Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/DFAA6EC60A5F11EEB7C7EE60C4F9AE02.roa
File: DFAA6EC60A5F11EEB7C7EE60C4F9AE02.roa (raw, json)
Hash identifier: jFd71Oyvl7lYgzenvHmq6s0WmbydnnUu63JSFyaIdio=
Subject key identifier: 21:76:72:8A:8D:25:F5:95:09:2F:98:71:0B:F3:2E:0E:A1:8A:1D:BF
Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial: 0B02
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/DFAA6EC60A5F11EEB7C7EE60C4F9AE02.roa
Signing time: Fri 16 Aug 2024 20:28:27 +0000
ROA not before: Fri 16 Aug 2024 20:28:27 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 24121
IP address blocks: 103.8.176.0/22 maxlen: 22
103.8.180.0/22 maxlen: 22
2407:b001:1000::/40 maxlen: 40
2407:b001:3000::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 05 Nov 2024 12:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2818 (0xb02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Validity
Not Before: Aug 16 20:28:27 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66bfb66a-725c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:16:85:ac:56:28:bb:18:c9:bd:8b:68:ee:1a:
2e:5a:fe:82:f6:69:23:ba:41:cc:79:44:6e:38:9d:
5e:22:17:d4:74:1b:cc:60:e4:bd:25:aa:6c:78:fa:
dc:c0:20:e2:08:6f:53:2b:26:4e:a0:f4:c9:8b:a3:
62:8e:c2:87:d0:15:d7:32:30:09:f6:de:cc:0b:e8:
ac:90:0c:67:b6:58:25:a0:41:6b:6f:6a:0d:d2:01:
7d:08:01:54:12:52:c0:6b:1c:39:85:17:5e:33:a4:
14:1a:c9:5b:da:87:ac:c5:75:38:ca:33:0b:88:f5:
19:ff:b8:70:4e:0b:cc:86:79:cb:1d:c6:c4:14:52:
81:1e:67:53:f0:db:e1:c2:3b:07:14:82:4a:0d:97:
83:5c:5d:2d:3f:b6:f7:1b:74:f3:4e:13:ee:67:89:
f8:84:38:55:37:59:f8:c6:d8:1b:ee:0b:37:4f:e0:
93:17:5c:14:39:22:55:14:b1:2e:0e:96:7e:3b:0a:
80:74:cf:b1:ef:af:09:37:5b:5c:11:c2:13:5d:d4:
c2:5d:c0:02:ef:2d:28:b7:59:92:dd:b4:c0:20:b6:
3f:7f:d4:50:41:51:d7:82:c7:35:4c:44:48:71:9e:
49:90:41:b9:58:7b:ef:9a:e1:89:30:26:21:71:e1:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:76:72:8A:8D:25:F5:95:09:2F:98:71:0B:F3:2E:0E:A1:8A:1D:BF
X509v3 Authority Key Identifier:
keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/DFAA6EC60A5F11EEB7C7EE60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.8.176.0/21
IPv6:
2407:b001:1000::/40
2407:b001:3000::/40
Signature Algorithm: sha256WithRSAEncryption
87:a6:34:9e:02:ad:26:95:ab:52:97:4f:6f:f9:7f:de:b9:4b:
ab:21:2f:48:55:bf:83:f5:ab:c6:4e:cd:ed:a8:8a:7f:96:fa:
8f:a2:87:aa:95:ea:94:76:2a:6a:0b:7b:da:61:4e:d4:14:e5:
62:33:9f:d0:01:f7:02:bf:02:34:63:fa:1d:30:96:bf:5b:d8:
c4:a0:c3:ea:7e:2c:da:50:ae:04:4e:f8:c3:2e:8c:23:8d:ca:
b7:b7:12:1c:34:65:a9:0e:df:12:dc:f3:12:f0:aa:f7:26:4f:
18:69:0e:3f:9d:2e:6f:40:89:bf:38:0c:c0:d0:7d:9c:39:57:
af:2d:30:d9:8b:da:74:75:9e:89:62:45:ac:86:e1:76:0f:87:
65:63:b3:b7:f7:d3:f8:c2:9f:96:74:eb:ea:b0:1d:f4:0f:76:
ed:1e:f4:91:9e:8e:02:a0:1f:db:c9:61:5d:a7:27:3f:62:22:
ab:0f:71:68:bd:60:e1:b9:72:a3:7e:9e:d7:cd:b1:f8:cc:b0:
fb:6c:dc:d2:c5:0c:09:ff:56:34:26:fe:be:b2:fd:a8:48:60:
1e:25:a0:8d:6f:7d:d3:8a:96:21:e3:4b:51:e7:bc:01:32:f7:
1e:08:b3:66:5e:d9:06:c3:54:0c:59:19:57:29:de:99:1a:17:
22:42:d3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 15:57:10 2024 by rpki-client on console-ams.rpki-client.org