Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177BBE/4659591C02A411ED87D29C87C4F9AE02/0A66726A02A811EDAFD60F37C4F9AE02.roa
File: 0A66726A02A811EDAFD60F37C4F9AE02.roa (raw, json)
Hash identifier: ehgqlCQrEiJEVDXacpEN6aRJY6Ux0Dtp6mAfjyjVKrQ=
Subject key identifier: C8:A6:0D:69:BC:C0:A7:FA:42:81:FA:08:46:42:29:A9:18:8D:4C:C0
Certificate issuer: /CN=A9177BBE/serialNumber=C86280885892DDB490D9AF0AC1DD2D86EF9B3BE5
Certificate serial: 01C8
Authority key identifier: C8:62:80:88:58:92:DD:B4:90:D9:AF:0A:C1:DD:2D:86:EF:9B:3B:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGKAiFiS3bSQ2a8Kwd0thu-bO-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177BBE/4659591C02A411ED87D29C87C4F9AE02/0A66726A02A811EDAFD60F37C4F9AE02.roa
Signing time: Wed 03 Apr 2024 05:07:00 +0000
ROA not before: Wed 03 Apr 2024 05:07:00 +0000
ROA not after: Thu 01 Aug 2024 00:00:00 +0000
asID: 135602
IP address blocks: 103.18.248.0/24 maxlen: 24
103.18.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 May 2024 22:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177BBE/serialNumber=C86280885892DDB490D9AF0AC1DD2D86EF9B3BE5
Validity
Not Before: Apr 3 05:07:00 2024 GMT
Not After : Aug 1 00:00:00 2024 GMT
Subject: CN=660ce3f4-6ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3e:90:e0:ab:e5:18:47:b3:34:70:80:19:f3:
1b:d9:b0:34:1a:a5:f1:2c:e8:b0:c5:b2:4a:21:8c:
7c:19:b7:47:93:98:ee:3c:c5:13:67:6a:86:95:e6:
f4:56:5a:49:90:2b:e0:70:4c:da:02:c9:a4:9a:b7:
10:1a:9f:61:52:d8:2d:39:1c:db:70:a7:71:26:e7:
39:df:dd:15:0a:dc:77:21:19:31:95:b9:36:02:cf:
98:82:2b:a9:31:47:df:f0:45:9d:92:9a:ef:bd:67:
58:d9:c3:9d:d7:fa:ee:00:02:cd:e6:3b:fd:ff:28:
7b:f5:50:e6:3e:29:d5:dd:e4:a1:8a:06:be:07:92:
b5:8f:52:c2:61:21:a8:1f:54:4e:3a:a3:25:91:35:
28:e9:17:22:5a:f0:f5:c8:94:c5:0c:e2:3b:25:51:
28:03:4a:11:a3:43:62:57:f4:10:9f:4e:c9:f2:ba:
cd:b5:d1:82:ad:b4:33:c4:49:bb:4d:cd:cd:0a:85:
5b:1d:dd:44:40:fa:7c:ea:fa:80:7f:66:af:53:4d:
cd:d8:62:01:d8:5f:f9:a2:e5:50:10:12:f6:fc:91:
45:b0:7c:9a:82:17:09:49:34:5b:6f:18:60:66:ba:
6a:a7:2f:a9:63:46:66:7c:79:3a:ca:ba:c5:a6:c8:
0b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A6:0D:69:BC:C0:A7:FA:42:81:FA:08:46:42:29:A9:18:8D:4C:C0
X509v3 Authority Key Identifier:
keyid:C8:62:80:88:58:92:DD:B4:90:D9:AF:0A:C1:DD:2D:86:EF:9B:3B:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177BBE/4659591C02A411ED87D29C87C4F9AE02/yGKAiFiS3bSQ2a8Kwd0thu-bO-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGKAiFiS3bSQ2a8Kwd0thu-bO-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177BBE/4659591C02A411ED87D29C87C4F9AE02/0A66726A02A811EDAFD60F37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.18.248.0/24
103.18.251.0/24
Signature Algorithm: sha256WithRSAEncryption
77:63:0d:5b:ec:8f:35:ad:6a:27:69:72:99:48:52:c8:64:e5:
91:0f:c2:a9:da:7f:a5:66:90:36:e6:c3:6b:26:cb:91:78:6f:
e8:2f:e1:76:e3:b2:a3:4d:80:9c:09:13:f0:ad:d0:64:20:7d:
94:28:47:be:04:51:7e:20:ec:4d:e8:1e:e9:68:9d:3b:08:36:
3b:4a:b9:ec:12:59:fb:46:e8:be:15:15:23:f1:c3:6b:6b:cd:
21:70:0a:c9:72:c6:47:f7:fa:81:cb:44:d8:4f:2c:59:23:f5:
93:73:b0:4e:78:15:d4:ba:9c:d3:43:7d:ac:db:ea:45:09:83:
43:49:03:6d:e0:46:47:6e:6d:7d:81:0b:0a:ae:37:c9:48:6e:
68:96:24:a6:67:84:e1:bd:0c:72:3c:82:b2:7d:23:64:fc:52:
cb:2d:7b:64:d3:c5:a5:46:26:4b:99:2c:24:f1:82:5f:5b:1f:
11:0f:8a:51:79:5e:a5:e1:08:fc:c7:23:70:21:a5:0e:41:02:
88:ae:e2:0d:e6:67:ff:9f:30:3b:81:4c:7c:b1:5a:13:d9:e4:
a4:bc:df:44:3f:15:87:9e:56:00:f4:e5:0b:c6:38:60:2b:96:
31:8f:2a:c8:3f:eb:8d:7b:10:5e:4a:a5:4b:c0:aa:2f:5f:ec:
12:be:57:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 00:05:35 2024 by rpki-client on console-ams.rpki-client.org