Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/27247D7C0C6811EF85698B81C4F9AE02.roa
File: 27247D7C0C6811EF85698B81C4F9AE02.roa (raw, json)
Hash identifier: Zc1vo2vpAqhVct1lvDryMei9NILBbRSaCpt0tk9m7fY=
Subject key identifier: 04:E6:20:20:2C:10:B1:A1:26:36:D3:2F:99:38:16:E5:58:54:61:B3
Certificate issuer: /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Certificate serial: 0A62
Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/27247D7C0C6811EF85698B81C4F9AE02.roa
Signing time: Tue 07 May 2024 11:51:35 +0000
ROA not before: Tue 07 May 2024 11:51:35 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 138623
IP address blocks: 103.134.240.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 May 2024 21:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2658 (0xa62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Validity
Not Before: May 7 11:51:35 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=663a15c6-9ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cb:a8:2e:38:08:5d:09:83:b6:66:7b:0f:ad:
c5:00:d7:d4:0a:4e:ef:aa:89:09:7c:f9:99:17:81:
81:ec:b5:52:9f:bc:64:20:61:3d:3f:07:64:c6:da:
50:f6:77:6e:45:c7:c6:b8:4a:79:f6:06:b2:58:a9:
f8:5a:3b:c2:c6:26:83:bf:02:c7:0a:54:4a:9e:73:
cc:50:8e:df:92:5e:aa:3a:13:8c:10:c4:ce:35:e8:
84:04:92:6c:fa:57:ef:ef:dd:60:70:4b:17:a7:df:
3e:5c:b9:1e:a0:74:9a:d5:53:6d:04:9e:3a:c5:fa:
d4:08:6f:b7:0d:23:ab:3a:f4:fa:85:c3:ce:ce:32:
80:bf:e5:1c:a1:6f:01:32:cc:e3:ba:58:c0:85:1d:
56:43:82:61:6e:cd:da:20:13:f6:c0:86:1f:06:27:
27:e3:46:1b:36:97:b6:2c:57:71:05:ba:73:77:1a:
2f:18:67:ff:0b:18:fb:23:6e:5f:90:cc:dd:0c:6c:
2e:de:79:aa:9c:35:5b:d5:9d:d2:76:78:5d:1c:05:
ec:fd:15:a8:8e:ce:89:7c:99:d0:a4:b9:27:21:a2:
d1:9c:de:b4:02:24:d4:f5:94:99:b4:f5:61:48:f4:
40:91:91:21:19:39:66:e1:50:73:29:7d:20:94:af:
ac:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E6:20:20:2C:10:B1:A1:26:36:D3:2F:99:38:16:E5:58:54:61:B3
X509v3 Authority Key Identifier:
keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/27247D7C0C6811EF85698B81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.240.0/22
Signature Algorithm: sha256WithRSAEncryption
71:e6:c2:d0:1b:c9:5c:e9:e5:3e:55:94:91:fb:42:1a:1e:4a:
df:54:8a:84:14:a1:53:c1:48:b5:9e:2a:24:8d:9a:db:a8:d3:
5f:e9:7a:6c:0c:98:10:7d:de:77:34:ea:ee:55:0d:82:10:d3:
4d:c7:f6:f7:f4:9e:5a:26:23:b3:e9:49:7c:80:a9:06:61:f5:
c5:51:2a:59:dc:c4:2b:53:45:4e:93:de:5d:34:66:7d:4c:88:
ba:0a:15:6b:39:77:b9:89:46:3c:d3:0f:ff:6c:f7:cf:1e:8e:
b6:c2:4e:e5:5a:c1:a3:10:9e:dd:d9:f6:d2:3e:85:18:36:1b:
d8:e8:93:15:f8:ca:ea:28:8c:20:6f:8c:95:24:c3:41:43:3d:
e0:58:81:cf:61:3b:4a:25:8b:fe:d5:b7:dd:7b:26:be:b7:6e:
53:41:91:a9:9d:3e:30:b5:9b:06:f9:ef:9a:6a:68:64:ae:66:
66:bb:0e:93:66:87:3e:1d:3b:ff:ab:5e:38:7e:59:ed:0d:14:
aa:77:f4:cb:b7:6c:c6:67:02:bb:f0:bf:47:06:2f:66:1e:c8:
f7:bd:45:53:ec:82:ef:5d:12:ed:fd:d8:47:eb:cb:7c:22:b9:
e0:b9:68:ef:02:8d:b7:cf:12:48:30:a1:ce:52:97:bd:c3:57:
54:74:06:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org