Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/FFCD2654390111EF9E1AEB62C4F9AE02.roa
File: FFCD2654390111EF9E1AEB62C4F9AE02.roa (raw, json)
Hash identifier: CxCmyfQtiZp5k37PCfwnbIJSMv5we5ZQuQnIrxUNH3s=
Subject key identifier: 25:D6:10:C2:F6:C8:AD:79:8E:A2:30:4C:95:29:14:63:E4:D4:FF:50
Certificate issuer: /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial: 02BB
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/FFCD2654390111EF9E1AEB62C4F9AE02.roa
Signing time: Wed 03 Jul 2024 06:03:42 +0000
ROA not before: Wed 03 Jul 2024 06:03:42 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 131646
IP address blocks: 103.215.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Aug 2024 07:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699 (0x2bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Validity
Not Before: Jul 3 06:03:42 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6684e9be-b3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e4:4d:f1:40:29:87:63:55:63:e7:51:23:6b:
bd:d0:43:b1:b9:36:70:04:84:46:d0:c4:17:2b:02:
47:92:43:68:29:9e:59:69:81:77:16:0a:4d:7c:be:
1c:de:8d:3c:13:9b:de:47:62:5a:88:d1:59:8a:63:
a9:83:cb:53:fa:d9:b0:bc:60:49:a0:7c:f3:02:07:
bc:c5:42:35:a5:0a:78:d9:4e:46:e1:77:bf:92:96:
a7:dd:04:f9:98:de:39:4f:85:e0:88:ab:d3:f1:a5:
43:f0:32:fd:4a:a3:89:e0:08:fe:3a:50:ef:18:8c:
f1:c2:96:dc:56:88:a6:9e:a0:a8:4c:d6:e9:de:28:
f8:58:bd:c2:1d:6f:7e:e2:58:a0:05:ec:35:cc:e7:
7f:29:22:75:08:4a:62:34:5f:55:72:a0:5c:6b:55:
37:71:73:45:4b:eb:ce:d4:d9:3f:49:74:d7:d6:9b:
3d:2c:38:8e:33:f7:3b:86:13:59:85:c0:c1:ca:da:
97:b5:00:0d:ee:7c:aa:44:74:d6:2f:5d:73:99:ee:
f2:42:f8:14:8c:44:01:4e:8e:a7:d0:4e:52:2c:3c:
b9:97:64:3b:36:23:be:90:a2:53:56:de:ca:bd:c5:
2d:74:17:1e:02:17:9e:e5:e6:99:ab:3c:54:2f:b1:
64:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D6:10:C2:F6:C8:AD:79:8E:A2:30:4C:95:29:14:63:E4:D4:FF:50
X509v3 Authority Key Identifier:
keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/FFCD2654390111EF9E1AEB62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.215.126.0/24
Signature Algorithm: sha256WithRSAEncryption
88:db:37:a2:61:67:e6:6b:bb:4f:fb:f0:8e:a4:12:b3:36:c6:
1f:31:04:2a:20:c1:53:89:37:2f:12:67:99:88:b2:42:24:54:
ed:0e:8a:26:80:f8:4f:e7:4b:07:fd:8c:71:5d:b1:b3:72:2f:
65:f4:ec:85:3e:8a:1f:10:c4:13:d8:dc:a2:3d:43:2f:8b:bc:
3e:51:fc:ac:f7:7f:70:f1:01:a3:cb:36:db:67:4a:34:bc:c3:
87:95:b8:f1:4b:20:76:cf:88:c2:b2:16:a9:25:70:51:53:c4:
f9:a9:de:f1:02:a2:cf:2d:21:b9:a9:cc:0e:ef:9f:0c:f2:c2:
b3:0c:55:d9:09:27:c8:0d:b2:a9:40:80:5c:cb:e2:d7:90:d5:
1f:7a:75:cf:c8:82:ef:97:3a:40:5c:f2:dd:01:50:2b:e6:b9:
6f:19:2a:0e:2d:fb:d1:94:2b:67:2e:dc:c1:01:ad:e2:a9:21:
d3:49:e8:8d:eb:b1:33:f3:13:58:52:35:ba:62:17:64:17:57:
d8:89:50:7f:b2:ed:a8:9b:be:d8:37:23:27:8f:dc:55:ce:ae:
29:a4:c9:94:01:e6:f6:a0:47:3b:87:3e:05:a8:59:9a:e4:10:
20:cf:85:cf:a5:cb:d2:27:60:05:9e:0b:e3:bb:a5:35:6a:64:
8a:58:03:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 10:08:29 2024 by rpki-client on console-fra.rpki-client.org