Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/9AF0F3C801D611EDA3BFA62EC4F9AE02.roa
File: 9AF0F3C801D611EDA3BFA62EC4F9AE02.roa (raw, json)
Hash identifier: nciiFuGmxPeoho5NmphaFtp0k4wbXNH8dEwpri0vVSM=
Subject key identifier: 36:B1:C1:66:00:1E:E7:31:6A:AF:EC:9A:63:7A:20:22:E5:E9:1E:91
Certificate issuer: /CN=A915C241/serialNumber=1D61DB24D2179647497614C14F66BBFFACA9CBFD
Certificate serial: 0184
Authority key identifier: 1D:61:DB:24:D2:17:96:47:49:76:14:C1:4F:66:BB:FF:AC:A9:CB:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWHbJNIXlkdJdhTBT2a7_6ypy_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/9AF0F3C801D611EDA3BFA62EC4F9AE02.roa
Signing time: Fri 01 Dec 2023 04:34:48 +0000
ROA not before: Fri 01 Dec 2023 04:34:48 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 59215
IP address blocks: 103.243.116.0/24 maxlen: 24
103.243.117.0/24 maxlen: 24
103.243.118.0/24 maxlen: 24
103.243.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 05:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C241/serialNumber=1D61DB24D2179647497614C14F66BBFFACA9CBFD
Validity
Not Before: Dec 1 04:34:48 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65696268-dc91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a7:7f:30:1f:a8:e4:d0:1e:ad:d9:9e:43:96:
e6:08:ee:b7:49:eb:b1:8b:5b:7b:46:b5:42:8a:1d:
d0:73:8d:a9:81:07:27:50:b0:72:32:80:b0:d8:79:
64:39:bf:47:f3:a4:c6:e5:30:ff:5f:d2:7e:c6:bf:
16:63:23:70:a3:46:c3:d9:f2:1c:2a:ca:0b:a5:e4:
d6:f8:b8:dd:70:eb:4a:0b:aa:93:22:fd:d4:5c:b4:
5f:76:65:14:fe:df:4b:eb:87:a4:ac:f3:d4:dc:98:
2c:1c:f7:0a:61:7b:b1:e1:b2:d4:74:f8:d6:48:47:
aa:9b:e6:75:ce:d2:7c:2b:95:79:68:36:dc:9f:86:
7e:65:02:a5:0a:3b:08:53:0f:74:1d:f3:48:98:f5:
5f:78:a2:ce:ee:e4:06:e3:a0:b3:7d:35:5c:06:69:
ff:bd:53:3e:2a:df:3e:75:22:c5:f2:ac:d0:3f:43:
58:73:11:05:b5:75:3c:a7:3f:f3:23:bc:43:33:51:
27:35:37:ce:20:61:a6:69:9c:ef:d9:4b:15:4a:08:
1b:16:7d:9c:6f:73:1c:16:eb:ec:28:2a:2f:82:7c:
38:b2:b4:96:fa:70:d8:6c:1c:74:1a:68:8e:60:7c:
74:76:b9:47:9b:ed:33:e9:fe:60:65:e3:f7:76:a2:
75:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B1:C1:66:00:1E:E7:31:6A:AF:EC:9A:63:7A:20:22:E5:E9:1E:91
X509v3 Authority Key Identifier:
keyid:1D:61:DB:24:D2:17:96:47:49:76:14:C1:4F:66:BB:FF:AC:A9:CB:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/HWHbJNIXlkdJdhTBT2a7_6ypy_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWHbJNIXlkdJdhTBT2a7_6ypy_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C241/689AC53801D211EDA63D7E28C4F9AE02/9AF0F3C801D611EDA3BFA62EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.243.116.0/22
Signature Algorithm: sha256WithRSAEncryption
86:2d:4f:31:9e:14:20:b4:fb:e4:96:c5:6c:7a:50:c5:59:c2:
cd:02:62:13:78:3a:04:7e:c9:47:2b:8a:8f:fb:ae:c7:81:02:
96:87:b4:54:4f:49:ce:be:d8:36:1a:03:02:3c:cd:a5:23:0e:
6c:55:8e:d4:ad:15:08:5b:9b:c4:6e:64:b3:4f:4b:a3:1d:ec:
6a:e5:e7:4a:59:7b:80:2e:c3:05:3b:e7:86:a3:e2:25:91:d7:
45:ac:a2:7b:01:a0:28:e0:16:24:cf:9d:f3:9c:ab:24:ea:48:
fc:9f:1a:08:5a:6a:87:b9:24:09:80:fa:6c:cb:97:e2:82:e5:
1c:14:92:17:de:9f:52:00:71:59:94:f3:d8:7d:a7:44:c5:cf:
3c:e8:83:4f:b9:8c:63:32:cd:cf:78:31:0e:37:61:96:32:ed:
37:39:d7:50:cd:d7:0e:a1:aa:9d:ae:7c:8e:be:74:dd:39:a5:
94:a4:bd:6d:d7:bb:6d:69:98:ad:1d:bb:2e:5f:a5:f7:8a:2b:
1a:ed:f4:45:8f:92:e8:5f:07:e8:de:73:74:ce:d2:4d:c9:6a:
19:ca:e3:fb:38:65:75:8c:7d:1a:5f:42:32:4b:05:4d:c7:50:
b6:8e:c6:d1:f1:39:ef:bc:df:2b:eb:d9:6c:5c:cf:ab:09:cf:
7f:49:e1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 06:45:48 2024 by rpki-client on console-fra.rpki-client.org