Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/465B191EE9A711EE8760887DC4F9AE02.roa
File: 465B191EE9A711EE8760887DC4F9AE02.roa (raw, json)
Hash identifier: GzDQs72mK5imqTQNUKWCmRuNwqjdxKf9h+NKIP7/zNs=
Subject key identifier: F1:66:64:B8:58:12:1D:03:2A:11:77:AC:E3:EF:E0:22:C8:44:0D:ED
Certificate issuer: /CN=A9168949/serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
Certificate serial: 16
Authority key identifier: 10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/465B191EE9A711EE8760887DC4F9AE02.roa
Signing time: Sun 24 Mar 2024 06:25:14 +0000
ROA not before: Sun 24 Mar 2024 06:25:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139642
IP address blocks: 203.20.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Mar 2024 12:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168949/serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
Validity
Not Before: Mar 24 06:25:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65ffc74a-4fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:31:e0:67:2d:79:70:56:67:a3:c8:5f:85:b7:
f8:4e:20:bc:3e:72:2b:24:5e:df:58:c1:1f:38:85:
5a:0a:e0:55:86:0b:bf:20:bb:a2:9a:ec:4d:3b:59:
db:94:7f:87:d1:ae:76:38:88:db:7b:b2:72:ae:51:
43:f9:07:20:9a:3d:c0:81:41:c3:ff:bb:d0:6b:d6:
03:aa:17:15:a4:e0:c7:30:3b:c5:7f:ab:06:12:81:
db:6e:1f:a6:7b:fb:91:57:86:9a:ec:07:c5:b3:09:
6b:38:90:9f:eb:e1:51:60:2e:6a:de:f3:e3:76:44:
44:0e:5b:c6:b2:be:49:88:e1:91:91:2b:8a:29:79:
d3:27:20:4b:bb:fa:86:09:48:a2:1d:52:17:4f:95:
c3:b1:b7:09:5a:dd:9b:47:62:b4:f6:62:a1:41:34:
37:8d:d3:46:86:0d:a5:0e:25:6d:c8:57:08:e5:ed:
03:30:3e:31:cf:ba:94:60:97:8f:66:0d:f6:50:ee:
1e:11:81:be:1b:23:f0:f3:32:39:94:c4:bd:91:7a:
55:cb:96:e0:da:cd:10:3c:ca:3d:4d:cb:06:35:e6:
97:86:ac:3f:bf:b0:86:f8:02:39:5f:62:46:87:81:
68:a0:4a:2f:51:92:d6:87:5e:6a:84:fb:68:c4:37:
7b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:66:64:B8:58:12:1D:03:2A:11:77:AC:E3:EF:E0:22:C8:44:0D:ED
X509v3 Authority Key Identifier:
keyid:10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/465B191EE9A711EE8760887DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.20.109.0/24
Signature Algorithm: sha256WithRSAEncryption
26:98:5f:e4:31:2f:39:63:cf:e1:1a:ce:73:26:15:f3:ae:80:
33:25:ca:d1:e0:44:4a:8d:58:45:c2:51:11:62:c6:49:f4:5a:
07:6b:4b:f9:4f:38:18:3d:a3:de:79:fc:0c:00:0d:95:3a:d8:
a9:22:09:9c:ab:bb:8a:6a:84:15:93:9b:f8:bb:bf:02:71:e6:
43:56:b6:80:72:34:c8:97:62:9c:cd:87:c0:ba:17:cf:a6:80:
43:f3:85:25:f9:1f:f0:7e:67:f2:5c:9d:ec:13:17:5e:8b:b5:
28:d1:e0:11:cd:e6:ce:f8:15:d9:10:93:9c:7c:b1:e7:b3:bf:
f1:6a:9e:1c:bb:68:37:ad:90:6d:23:33:ef:4d:bf:51:0d:80:
de:b1:c9:c6:e1:c3:fa:db:5e:64:e3:36:93:ba:c1:b6:a5:2f:
1f:cb:39:a4:f6:60:1b:e7:90:dd:44:fa:a2:d3:4f:5b:99:50:
98:7b:8d:40:73:35:64:3b:a1:a0:c3:ba:00:85:d3:23:dc:5a:
de:3b:78:fe:de:29:17:6b:42:cd:fc:40:0b:36:fd:36:94:94:
c2:78:5a:82:ef:1a:7f:e1:6a:af:7d:41:17:70:7c:74:11:4f:
fb:ab:cf:b6:2e:a8:7b:1d:2a:14:41:f2:22:fb:60:3b:f6:21:
17:4d:fd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-ams.rpki-client.org