Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/6A9632520DDB11EF8138F334C4F9AE02.roa
File: 6A9632520DDB11EF8138F334C4F9AE02.roa (raw, json)
Hash identifier: Fa8F6yomZPDSi2lqgtBw6ocNH862SHcNB73lTZ6dz48=
Subject key identifier: 76:C5:10:93:3C:8E:5F:4B:29:21:78:D4:82:82:20:A7:79:BD:B5:3A
Certificate issuer: /CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Certificate serial: 12F3
Authority key identifier: B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/6A9632520DDB11EF8138F334C4F9AE02.roa
Signing time: Thu 09 May 2024 08:09:11 +0000
ROA not before: Thu 09 May 2024 08:09:11 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 204174
IP address blocks: 103.78.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jun 2024 13:21:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4851 (0x12f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Validity
Not Before: May 9 08:09:11 2024 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=663c84a7-d40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:90:ca:6c:5d:a1:7d:6c:62:9e:7c:0c:76:
df:b9:29:a6:61:66:b4:de:60:e1:4f:c4:f5:aa:9a:
b8:e1:2b:e8:df:7a:34:7d:18:b4:96:11:a9:3d:03:
f6:87:9e:34:61:d2:99:06:f5:1e:b9:54:c1:92:63:
b4:6a:7f:d9:c0:40:0d:44:d6:29:35:c0:80:a9:15:
7e:06:5c:6e:32:55:c9:b0:25:1c:6f:72:0a:65:a3:
0f:a3:c2:f6:86:d3:7b:ac:be:f6:35:21:67:5d:ec:
af:21:2a:1a:15:82:5e:c8:db:bf:06:0c:63:1a:95:
9a:0b:07:79:6e:b6:72:48:56:db:c2:bf:90:24:e3:
49:d1:74:63:4a:76:46:31:97:18:32:a2:61:5d:2e:
20:72:f6:54:02:a5:08:2e:52:67:82:39:c4:db:1d:
9d:8e:34:cf:6e:1b:fb:bd:02:45:ba:32:f5:84:9d:
dc:a0:85:a7:fb:01:43:b4:00:fb:d3:36:92:b9:e5:
a5:33:fb:15:96:ec:a9:fa:6a:da:cc:b1:35:2a:65:
8b:6f:11:79:7d:ca:52:b5:90:c9:5f:41:f5:50:d4:
47:87:a6:03:37:4b:2d:46:24:79:84:26:4e:2b:5b:
8f:33:bc:7d:e8:9b:75:f6:f3:72:75:56:59:1a:e4:
d2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C5:10:93:3C:8E:5F:4B:29:21:78:D4:82:82:20:A7:79:BD:B5:3A
X509v3 Authority Key Identifier:
keyid:B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/6A9632520DDB11EF8138F334C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.243.0/24
Signature Algorithm: sha256WithRSAEncryption
03:20:7e:95:e3:92:b7:8b:1c:9c:aa:89:6b:30:d6:a0:49:fb:
83:8d:4e:b0:fd:32:c6:16:6e:1a:34:7b:d3:56:5e:67:cc:2c:
10:dd:7f:47:0e:cb:19:f0:75:7b:7e:e7:a3:99:cb:69:10:06:
4d:d9:12:9f:0b:2f:69:9d:9e:1e:18:ac:92:0d:94:5e:57:13:
8a:02:e4:f6:ed:a7:84:3a:e2:c1:1e:c9:3b:15:72:35:08:55:
de:f5:cc:73:e0:60:a2:7e:16:53:81:b6:5c:0a:33:23:c0:37:
17:69:19:f8:b9:51:4a:5b:32:fe:41:f6:28:da:72:6e:e0:81:
d0:be:f9:45:6f:86:bb:59:da:8c:cc:a1:1a:ab:cd:b9:0a:f2:
ac:6e:cb:0f:ed:be:aa:a8:f7:60:14:cc:41:32:d4:cb:5c:df:
41:eb:9f:a7:aa:ab:4e:09:4a:45:ce:2c:64:3e:8e:12:b9:64:
22:67:ba:36:93:92:3e:b7:ae:c4:21:44:08:bf:08:76:40:27:
c6:f7:02:24:93:bf:de:81:16:79:b5:ba:e2:d6:f6:5c:a8:a5:
93:cd:75:c1:7f:b6:12:dd:88:f5:3b:67:b1:16:58:fc:92:75:
41:fd:f1:11:11:eb:04:e1:73:f5:c0:9c:31:5b:ca:ea:2d:f4:
72:c6:1c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 15:24:57 2024 by rpki-client on console-fra.rpki-client.org