Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177BBE/4659591C02A411ED87D29C87C4F9AE02/0AFF039A02A811EDAFD60F37C4F9AE02.roa
File: 0AFF039A02A811EDAFD60F37C4F9AE02.roa (raw, json)
Hash identifier: CeOCbbMYWJi+SHnuTmpE1raSEKomLoZtvUFHD0YT0FQ=
Subject key identifier: A1:7A:B7:51:2E:0E:83:C4:C8:12:B4:96:20:E5:22:18:2C:73:24:90
Certificate issuer: /CN=A9177BBE/serialNumber=C86280885892DDB490D9AF0AC1DD2D86EF9B3BE5
Certificate serial: 01C9
Authority key identifier: C8:62:80:88:58:92:DD:B4:90:D9:AF:0A:C1:DD:2D:86:EF:9B:3B:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGKAiFiS3bSQ2a8Kwd0thu-bO-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177BBE/4659591C02A411ED87D29C87C4F9AE02/0AFF039A02A811EDAFD60F37C4F9AE02.roa
Signing time: Wed 03 Apr 2024 05:07:01 +0000
ROA not before: Wed 03 Apr 2024 05:07:01 +0000
ROA not after: Thu 01 Aug 2024 00:00:00 +0000
asID: 17483
IP address blocks: 103.18.249.0/24 maxlen: 24
103.18.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 May 2024 22:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177BBE/serialNumber=C86280885892DDB490D9AF0AC1DD2D86EF9B3BE5
Validity
Not Before: Apr 3 05:07:01 2024 GMT
Not After : Aug 1 00:00:00 2024 GMT
Subject: CN=660ce3f5-3a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:96:35:cb:e0:f5:29:0c:18:b8:7e:c7:62:90:
0f:fc:a6:2b:26:de:14:46:4e:4e:da:cf:e7:21:09:
14:46:aa:c8:90:c0:39:8c:2d:d4:d8:eb:91:5f:19:
01:3c:c6:e0:06:2f:9e:77:97:51:5d:f9:f0:76:66:
d1:eb:29:f8:d5:13:7c:da:1d:c7:8f:07:97:05:f6:
47:a6:5d:ac:98:95:7c:44:14:f7:93:d6:11:60:0d:
cd:9c:17:7a:80:76:e1:78:a8:89:d1:21:09:32:75:
66:89:13:73:32:59:25:99:6b:ba:5a:04:ee:58:77:
d6:bd:ad:84:2d:77:7d:77:05:26:f8:a2:16:79:54:
a5:f3:2c:99:7b:bb:41:e0:df:98:93:a8:72:88:ef:
f2:86:0f:e0:70:1b:c9:73:e5:42:b9:8f:80:54:c6:
c4:a2:0b:c4:e2:0c:2f:a3:6b:3a:3c:95:84:0b:e5:
3a:47:28:93:a0:7a:d2:9a:94:fc:93:d2:df:fe:17:
2c:a6:c8:60:22:21:da:ce:6d:76:de:e1:c2:c3:9c:
b4:85:2b:cb:60:e2:02:f0:69:0d:7e:9b:a4:0f:8a:
78:62:da:4e:6b:3b:2a:30:91:64:f7:c2:96:fe:4d:
78:cb:60:4b:c1:1c:bd:16:53:98:3a:86:87:4b:4b:
49:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7A:B7:51:2E:0E:83:C4:C8:12:B4:96:20:E5:22:18:2C:73:24:90
X509v3 Authority Key Identifier:
keyid:C8:62:80:88:58:92:DD:B4:90:D9:AF:0A:C1:DD:2D:86:EF:9B:3B:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177BBE/4659591C02A411ED87D29C87C4F9AE02/yGKAiFiS3bSQ2a8Kwd0thu-bO-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGKAiFiS3bSQ2a8Kwd0thu-bO-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177BBE/4659591C02A411ED87D29C87C4F9AE02/0AFF039A02A811EDAFD60F37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.18.249.0-103.18.250.255
Signature Algorithm: sha256WithRSAEncryption
15:65:74:fa:4e:af:0c:34:f6:01:3e:d9:46:41:ea:88:31:39:
1b:ea:2c:1b:ff:66:55:46:08:8c:fc:5f:3f:a9:7f:33:56:da:
09:f3:48:87:bb:0b:46:6a:b7:b0:39:88:a7:ea:78:06:73:9f:
bd:f3:0a:b8:96:fb:0f:9e:52:4e:33:78:9c:8b:ee:a5:5e:f8:
24:50:51:f4:89:62:c1:e7:88:39:ab:51:88:d9:25:05:0b:4a:
ff:f6:9b:d8:d7:40:38:f2:db:e1:eb:7e:0e:9a:ac:31:c4:8d:
44:48:ea:9e:31:fa:92:96:92:dd:fe:9d:ad:ec:c5:97:60:a8:
cd:91:ea:dc:5a:4c:99:5b:31:f3:ee:5e:c3:5e:02:b8:b7:c8:
a1:b3:6b:1b:a6:09:08:90:80:68:e2:5f:52:81:f0:d9:be:42:
f3:5c:4f:78:a9:d4:5d:69:68:1a:fc:7f:a6:b7:fa:e2:4a:3d:
af:65:a8:5e:81:61:af:82:7c:4f:7c:92:cf:18:fb:68:70:9a:
e2:53:ab:d4:66:7d:0a:f5:c4:26:98:05:8c:3b:54:f5:5e:63:
9e:d5:c2:c8:cf:69:9c:56:29:82:91:67:c3:89:65:75:8c:cd:
54:72:a1:5a:95:85:f0:e5:59:14:41:3c:89:65:6d:b8:53:ca:
d6:25:37:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 00:05:35 2024 by rpki-client on console-ams.rpki-client.org