Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/3118827E2BF411EE9019D909C4F9AE02.roa
File: 3118827E2BF411EE9019D909C4F9AE02.roa (raw, json)
Hash identifier: 643w2fI5xbZb20IcawaT8HdXXrFGZ3sTkKTygKAEuxw=
Subject key identifier: EC:CB:FB:30:AB:B0:A3:FE:1E:77:F7:C7:C6:81:85:75:D0:79:0E:B2
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 01D8
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/3118827E2BF411EE9019D909C4F9AE02.roa
Signing time: Wed 26 Jul 2023 20:37:09 +0000
ROA not before: Wed 26 Jul 2023 20:37:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35758
IP address blocks: 103.229.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 22:59:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Validity
Not Before: Jul 26 20:37:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64c183f5-6800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:05:5f:c6:6b:10:e2:12:a0:8c:47:e0:05:ef:
d7:2c:98:8a:e6:4b:ee:22:5d:f7:40:43:d6:37:7f:
fc:03:9b:03:ad:00:32:83:f5:31:32:be:fd:82:0d:
2f:12:1e:f6:60:45:f0:dd:e7:ba:62:d4:20:9c:13:
81:96:b7:78:19:d8:c5:85:cd:a6:14:af:85:d4:77:
cb:39:22:9f:71:53:21:98:99:98:59:5e:2f:95:e2:
8a:96:5a:bd:10:ee:71:44:cf:af:2d:79:41:6f:d6:
39:e8:6c:a9:75:e7:65:fd:4e:8b:1d:ad:c8:df:76:
26:b3:41:c3:36:91:08:8b:42:fb:b3:43:e1:b6:3c:
28:8f:bf:30:86:62:fb:fb:b2:69:3b:75:68:f0:63:
83:17:a2:af:eb:6e:85:e3:aa:bc:84:11:61:27:2a:
e8:cf:5d:e5:24:f3:45:51:38:3c:1c:42:35:a6:f8:
f5:b8:8d:15:f4:05:60:f9:17:fc:9d:8c:6b:ac:7d:
24:cb:6d:74:11:12:4b:ef:48:63:51:17:cc:23:4b:
f0:e6:69:f6:46:9a:e0:ef:09:d4:fe:37:1a:b5:d6:
c2:02:73:50:f4:b1:90:f0:16:7f:71:f5:9f:0e:d6:
c0:21:3c:09:d9:78:b8:a5:a8:0e:7c:c3:43:0a:21:
96:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CB:FB:30:AB:B0:A3:FE:1E:77:F7:C7:C6:81:85:75:D0:79:0E:B2
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/3118827E2BF411EE9019D909C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.118.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:c9:fd:19:8f:d8:aa:d2:82:72:70:7b:ad:64:b7:20:92:9c:
d2:56:1c:25:7e:7b:74:c5:b4:ad:e6:8b:d8:89:53:72:c8:6c:
dc:2e:32:1a:a1:fa:2e:c3:83:f4:a5:40:3f:82:2b:cf:5a:25:
c8:37:f1:10:aa:1a:e5:a1:3f:9a:98:8d:5a:78:9a:1b:50:ad:
bb:a2:b2:6d:c4:15:5b:01:b2:4d:cd:76:1d:4b:f0:13:2e:00:
f7:d5:59:1e:90:ed:42:6a:b5:6b:d1:35:fd:f9:c7:55:a1:f0:
57:a2:d3:62:d1:1f:2c:77:8f:38:d3:86:a4:ba:75:a5:c2:73:
71:54:1d:3d:67:38:bd:b6:78:e0:5d:ed:e5:3e:c0:73:b9:4c:
3b:1b:d8:8c:c1:ce:38:ad:1f:e4:62:ee:f6:1e:81:d8:4d:dc:
c3:e9:82:33:16:cc:27:c3:a2:97:10:6f:80:cf:ab:01:ea:dd:
f8:c4:8d:5b:0a:ed:3a:af:12:2b:71:c9:36:19:b8:0e:74:7a:
0b:d3:b0:59:a4:d0:6f:5b:a6:3b:6a:45:15:e9:be:47:98:ee:
ce:ee:25:6c:cc:47:af:c7:a1:c3:99:47:29:0e:a9:fd:8d:4e:
e9:df:e5:31:8f:27:c1:c7:97:78:9e:f0:48:2c:4f:57:d3:8a:
17:90:5b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 01:11:58 2024 by rpki-client on console-fra.rpki-client.org