Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/20C11D5ECC0E11EEAB56CF7CC4F9AE02.roa
File: 20C11D5ECC0E11EEAB56CF7CC4F9AE02.roa (raw, json)
Hash identifier: D/TZ8T0XgnreynRCRy5zVf683hKpinfTXOHdjWZ73gs=
Subject key identifier: 65:9E:75:05:45:2F:C1:E8:D9:08:45:76:B1:10:8A:1D:03:1C:7C:E9
Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
Certificate serial: 0255
Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/20C11D5ECC0E11EEAB56CF7CC4F9AE02.roa
Signing time: Fri 31 May 2024 05:01:09 +0000
ROA not before: Fri 31 May 2024 05:01:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149765
IP address blocks: 103.185.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Aug 2024 14:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
Validity
Not Before: May 31 05:01:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66595995-7535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:35:43:f2:76:c8:ab:9a:84:8d:1b:7c:ea:ff:
2a:73:31:d2:e8:19:25:3d:1b:7e:ff:f5:5b:1c:ed:
91:a2:73:a8:77:37:0c:21:af:15:cc:16:eb:b1:e8:
94:de:ba:20:d0:78:c5:1f:8e:3e:70:e8:25:2d:28:
50:4d:8a:13:fe:31:cf:30:d5:ee:32:fa:91:a5:47:
a5:5a:6d:e4:41:df:23:5c:ef:64:69:67:3a:5d:97:
34:a7:02:61:e2:4a:a4:15:1b:50:c1:e5:39:f3:99:
dd:49:cf:de:ca:45:4d:29:50:c8:d6:74:09:f6:ee:
3e:81:3d:2d:58:3c:39:de:c4:3d:87:d2:6a:40:9f:
f5:28:3c:67:8a:10:77:f6:77:5b:37:b9:05:fc:0b:
44:73:01:84:34:7e:e4:2b:fb:bf:61:99:72:68:40:
58:d5:4f:65:36:06:0b:b0:cd:38:2e:e3:d1:1b:cf:
9a:40:ac:56:78:d7:e5:3c:13:ed:49:1b:5b:e7:6b:
35:9f:7f:17:5b:98:98:19:fa:f0:87:a0:e7:62:22:
5a:e5:14:4d:53:42:b2:d5:19:14:17:28:b7:2c:e8:
3b:64:34:36:c9:36:9a:c5:0d:f2:dc:2b:bd:09:9b:
aa:44:13:7a:db:c0:ec:08:c7:f3:84:e8:44:84:44:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9E:75:05:45:2F:C1:E8:D9:08:45:76:B1:10:8A:1D:03:1C:7C:E9
X509v3 Authority Key Identifier:
keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/20C11D5ECC0E11EEAB56CF7CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.226.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ee:ab:72:2b:c9:34:4f:94:9a:ba:bb:99:3c:38:b3:82:75:
99:61:30:15:f1:90:c2:f2:cf:82:3a:d8:0e:fd:0a:f5:a2:c3:
7e:46:e2:11:67:1c:58:0e:dc:ab:96:0b:0c:7f:3c:0e:26:f5:
e4:8e:1d:3b:d7:45:82:76:dd:09:fa:eb:d5:b4:e4:08:ff:94:
bb:6b:a6:2b:5b:b3:41:eb:4d:97:0d:21:87:8f:da:87:5e:5a:
c2:01:1a:ca:ce:91:25:b5:04:6d:47:6e:27:79:1b:d2:36:db:
63:26:d9:4c:8a:f2:12:07:31:30:88:fa:4d:4b:b8:64:ab:eb:
53:d4:f6:ce:15:c4:54:02:cc:9e:4b:57:e0:2c:a6:8c:0d:ec:
ba:74:93:87:b8:fb:cc:86:91:4f:ae:57:47:7a:7a:4e:3d:f4:
52:5a:95:35:c3:2c:62:25:fa:12:79:ac:87:c8:94:91:92:ef:
5f:b3:ec:45:01:0e:16:f7:d7:7f:79:92:74:59:66:ac:64:bf:
80:d2:93:f8:02:5d:c1:c0:0c:82:1b:aa:ad:a6:d5:31:6f:a5:
89:5b:62:8f:75:42:b7:5c:51:ee:dd:68:6d:c8:ea:ff:a2:10:
05:cc:a0:13:91:ed:ea:f8:75:69:25:ac:50:12:23:45:98:30:
fd:d4:98:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 16:33:20 2024 by rpki-client on console-fra.rpki-client.org