Nov 2024 00:00:00 +0000
asID: 151626
IP address blocks: 103.182.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Aug 2024 22:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 796 (0x31c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BEF9/serialNumber=0555D04D6AA7CD08907385B9EFAF7FECE6C35E18
Validity
Not Before: Jul 31 02:34:34 2024 GMT
Not After : Nov 29 00:00:00 2024 GMT
Subject: CN=66a9a2ba-7aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1e:4a:a7:c7:4d:12:cc:77:44:25:6b:53:fd:
d3:8c:86:0e:09:7b:bf:2d:e7:90:84:be:16:ff:e1:
56:55:bc:f7:ba:15:1e:2a:65:24:f6:b9:f8:39:8b:
ac:9d:4e:90:d0:9d:84:15:1f:73:b5:21:ba:f0:3f:
f7:2b:55:ee:1b:d8:42:af:0d:57:9b:4c:c1:49:a3:
6d:25:70:f1:64:6a:81:56:38:53:18:ea:6f:bf:5c:
5f:c2:18:94:bd:00:f7:94:f5:01:32:38:6f:04:9e:
a4:81:69:eb:04:80:3b:b5:b2:79:72:e6:9b:12:e5:
d7:af:d8:cc:e4:3f:22:11:e2:b2:14:b2:60:d4:5f:
0b:d4:4a:7a:67:3c:62:e2:c1:03:c4:95:3b:14:df:
84:d1:99:13:5f:10:15:09:7c:73:c7:2f:f6:51:e4:
53:b2:92:03:6e:f8:d5:62:61:6a:62:2f:38:86:be:
27:b3:85:16:6d:d9:2d:73:c9:34:ae:93:ba:9a:21:
ac:7e:cb:f5:26:f5:65:b0:bd:cc:ff:ac:05:9d:58:
94:db:b8:52:1c:42:06:f6:a5:69:88:72:18:1c:b7:
2f:8b:77:16:85:76:c7:9a:02:3f:67:23:9f:54:5b:
13:f1:3a:1e:cb:29:5b:16:cd:41:2e:81:bf:4b:f0:
71:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:33:3E:D3:CC:6A:42:88:8B:FE:B5:7E:DE:19:6F:08:8E:3E:11:C7
X509v3 Authority Key Identifier:
keyid:05:55:D0:4D:6A:A7:CD:08:90:73:85:B9:EF:AF:7F:EC:E6:C3:5E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/BVXQTWqnzQiQc4W5769_7ObDXhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BVXQTWqnzQiQc4W5769_7ObDXhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEF9/4E02D68C99D811ECAB6C5C6FC4F9AE02/97D0D31C312211EE99BC615CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.182.247.0/24
Signature Algorithm: sha256WithRSAEncryption
98:78:50:64:a3:63:a7:69:02:06:18:49:ad:b2:df:45:c4:52:
ac:5e:20:78:6c:27:59:49:86:ab:08:a1:60:f0:bc:9f:95:cb:
e8:cd:f8:51:8b:cb:69:0d:41:14:26:53:c9:aa:37:b4:c1:0a:
53:ae:fa:a4:99:dc:6d:03:c6:44:fa:bd:92:56:0f:32:ae:d0:
c4:25:fd:74:43:7b:b1:89:99:1c:a1:0d:83:93:da:e3:dc:50:
74:2e:ab:5e:35:88:a9:3c:7f:4f:da:37:d7:d0:9d:ea:23:d7:
63:4d:4e:c6:df:c7:43:09:76:44:41:0e:8e:9e:ce:21:7b:e3:
5e:97:48:8c:e6:d5:f9:d0:5d:ed:ab:80:c8:a9:e0:db:9a:73:
4f:b6:62:56:a0:38:23:37:85:1d:24:0f:d0:af:d0:0c:1f:0c:
bc:f9:e4:cf:33:9a:86:b0:4c:97:6c:22:a9:e7:d8:99:72:3d:
8f:2d:cc:7c:94:f5:0e:02:f8:79:2d:0e:94:ba:3c:a7:27:d7:
22:6e:f2:9c:de:bf:ce:e5:06:71:e1:5f:1a:f6:22:5f:e5:6c:
d4:65:80:68:5b:ce:fb:c7:9d:ff:45:d1:f3:39:24:49:34:9c:
8c:aa:48:e2:e8:ba:66:7e:9a:58:55:c5:1c:44:41:63:99:4f:
aa:97:a3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 02:27:08 2024 by rpki-client on console-ams.rpki-client.org