Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/0B80C37A17B511EF85FDC90AC4F9AE02.roa
File: 0B80C37A17B511EF85FDC90AC4F9AE02.roa (raw, json)
Hash identifier: Y3IQYzw7pQCla4eZUoRYpyTlabLcnMPM+xrgW/khPxY=
Subject key identifier: 02:DC:0D:F5:E4:42:9A:84:1F:18:CB:4C:4E:FA:C3:21:3B:F7:A3:A4
Certificate issuer: /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
Certificate serial: A1
Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/0B80C37A17B511EF85FDC90AC4F9AE02.roa
Signing time: Sat 25 May 2024 07:11:08 +0000
ROA not before: Sat 25 May 2024 07:11:08 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 210000
IP address blocks: 103.69.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 22:28:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
Validity
Not Before: May 25 07:11:08 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66518f0b-9f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8a:6b:ca:8d:62:32:86:c6:f2:d6:67:55:6d:
c0:53:8b:57:46:66:bd:e8:12:37:02:74:88:35:b7:
dd:96:30:91:50:88:c8:34:d1:5c:51:a0:bc:3e:bf:
14:e8:64:a7:ba:92:02:d6:9b:bf:c5:82:92:5b:ce:
e4:93:78:e9:06:1f:cc:c0:35:54:de:69:6d:f4:5f:
07:d1:69:12:8c:68:91:81:69:58:46:cd:49:5b:fe:
2b:7a:90:9e:2d:2c:27:0a:e1:f2:9a:75:9d:88:a2:
45:64:d4:b5:15:d6:15:77:0e:63:dc:7e:0f:41:9e:
0b:38:b8:b7:69:73:2b:2a:0c:98:99:03:db:e1:2a:
1b:15:cd:cc:43:04:a6:97:75:43:03:d2:31:22:56:
92:34:8e:38:a7:d8:72:33:07:61:b6:76:69:1a:58:
32:a7:b4:db:b0:00:92:65:e8:15:f6:ad:d6:e4:e1:
f0:9b:e7:1e:2a:1a:a7:c6:48:1e:27:e4:00:90:17:
c6:2f:cb:d0:b3:24:96:10:bd:06:e2:33:c1:d0:9c:
eb:70:a4:c1:a7:11:36:7b:66:95:b6:58:73:52:6e:
79:40:46:59:8f:24:19:f0:46:18:07:e5:8d:a2:f7:
da:a2:ee:54:56:3a:65:0b:bb:bc:68:27:26:00:c2:
f0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DC:0D:F5:E4:42:9A:84:1F:18:CB:4C:4E:FA:C3:21:3B:F7:A3:A4
X509v3 Authority Key Identifier:
keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/0B80C37A17B511EF85FDC90AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.93.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e0:8b:a0:af:dc:3a:8e:58:fd:b1:2b:ca:7b:11:a5:89:f2:
67:01:0f:a0:6b:ee:97:62:b8:56:f7:90:e9:6e:02:29:a7:3b:
d4:fb:7e:2a:f1:50:84:4a:75:7e:e1:d2:26:80:70:69:20:c6:
34:91:25:eb:34:be:61:af:6f:4d:10:76:75:a9:16:40:91:29:
39:0d:9d:af:ad:5e:77:c8:c8:b3:b7:c8:9f:1b:d7:28:b0:aa:
76:38:3a:ec:02:60:f0:e5:ed:da:84:bd:54:83:58:a5:66:13:
cd:85:79:7f:fc:c4:bf:e4:d1:b7:85:fc:69:b5:5b:d9:e5:6f:
7d:b7:50:78:5a:58:8e:a4:0a:12:9f:ec:7b:82:b5:8e:f8:3b:
20:52:b3:11:f2:9b:da:e2:67:24:de:f5:36:6b:c4:49:77:d8:
a1:c4:8a:79:bd:66:67:f3:5a:92:65:32:d7:62:b7:13:0a:db:
31:ba:98:27:42:a4:1a:24:b8:b2:66:14:58:37:70:90:ba:97:
52:86:8f:28:fa:bf:df:44:ea:e0:bf:1c:58:59:c3:96:94:db:
7a:27:8c:99:99:b0:39:cc:c2:41:9b:8f:cb:9e:c5:07:0a:8e:
90:ca:d7:fb:17:34:38:89:68:f6:7f:a1:c6:51:51:1f:c9:8e:
6b:76:46:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:37:21 2024 by rpki-client on console-fra.rpki-client.org