Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/7C36989C976211EFA66A0E7BC4F9AE02.roa
File: 7C36989C976211EFA66A0E7BC4F9AE02.roa (raw, json)
Hash identifier: 1tiSrMZZtiXseL7P4bM71tJ1n/9OiCqCQICeUltlGmA=
Subject key identifier: 80:9F:19:36:F0:23:CE:6C:F0:22:E8:37:25:60:F8:99:6C:EF:7B:27
Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
Certificate serial: 0469
Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/7C36989C976211EFA66A0E7BC4F9AE02.roa
Signing time: Thu 31 Oct 2024 08:31:12 +0000
ROA not before: Thu 31 Oct 2024 08:31:12 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 197537
IP address blocks: 103.174.96.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 11 Nov 2024 15:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1129 (0x469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
Validity
Not Before: Oct 31 08:31:12 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=67234050-78ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:f3:a3:72:8d:c6:e7:ea:25:09:91:02:44:
8d:63:4a:c1:07:6d:b6:dd:af:5d:a0:34:93:68:92:
29:38:ac:9c:34:d5:0b:58:81:77:01:92:e2:27:47:
23:b8:a6:71:1e:f9:6e:15:10:15:c1:25:d4:01:08:
d9:db:4a:16:72:61:71:7d:6e:5c:ff:20:8f:1b:b5:
a4:c3:98:9e:ce:06:5f:4e:f2:bb:66:dc:b2:3f:1b:
fc:a0:ab:a2:45:71:c7:ed:fd:70:92:dd:59:8f:c5:
f2:0f:0d:20:e7:e8:18:dd:72:50:e7:45:07:6c:f3:
b9:82:ff:03:7c:e3:f2:99:8c:be:23:0e:bb:bb:8d:
97:62:4d:68:69:e0:e9:4b:e5:c9:1b:45:1b:3c:bf:
00:95:19:aa:9e:fc:20:9b:da:77:ab:8e:6d:68:07:
95:51:59:c9:54:c7:82:1e:09:43:b6:6c:04:18:86:
8d:1a:8c:0a:15:72:34:be:34:16:bd:ed:56:3d:0b:
29:dd:c2:c4:1d:99:c9:17:75:c4:07:fd:3c:13:16:
25:4a:6b:da:6a:21:74:69:d0:72:66:fc:e9:a3:64:
26:6a:39:eb:a6:90:93:fa:1d:e1:ac:0d:4b:8c:b4:
82:0c:6c:d6:d2:6f:dc:ef:00:4b:9c:6e:f6:d4:27:
ae:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9F:19:36:F0:23:CE:6C:F0:22:E8:37:25:60:F8:99:6C:EF:7B:27
X509v3 Authority Key Identifier:
keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/7C36989C976211EFA66A0E7BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.96.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:ac:83:a8:ab:9c:52:76:2e:dd:5e:92:1b:b8:2b:59:d8:8c:
b9:9a:be:1f:30:7c:ff:ed:70:c6:77:66:ba:ff:58:ee:75:e9:
27:be:36:02:7f:66:b3:4e:5d:22:36:d1:bb:2b:1c:ce:6e:a3:
09:50:ee:7a:26:f5:b7:dc:64:6d:b9:8f:e7:51:b1:61:14:d5:
02:a6:60:cb:43:46:47:5f:31:64:50:eb:b8:e0:48:c5:e0:05:
bd:94:60:9d:d4:8d:43:c8:93:e8:33:0d:0c:bb:f9:a4:8c:84:
96:a1:dc:31:09:c4:8d:55:c4:96:60:27:fe:9d:15:6e:95:9b:
0d:41:cf:01:72:8a:12:d7:11:03:d9:54:5f:b3:be:d0:4a:e5:
ce:cb:a4:ba:a4:ee:8d:e5:62:92:dd:dd:be:b4:fb:79:bd:70:
4b:88:77:7f:73:58:83:2b:77:7c:79:30:cf:d7:1f:ff:e0:16:
51:8a:71:15:5a:ba:d2:f6:9a:24:18:fa:8a:01:d5:16:f5:87:
c2:34:08:52:47:e0:21:cd:83:9d:e6:75:d8:40:cd:9d:7b:ef:
90:8f:5a:52:97:3b:37:9a:db:53:90:3e:ce:cf:a6:1a:e0:a4:
6c:4d:fe:b4:4f:71:77:76:d0:65:bd:f9:a8:0d:e4:d5:6e:fc:
be:06:75:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 19:06:54 2024 by rpki-client on console-ams.rpki-client.org