Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/674743FCB5E411EDA143B259C4F9AE02.roa
File: 674743FCB5E411EDA143B259C4F9AE02.roa (raw, json)
Hash identifier: 99SzWTchwz/heq5hSs3tXaMqMVZV43TqEvRt9UZciB0=
Subject key identifier: 21:4F:EE:20:C6:89:45:FC:3D:6C:2C:0D:5F:11:0A:76:59:DD:44:BE
Certificate issuer: /CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7
Certificate serial: 0BBD
Authority key identifier: 21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/674743FCB5E411EDA143B259C4F9AE02.roa
Signing time: Tue 30 Apr 2024 19:58:09 +0000
ROA not before: Tue 30 Apr 2024 19:58:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138954
IP address blocks: 103.137.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 06:13:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3005 (0xbbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A608/serialNumber=211C550B53EB20475185BABCDE7E70DF674448B7
Validity
Not Before: Apr 30 19:58:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66314d51-c46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7d:96:3b:5e:12:16:98:ac:14:de:c4:f1:b9:
e4:e2:c1:5c:9c:1c:36:1e:67:51:d0:be:01:e6:46:
c4:d7:83:74:28:89:9f:4b:14:3a:5b:fa:66:a7:68:
d3:67:4a:10:a2:af:7a:a3:c2:d3:da:ee:61:69:af:
47:21:ff:e9:7b:6c:fd:fe:dd:43:87:fe:83:7f:71:
4b:0d:87:f8:fc:28:10:66:96:2e:d7:62:a2:e7:ea:
79:6f:5f:ff:a9:d7:a8:79:8e:23:ac:48:3f:b3:36:
9e:d5:b4:8b:e2:3e:df:76:42:2d:ba:1b:2f:d7:98:
68:c8:d3:88:9b:5d:5f:d6:4b:27:b5:79:89:c2:5e:
4a:36:6c:7c:a4:5c:a0:41:7e:d6:27:82:1d:97:53:
3a:cd:96:e3:b1:e3:5b:d8:fb:d6:9d:d0:c2:3a:61:
60:a1:10:5c:98:cf:69:4e:1f:bc:18:56:85:90:22:
a6:a4:60:ed:d4:02:48:97:13:f8:2d:bf:2f:27:d0:
ad:1a:7c:0f:e2:0e:69:f3:4e:e1:ee:aa:bf:1d:2a:
82:9a:cb:5f:be:0a:21:f4:12:ad:27:d6:5f:bc:5b:
09:21:f4:50:bc:a4:19:cc:cd:f2:83:1b:ab:77:2a:
44:e0:ad:24:da:40:c4:dc:b7:fc:7a:ab:1c:35:ac:
79:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4F:EE:20:C6:89:45:FC:3D:6C:2C:0D:5F:11:0A:76:59:DD:44:BE
X509v3 Authority Key Identifier:
keyid:21:1C:55:0B:53:EB:20:47:51:85:BA:BC:DE:7E:70:DF:67:44:48:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/IRxVC1PrIEdRhbq83n5w32dESLc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRxVC1PrIEdRhbq83n5w32dESLc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A608/7480FC8802E711EAB0450418C4F9AE02/674743FCB5E411EDA143B259C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.162.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:af:cf:04:69:be:07:1a:62:0a:2f:23:8e:f9:01:53:e7:25:
02:3f:36:94:2e:75:de:16:01:26:b8:d7:c7:7d:8c:9b:68:41:
5b:26:1c:4f:ac:d7:a6:89:a8:80:ad:84:4a:f2:19:37:0f:d8:
99:b8:4d:37:af:dd:4d:51:ea:b4:4f:93:2b:69:93:b7:d9:fa:
7d:67:3b:0c:1e:f0:9d:a1:f2:1b:ba:01:e6:35:06:ff:f3:ea:
5e:c5:1f:a1:8a:bf:92:e8:23:85:23:d9:f6:06:b9:ec:cf:99:
fe:7d:3f:0a:d6:1f:5d:c7:68:63:db:0f:99:b2:d8:6b:3b:5f:
62:da:b6:f9:c7:bf:aa:14:73:d2:4e:dc:34:f5:aa:ec:53:90:
90:37:86:d5:9a:b6:96:9b:22:84:18:d8:10:c4:15:93:82:44:
73:e8:5c:b7:43:b9:03:46:8b:79:25:12:c8:a8:95:b9:c3:93:
49:99:1a:c9:55:91:72:0e:e4:d4:e9:1f:26:1a:65:61:54:8e:
53:f6:75:af:b5:b0:1b:80:14:d7:25:8b:42:7d:c2:f5:fd:55:
90:93:73:07:85:09:5b:a1:b8:e4:1b:a8:d3:d7:35:45:dc:91:
b7:8d:55:e1:f4:2c:46:40:c0:3e:c9:22:b1:70:3f:04:65:a3:
a9:6c:06:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 07:31:20 2024 by rpki-client on console-fra.rpki-client.org