Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/25B7681A958911EE89E89E64C4F9AE02.roa
File: 25B7681A958911EE89E89E64C4F9AE02.roa (raw, json)
Hash identifier: f3eJi0F6GyHOWMUo8ZCS7HaZUfAx4SsABsN7V5+q9CQ=
Subject key identifier: 5A:85:32:82:78:D1:F2:6B:5C:5E:9A:F8:A7:F3:92:98:35:45:9A:A4
Certificate issuer: /CN=A9157724/serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
Certificate serial: 09
Authority key identifier: 05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/25B7681A958911EE89E89E64C4F9AE02.roa
Signing time: Tue 19 Dec 2023 05:10:53 +0000
ROA not before: Tue 19 Dec 2023 05:10:53 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 18206
IP address blocks: 103.224.93.0/24 maxlen: 24
115.187.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 16:05:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157724/serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
Validity
Not Before: Dec 19 05:10:53 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=658125dd-9f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:f5:d8:ec:84:6f:c5:8b:25:69:4b:85:9f:
3b:df:e9:be:1f:c4:bf:bd:66:a0:07:d0:72:91:f5:
ad:05:35:af:63:d7:34:fa:2f:0d:67:c2:73:d1:92:
d6:2b:7e:aa:a9:50:21:84:88:ab:48:1d:43:53:2d:
97:8d:fe:b5:6c:d2:1f:ee:51:28:3f:31:e8:df:9f:
a8:fe:46:49:e4:d6:eb:e9:d6:a5:ec:de:f7:c7:dd:
1c:0e:d0:ab:8d:c6:d2:03:ff:e7:c5:34:7c:f0:b8:
00:d9:8c:dd:98:33:5b:d0:fb:d0:f1:43:33:83:9e:
35:6f:c9:4a:89:ef:4d:b8:0f:49:39:89:07:a2:81:
26:ff:1d:87:8f:4c:80:69:69:19:26:f2:f3:40:f5:
ca:a7:ed:6b:69:74:69:8a:bb:18:7e:03:28:e8:ae:
af:b6:df:67:4d:cf:7c:8c:3f:08:73:46:41:8a:bd:
df:33:6b:6d:4d:09:9c:8f:bb:ff:aa:9c:1a:2d:f3:
7a:a4:14:82:f4:8c:33:93:12:22:7d:1c:7f:7e:ae:
e3:4e:0e:c3:da:af:28:d9:ff:0c:de:48:2e:07:32:
a7:0f:2d:88:5c:3c:86:8f:88:99:e6:ae:45:7c:95:
74:c1:ef:6d:a2:5f:41:9a:e6:05:df:2f:7c:04:a0:
18:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:85:32:82:78:D1:F2:6B:5C:5E:9A:F8:A7:F3:92:98:35:45:9A:A4
X509v3 Authority Key Identifier:
keyid:05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/25B7681A958911EE89E89E64C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.93.0/24
115.187.22.0/24
Signature Algorithm: sha256WithRSAEncryption
75:97:3e:aa:bc:15:14:49:1a:51:44:95:85:e3:60:5a:a6:4e:
e6:31:31:67:3c:b3:22:ca:b0:df:38:e7:5e:56:e0:cd:d1:ef:
7d:f9:40:25:78:28:0e:7d:07:16:94:b3:68:20:cb:d8:b8:b5:
63:15:f4:45:6d:62:2a:5d:08:36:d2:00:14:0d:fe:fd:18:b9:
ac:91:36:08:1c:be:3b:97:65:61:bb:0c:df:85:29:33:f3:a4:
9b:9a:02:79:64:8b:64:8b:74:7c:f3:9c:b6:cf:1d:16:3c:5e:
13:2e:2d:ed:f5:9c:c1:53:f8:39:74:f2:3b:88:67:48:8c:8c:
03:77:be:e3:a9:93:23:fc:9b:fe:cc:9a:e0:2d:ef:fb:14:09:
a5:16:94:7f:f0:b1:07:bc:be:a7:b3:d6:28:42:75:e0:7f:9d:
b8:3b:12:26:d5:78:c2:03:96:6e:96:15:f8:82:7b:f2:ed:85:
37:da:09:d2:b8:b9:51:10:a2:c1:92:04:83:3e:af:0d:d5:bc:
2c:41:20:b4:17:86:c0:8a:ce:5a:35:1e:54:76:9a:1a:c5:db:
4e:93:10:43:09:9b:0a:65:83:33:17:6d:b1:a1:5e:a8:67:ae:
e4:fa:a7:c4:52:cd:23:b5:26:0f:5d:56:58:b9:12:84:30:26:
5a:c3:ab:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:07 2024 by rpki-client on console-fra.rpki-client.org