Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/5CB436EE207011EC96725B5AC4F9AE02.roa
File: 5CB436EE207011EC96725B5AC4F9AE02.roa (raw, json)
Hash identifier: pMSRrPlwYXjKyQW7ObhaNND5JpCc3gbkWg2/9paJUAo=
Subject key identifier: 22:AD:F9:5B:07:39:76:A0:1E:9B:2C:7E:A7:C4:4F:F9:9B:2F:29:33
Certificate issuer: /CN=A916D29F/serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
Certificate serial: 0D81
Authority key identifier: AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/5CB436EE207011EC96725B5AC4F9AE02.roa
Signing time: Thu 04 Jan 2024 18:36:18 +0000
ROA not before: Thu 04 Jan 2024 18:36:18 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 394844
IP address blocks: 103.105.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 21:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3457 (0xd81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D29F/serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
Validity
Not Before: Jan 4 18:36:18 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6596faa1-b6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:37:85:81:81:6b:66:a1:0a:29:e0:58:54:09:
5c:11:04:14:bd:6e:7e:56:03:38:da:11:4b:c4:99:
ac:0c:bf:e7:78:3a:98:3c:2e:f1:15:df:bf:55:63:
c5:6c:27:dd:6c:3d:a9:24:fb:e1:28:ca:af:63:85:
9f:a3:e4:b7:c5:01:7e:2c:06:dd:ed:59:b5:20:5f:
e6:48:ee:f2:bf:83:75:4e:94:7c:43:c6:51:e9:17:
76:4a:1c:14:1d:51:47:6a:17:52:21:90:2c:e5:8d:
fc:5a:21:45:1c:88:58:fc:60:43:46:1a:67:1a:5f:
da:9f:75:4b:fe:32:2b:1f:10:5a:42:59:c9:58:46:
b6:3f:08:98:05:06:7f:6c:b5:01:14:5e:4e:be:91:
04:eb:dc:e2:c6:30:ec:2c:d7:9d:09:0d:0e:a7:b2:
4e:4b:1f:32:48:45:d1:70:31:d0:a0:09:cb:2b:34:
c0:79:a7:22:b6:8c:ab:76:0f:76:a5:b8:50:70:4c:
78:23:7c:f8:e3:e7:62:aa:4d:0c:4f:db:78:f3:4f:
4e:21:2a:cf:aa:bc:c5:13:9a:25:c5:93:0c:95:db:
ee:93:f4:6d:67:96:4c:7b:e4:b0:ca:fa:d1:ac:a9:
c8:1d:95:62:74:0c:98:bb:80:a9:5f:2d:1b:e2:a9:
1a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AD:F9:5B:07:39:76:A0:1E:9B:2C:7E:A7:C4:4F:F9:9B:2F:29:33
X509v3 Authority Key Identifier:
keyid:AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/5CB436EE207011EC96725B5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.105.166.0/24
Signature Algorithm: sha256WithRSAEncryption
76:96:94:e7:20:77:3b:52:36:bc:e4:61:3d:c9:36:a2:76:88:
e9:07:fd:f3:74:18:06:20:d8:f0:28:3e:80:14:10:6c:46:ff:
3e:db:36:d4:e2:87:1d:58:75:1d:73:bd:fd:6a:b8:5f:42:a3:
83:fd:ab:2f:0c:40:a5:66:7d:d5:1d:1d:a2:94:13:34:9a:4d:
ce:77:23:8c:36:71:89:8c:92:c3:da:b0:89:82:1a:9d:73:ad:
e4:ce:69:85:09:e3:eb:d9:0f:7f:6e:45:02:b1:e1:d1:d1:eb:
fa:8e:a0:b6:a0:42:af:b8:78:fd:5b:41:db:78:ec:c7:3a:13:
af:ae:cf:b5:13:7f:39:23:af:60:01:22:8a:0f:df:82:d0:f8:
d9:1b:b5:7f:33:73:b8:ff:db:41:ff:5c:d5:20:7e:e1:88:40:
d8:a6:12:41:99:f2:42:50:eb:51:49:0e:1d:cd:75:50:4f:fe:
09:59:e5:2d:d4:f5:c1:8d:9f:d1:f9:6f:7b:ca:0b:9d:6c:ad:
5b:5d:fa:51:a7:51:3e:e2:b7:06:69:ea:1c:7f:64:9b:4a:ac:
17:fc:9c:14:2b:ef:3a:68:6f:c6:b9:d4:8e:99:50:2a:41:34:
92:7f:07:28:a0:4c:45:fb:b6:45:73:9d:d4:cc:6d:ed:29:77:
23:2d:cf:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 23:56:00 2024 by rpki-client on console-ams.rpki-client.org