Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/3212362291F911EF81920027C4F9AE02.roa
File: 3212362291F911EF81920027C4F9AE02.roa (raw, json)
Hash identifier: Ns0ScW95fMWDCIlQW5clVdPdAM5hzrMUEdm1UGaLbBw=
Subject key identifier: 8F:E5:8E:C3:F8:EC:29:6D:57:1C:41:A6:91:24:E2:46:1E:D4:CB:B9
Certificate issuer: /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial: 079F
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/3212362291F911EF81920027C4F9AE02.roa
Signing time: Thu 24 Oct 2024 11:14:55 +0000
ROA not before: Thu 24 Oct 2024 11:14:55 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.72.100.0/24 maxlen: 24
103.72.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Oct 2024 03:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1951 (0x79f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Validity
Not Before: Oct 24 11:14:55 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=671a2c2e-8a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:44:5f:99:88:e8:cb:aa:ec:fe:ae:0b:9b:f3:
71:f6:6e:db:66:b2:68:73:74:6f:e4:d2:c9:3f:8d:
61:08:be:59:06:7c:c5:bb:e8:e3:a9:0e:0d:e5:38:
2e:62:17:4f:8f:43:98:32:b2:03:27:ec:83:0c:5c:
87:56:fa:a7:a2:30:78:55:fc:bc:ab:75:91:f4:c5:
ad:fa:46:1b:fa:f2:35:ea:81:72:2c:36:73:d8:ec:
d4:f2:80:f5:a6:ab:0b:5f:cd:e7:43:30:8d:ce:1c:
93:54:af:ef:f5:2f:84:b7:a4:28:ca:23:c0:29:37:
91:bb:c1:0b:45:27:74:70:2d:0f:4d:e7:17:c9:68:
3f:2d:4e:2e:f8:b3:c5:3c:45:64:fa:16:fe:6b:89:
f4:81:7f:42:67:8a:9f:a5:a8:e8:02:97:3f:b8:95:
c5:34:45:6f:11:f0:92:bd:cd:8d:0f:87:17:32:a2:
4d:b8:c0:7c:8d:df:1e:1b:14:02:25:1d:49:47:72:
94:f3:3c:d6:49:3d:4a:1d:f2:3d:95:43:38:c5:98:
f5:85:b6:43:23:03:d3:41:0e:d6:aa:5d:06:69:7c:
ef:9a:1d:50:22:c8:2e:3d:20:4c:98:6f:90:66:62:
e2:32:05:2b:d9:29:99:e2:03:e0:a5:c1:cf:da:82:
e6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E5:8E:C3:F8:EC:29:6D:57:1C:41:A6:91:24:E2:46:1E:D4:CB:B9
X509v3 Authority Key Identifier:
keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/3212362291F911EF81920027C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.100.0/24
103.72.102.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:65:ce:cd:0f:ad:f7:78:77:29:87:75:c5:32:12:d2:45:81:
6a:0d:ba:01:9f:9a:cd:4f:76:09:0f:cf:0a:e2:b0:3f:59:96:
b4:1b:0d:84:d4:35:9b:3f:38:04:33:2e:df:ad:11:e9:1e:47:
ce:48:b4:da:d4:9b:19:ee:4f:37:5f:0a:70:55:62:87:30:51:
2b:77:8d:f9:72:cf:df:8b:f8:86:88:de:df:16:ca:f6:15:99:
00:f3:3d:92:c7:78:df:f8:fe:34:a4:0e:93:5a:fd:f4:77:32:
01:59:01:91:be:41:b4:55:cf:94:87:f4:9c:47:4c:6f:ab:68:
c3:a7:94:ab:6d:db:9d:72:c8:a8:c1:cb:09:ab:54:43:13:2c:
38:28:82:28:e9:5d:37:d3:61:cd:d3:c0:5a:84:f4:af:ca:7a:
2b:99:00:0a:81:68:48:7b:2f:a1:2d:2d:ae:a5:3d:e3:f8:03:
94:7b:83:6f:18:ff:42:ce:6c:44:93:2a:b4:23:f0:88:cf:3c:
cb:83:d0:d3:09:a3:ed:3b:85:bb:3b:98:78:17:2c:f2:9a:ef:
fd:82:ca:a8:ba:77:36:db:9f:27:68:b6:49:62:da:8e:c5:45:
fc:cf:9d:de:68:27:95:88:7e:33:4e:74:fe:c2:8c:3a:ef:de:
65:f1:c3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 27 06:31:41 2024 by rpki-client on console-ams.rpki-client.org