Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/66936C70A04211EFA109E060C4F9AE02.roa
File: 66936C70A04211EFA109E060C4F9AE02.roa (raw, json)
Hash identifier: Ey0Rprr08QWDoaZ/8yy8r1IjMMXe+i6y0N3qbQ3ZaPE=
Subject key identifier: EA:7A:B3:41:6E:D1:12:7E:01:8E:B5:2E:6E:C1:D3:0D:7B:2C:6E:55
Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
Certificate serial: 0483
Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/66936C70A04211EFA109E060C4F9AE02.roa
Signing time: Mon 11 Nov 2024 15:34:30 +0000
ROA not before: Mon 11 Nov 2024 15:34:30 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 400342
IP address blocks: 103.174.96.0/24 maxlen: 24
103.174.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 19:47:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1155 (0x483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
Validity
Not Before: Nov 11 15:34:30 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=67322406-f3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6c:8d:8f:f8:6f:fd:82:bd:02:e7:2e:68:8f:
7a:c2:ff:c2:2e:f9:73:12:1c:3d:c7:c3:3b:01:a2:
a0:bf:01:0a:30:e8:9b:7c:d8:f9:55:de:77:4a:57:
d7:8e:d6:c9:0f:4b:fe:fa:c3:bd:85:97:f7:3d:9a:
00:54:cf:ec:b6:7e:81:dd:67:68:39:d0:9b:05:cc:
e1:4e:50:65:19:66:0b:f2:e0:d5:15:1f:56:28:d2:
c0:c5:51:6c:79:ab:94:37:40:8c:d2:bc:7e:f6:dd:
ca:04:5f:a7:2c:7e:bf:85:7a:4e:31:f2:63:1b:35:
75:2f:53:f8:ad:d7:7a:15:b6:a9:80:97:a3:f9:be:
33:75:99:f1:65:14:0f:b0:b2:74:94:f4:ce:c4:ee:
77:ff:fa:c2:f6:d2:84:bb:0d:4d:23:fd:de:8a:aa:
a5:fa:c3:92:65:57:07:d2:f7:a1:b6:3e:5d:39:30:
02:7c:bb:2d:06:64:ae:2b:12:60:77:80:1a:ef:c2:
a0:9f:d3:46:f3:e0:88:cc:92:0c:86:1f:27:93:62:
b6:08:f2:e6:52:8a:4b:1c:a3:ec:55:f8:8e:b8:ac:
68:ae:58:cb:81:5d:71:10:36:23:69:7b:0d:51:49:
b8:e8:19:e8:4b:7d:4e:14:cd:f1:d3:68:81:4a:eb:
8b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7A:B3:41:6E:D1:12:7E:01:8E:B5:2E:6E:C1:D3:0D:7B:2C:6E:55
X509v3 Authority Key Identifier:
keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/66936C70A04211EFA109E060C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.96.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:fb:2d:65:f6:c1:22:bc:ce:24:fc:c4:5f:82:78:3b:ff:50:
a0:0e:56:8c:f4:f4:7d:65:44:77:1d:46:f9:14:36:06:41:20:
b5:dd:21:03:b0:60:ae:9c:e4:9e:82:65:c6:bf:b3:e9:be:53:
51:01:35:04:69:69:94:3e:cc:e6:da:73:8f:73:91:df:29:91:
de:d8:c0:10:c7:da:7a:11:1f:21:73:0d:02:b1:5f:8d:7e:b7:
76:fe:e2:34:b8:9c:d4:b3:5a:bf:d0:bc:fd:a0:d5:02:ac:fd:
00:f2:e1:ee:de:bf:78:e3:cd:72:00:91:45:f7:6c:61:13:c2:
30:27:b4:6b:3c:f5:d2:16:ee:71:11:cc:1d:de:93:05:a1:5d:
a9:2e:9f:b5:d8:81:bc:d5:43:2f:dc:15:34:c9:30:4c:d6:24:
3e:2b:64:c9:7b:5a:f2:be:24:fb:3b:46:b0:03:82:fc:ef:bd:
0b:17:6a:7e:cc:4d:b8:6b:c2:05:47:36:79:db:26:52:ed:0d:
e6:07:c8:cc:13:e7:8e:13:ca:26:e6:bc:52:4c:58:77:32:4e:
ed:8b:b0:0d:a8:f4:5d:47:3c:3d:11:9d:ee:51:73:a5:7d:d5:
a9:30:a6:28:df:ae:c8:73:58:36:60:db:2c:38:04:32:6f:60:
2f:ca:a8:f0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjIzQjkxMTAvBgNVBAUTKDk4RTFFQ0JENDVENzg3OUY5QkM5NDM5RjRDNkMyRjI3
MTRBRDM2RjUwHhcNMjQxMTExMTUzNDMwWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzMyMjQwNi1mM2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxWyNj/hv/YK9AucuaI96wv/CLvlzEhw9x8M7AaKgvwEKMOibfNj5Vd53SlfX
jtbJD0v++sO9hZf3PZoAVM/stn6B3WdoOdCbBczhTlBlGWYL8uDVFR9WKNLAxVFs
eauUN0CM0rx+9t3KBF+nLH6/hXpOMfJjGzV1L1P4rdd6FbapgJej+b4zdZnxZRQP
sLJ0lPTOxO53//rC9tKEuw1NI/3eiqql+sOSZVcH0vehtj5dOTACfLstBmSuKxJg
d4Aa78Kgn9NG8+CIzJIMhh8nk2K2CPLmUopLHKPsVfiOuKxorljLgV1xEDYjaXsN
UUm46BnoS31OFM3x02iBSuuLawIDAQABo4IClTCCApEwHQYDVR0OBBYEFOp6s0Fu
0RJ+AY61Lm7B0w17LG5VMB8GA1UdIwQYMBaAFJjh7L1F14efm8lDn0xsLycUrTb1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjNCOS83OENFQUNCQzJC
MzYxMUVDQUQ1OTVCN0NDNEY5QUUwMi9tT0hzdlVYWGg1LWJ5VU9mVEd3dkp4U3RO
dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21PSHN2VVhYaDUtYnlVT2ZUR3d2SnhTdE52VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjIzQjkvNzhDRUFDQkMyQjM2MTFFQ0FENTk1QjdDQzRGOUFFMDIvNjY5MzZDNzBB
MDQyMTFFRkExMDlFMDYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnrmAwDQYJKoZIhvcNAQELBQADggEBAB/7LWX2wSK8ziT8
xF+CeDv/UKAOVoz09H1lRHcdRvkUNgZBILXdIQOwYK6c5J6CZca/s+m+U1EBNQRp
aZQ+zObac49zkd8pkd7YwBDH2noRHyFzDQKxX41+t3b+4jS4nNSzWr/QvP2g1QKs
/QDy4e7ev3jjzXIAkUX3bGETwjAntGs89dIW7nERzB3ekwWhXakun7XYgbzVQy/c
FTTJMEzWJD4rZMl7WvK+JPs7RrADgvzvvQsXan7MTbhrwgVHNnnbJlLtDeYHyMwT
544TyibmvFJMWHcyTu2LsA2o9F1HPD0Rne5Rc6V91akwpijfrshzWDZg2yw4BDJv
YC/KqPA=
-----END CERTIFICATE-----
Generated at Tue Nov 12 20:49:34 2024 by rpki-client on console-fra.rpki-client.org