Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/E86BB2AA8E6511EF9902D973C4F9AE02.roa
File: E86BB2AA8E6511EF9902D973C4F9AE02.roa (raw, json)
Hash identifier: mIVnx3LdX2bYKZ4d6ds00Hf7QW1HnaZAPhire9w0AOA=
Subject key identifier: BA:94:10:C0:20:2E:EB:B1:C2:E4:C8:AF:F0:BA:E2:C5:46:11:8E:31
Certificate issuer: /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial: 0275
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/E86BB2AA8E6511EF9902D973C4F9AE02.roa
Signing time: Sat 19 Oct 2024 22:03:02 +0000
ROA not before: Sat 19 Oct 2024 22:03:02 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 8100
IP address blocks: 103.189.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 21:18:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 629 (0x275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Validity
Not Before: Oct 19 22:03:02 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=67142c95-ce90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:17:2d:f8:70:c7:c4:98:d5:e9:cf:8a:7b:be:
d4:26:7f:8b:76:9d:5a:ed:af:94:c8:50:75:9f:c6:
21:59:29:0d:03:da:58:08:ac:46:7d:be:ed:f0:08:
ad:ec:74:88:96:79:26:9d:53:43:ca:48:f6:bd:85:
22:f9:f6:db:d5:9a:0f:4e:28:67:b0:ce:a2:42:5b:
9d:79:23:a5:c0:a3:c9:f2:d2:8a:16:43:16:a5:e3:
83:45:16:9b:d5:5c:7a:b8:90:55:d5:a5:aa:a6:ca:
da:f3:fe:34:4e:09:b5:f0:39:33:57:b6:9d:d2:be:
95:10:da:17:a3:26:21:ee:2d:32:60:44:af:bd:ce:
ef:b4:1f:c9:24:d0:db:d4:c7:33:d8:e7:45:e9:7a:
95:90:28:68:ae:f1:39:28:61:be:70:df:e5:5a:d8:
5e:53:5b:7d:19:0a:3e:11:fb:43:7a:e1:9b:6e:f5:
2a:b6:6a:ce:d7:f5:fc:24:ec:dd:a0:77:d4:5b:f7:
04:2a:27:77:17:e6:35:21:84:5c:5b:b3:b3:a5:89:
b8:f1:c6:ed:a1:6b:8a:af:8a:93:ce:25:da:d2:dc:
38:a2:7f:12:6f:8a:44:56:31:83:45:7f:e1:36:2d:
0b:76:6a:d9:06:b4:fa:16:c6:e9:16:e6:a5:77:ab:
d2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:94:10:C0:20:2E:EB:B1:C2:E4:C8:AF:F0:BA:E2:C5:46:11:8E:31
X509v3 Authority Key Identifier:
keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/E86BB2AA8E6511EF9902D973C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.191.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:29:40:ff:65:aa:4a:30:6d:df:15:67:c9:c1:2f:b9:9f:17:
de:86:9d:5d:3e:aa:29:06:e7:3e:8c:7f:26:68:34:f3:c7:4b:
f9:c7:c1:bf:cc:ae:0a:e0:36:39:26:4c:92:28:ed:21:e9:78:
1b:34:d9:bc:50:d5:03:88:ad:e6:e6:aa:62:07:2c:6e:fb:9f:
f5:43:a3:b3:dd:9a:92:88:43:04:85:d3:69:99:9f:0f:2a:85:
e6:e7:14:ef:16:00:a8:19:49:69:0c:de:c0:a4:af:aa:ee:65:
f1:e1:a2:5b:c4:37:6a:8c:41:38:71:15:9a:c1:ba:cc:c2:d6:
b7:88:62:03:b5:f5:38:b4:76:17:e8:bf:33:a5:ec:6d:f3:51:
1c:e5:04:6f:f1:85:a3:f1:9d:96:e8:9b:16:11:1f:63:99:0b:
e3:a9:14:7b:7e:e1:60:ae:97:5e:69:45:3d:e7:9a:34:d2:29:
2b:20:80:b1:7a:74:01:29:ab:b7:d2:58:9b:9c:c1:ae:1a:6f:
94:b8:17:85:c0:d3:af:28:9f:18:ab:e5:d7:d5:c1:af:3f:7c:
cc:a0:70:df:69:3d:a8:46:8e:1a:7b:ea:50:d9:04:d9:3b:24:
4c:32:8d:80:be:7b:3d:3c:80:30:75:17:a0:0e:4c:f9:8f:a6:
9b:b6:18:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 23:26:37 2024 by rpki-client on console-fra.rpki-client.org