Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/851DF0BC828C11EF9C8B7B87C4F9AE02.roa
File: 851DF0BC828C11EF9C8B7B87C4F9AE02.roa (raw, json)
Hash identifier: 19FGkFhB1sSduZbXQs9pj/yVtUnrkPjVcAgVLMLMTX4=
Subject key identifier: F0:42:CD:F2:1F:C1:67:95:7C:09:FB:F3:E6:80:11:7F:08:C6:DD:5B
Certificate issuer: /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial: 0263
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/851DF0BC828C11EF9C8B7B87C4F9AE02.roa
Signing time: Fri 04 Oct 2024 20:09:11 +0000
ROA not before: Fri 04 Oct 2024 20:09:11 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 15731
IP address blocks: 103.189.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 07:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 611 (0x263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Validity
Not Before: Oct 4 20:09:11 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=67004b67-2c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:44:78:98:84:1d:10:7c:87:5f:d1:09:77:
26:ee:9d:48:97:16:06:06:6e:5b:b6:58:5e:83:32:
53:5a:d2:09:0d:ff:07:1c:c8:59:fc:f2:a0:e1:5e:
db:d9:3f:bc:ec:bb:15:f2:cb:4a:00:89:45:45:5a:
3d:0f:68:41:4f:04:9c:58:c9:7c:37:88:8a:2f:6c:
90:c9:57:d1:16:10:f7:ef:9c:69:51:f3:69:09:92:
51:8c:1f:78:e8:96:41:26:77:e8:b6:bc:4c:3a:e5:
76:2d:49:6e:82:60:60:a2:7b:cd:92:73:90:ea:c1:
58:20:6b:40:3c:b8:2c:23:ca:95:f7:39:7f:9b:f7:
c7:69:72:c8:ec:0c:33:39:92:98:7e:d5:ce:90:cd:
f1:99:8f:e2:a5:a9:91:89:01:06:4f:4f:58:f9:7d:
ae:e8:6c:12:ce:92:32:be:15:81:ea:18:16:50:08:
ac:b1:56:b4:b1:8c:71:61:1c:1d:ef:81:d0:67:42:
4c:0c:94:75:22:80:62:0a:70:42:2e:6d:be:b8:ff:
89:27:63:6c:dd:66:b0:4f:a0:ad:7d:8e:73:83:91:
0c:0c:68:cf:43:fd:5e:49:e9:48:d7:a5:b8:43:5c:
d6:5a:42:43:67:65:fa:08:b6:59:e3:f1:f8:a1:bd:
3a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:42:CD:F2:1F:C1:67:95:7C:09:FB:F3:E6:80:11:7F:08:C6:DD:5B
X509v3 Authority Key Identifier:
keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/851DF0BC828C11EF9C8B7B87C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.190.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:5a:3b:7a:b1:5b:bb:54:92:39:64:0a:bf:e2:f2:09:8e:ee:
38:c2:c0:90:d3:9c:af:96:0d:0c:e6:bc:6d:83:20:92:9f:b9:
68:d6:09:c7:71:c3:36:04:49:77:3c:0f:53:8d:69:61:13:e8:
f8:3f:66:df:92:ad:a1:b4:3f:6b:34:23:44:88:1d:40:6e:63:
17:d6:4a:54:bd:1d:be:b4:54:b4:e4:34:f1:0a:e3:ca:26:a9:
2f:03:e1:24:fb:8d:f3:3e:fe:c2:b2:72:d9:e9:ef:18:54:e5:
7b:44:42:c5:1c:89:06:c0:83:a0:f3:1e:95:c0:d2:ae:00:69:
ea:4a:cf:4f:05:11:2d:c0:88:cb:c8:92:4c:af:62:f5:5c:c4:
44:cf:08:5e:c5:04:79:d6:5d:96:a7:0f:2e:d9:2a:0b:38:64:
94:30:9a:1d:c2:be:07:7f:85:05:50:a3:3f:a1:10:8a:e2:6b:
c6:e2:ec:3b:b0:6d:80:e8:02:ef:cb:d1:19:a1:96:7a:0c:64:
c2:33:fe:b7:be:9f:2b:a9:44:13:dc:aa:6d:7a:08:89:df:b2:
cd:c7:1d:e7:f7:d0:7b:d1:ae:37:71:61:43:d1:7a:7c:e9:a1:
81:7f:6a:41:ad:bb:fb:dc:2c:ca:45:a1:ce:77:d5:4a:aa:78:
e1:7a:25:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 10:58:36 2024 by rpki-client on console-ams.rpki-client.org