Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/2D719B24024B11EEB782E936C4F9AE02.roa
File: 2D719B24024B11EEB782E936C4F9AE02.roa (raw, json)
Hash identifier: G1mQp3W8R0J18ZP0TTLAEI7e1HdttietcQXJrKTW6lg=
Subject key identifier: AE:7B:F4:4B:1E:9D:FE:74:B9:94:53:D0:A3:DD:16:0A:0A:07:E6:F4
Certificate issuer: /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial: 022E
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/2D719B24024B11EEB782E936C4F9AE02.roa
Signing time: Wed 03 Jul 2024 03:24:54 +0000
ROA not before: Wed 03 Jul 2024 03:24:54 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 208171
IP address blocks: 103.189.190.0/23 maxlen: 24
2001:df0:d840::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 04 Oct 2024 20:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 558 (0x22e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Validity
Not Before: Jul 3 03:24:54 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6684c486-efc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:32:13:3b:51:2f:7c:53:5b:6e:4c:f9:b5:ad:
9f:09:b0:ba:d5:7c:fc:93:f0:02:43:7a:f8:de:75:
04:9d:6e:0d:d5:33:40:4d:2e:90:2a:80:4f:87:0a:
29:52:ed:1d:3d:e9:c9:e9:8f:ed:6f:fc:5d:7a:1c:
83:ce:3e:31:c2:e8:f1:d6:a9:85:76:63:68:c4:24:
11:a4:83:e2:34:23:45:99:d7:8d:da:2c:f2:3d:b6:
eb:a7:9f:c7:94:0c:c1:38:8f:b7:4d:d1:bb:d8:9d:
c4:68:7a:1d:d4:e4:8b:72:e4:ba:61:17:6e:53:62:
1b:43:cc:78:51:2b:04:40:ae:70:2f:b0:0e:ec:b0:
b0:70:4d:b3:b0:79:96:fe:91:52:f1:5c:8a:96:bd:
4f:dc:57:29:a4:52:af:29:d8:14:89:ce:1e:6a:98:
9a:64:d0:02:08:7f:b3:53:be:d2:91:05:f0:aa:3d:
3f:ab:dc:da:67:bd:5d:a1:6b:e3:5a:a6:4a:2e:8e:
8c:01:85:da:4f:60:6e:d2:61:6c:47:24:2c:44:8c:
df:22:81:04:13:94:11:21:b6:b1:d2:93:4c:3d:87:
63:62:e2:c7:66:51:85:47:91:c6:40:c4:9c:dc:76:
ce:4f:14:2a:ae:58:e6:a9:b0:a1:25:d4:e6:c3:39:
44:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7B:F4:4B:1E:9D:FE:74:B9:94:53:D0:A3:DD:16:0A:0A:07:E6:F4
X509v3 Authority Key Identifier:
keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/2D719B24024B11EEB782E936C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.190.0/23
IPv6:
2001:df0:d840::/48
Signature Algorithm: sha256WithRSAEncryption
56:b7:2b:8c:87:cc:63:1f:12:d7:e9:4a:9b:92:53:2b:be:2d:
bb:1a:97:36:c2:20:24:58:7c:47:fb:53:e7:62:b3:fb:81:01:
ac:f2:37:bd:53:67:3c:ec:cb:5d:2d:53:ce:2b:30:9e:87:5d:
72:37:1c:05:a7:ac:6c:fb:4d:bc:80:5e:9c:c9:7a:03:fa:fc:
b3:6e:d7:60:d8:0f:e5:a0:7b:ce:80:b6:d1:10:94:bd:91:24:
51:e1:45:ae:2c:16:69:c3:10:16:13:46:b3:65:34:7f:f2:2a:
14:7d:96:9b:80:ca:05:a5:09:3c:33:22:ff:4e:39:b0:76:53:
f8:15:cd:22:06:74:e2:d6:93:e4:a9:cf:fd:a1:cb:a6:18:20:
68:09:ca:5a:79:82:83:ec:2e:e3:4e:1d:23:4d:53:6f:70:16:
53:ce:96:83:4a:b3:79:2e:7e:a1:a8:68:e4:92:76:27:2b:76:
7c:a2:c2:f2:0c:01:b9:af:c0:0c:77:ba:f6:f1:c8:ac:ba:58:
a1:99:ad:4e:d9:28:d5:4b:2c:ac:5c:49:8f:da:99:9b:21:37:
44:b8:7b:89:56:73:5b:cd:39:1d:f2:02:1c:9b:b2:5e:39:95:
b2:12:0c:a7:5b:bc:db:c6:48:01:a3:e1:8b:e5:01:77:e9:d5:
ff:f1:07:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 21:29:31 2024 by rpki-client on console-fra.rpki-client.org