Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/61DAB892621B11EF9A45547AC4F9AE02.roa
File: 61DAB892621B11EF9A45547AC4F9AE02.roa (raw, json)
Hash identifier: PmAanBKn5Q9OpKClj3F4cHiOjsFkr2vao0lzhAa/Eks=
Subject key identifier: C6:71:2F:D0:87:5A:5A:4A:37:B5:FC:49:C7:48:BB:0F:5E:E8:7E:D3
Certificate issuer: /CN=A9186513/serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Certificate serial: 068A
Authority key identifier: B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/61DAB892621B11EF9A45547AC4F9AE02.roa
Signing time: Sat 24 Aug 2024 13:18:42 +0000
ROA not before: Sat 24 Aug 2024 13:18:42 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 59796
IP address blocks: 103.205.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 03:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1674 (0x68a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186513/serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Validity
Not Before: Aug 24 13:18:42 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=66c9ddb1-89e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bf:81:51:50:eb:9c:4f:95:f6:ea:3a:9a:69:
7d:b3:0a:1e:e6:8e:e3:93:61:ad:2a:af:52:1b:e3:
e4:84:9a:6f:ad:fb:00:40:23:c4:e9:f0:d7:41:d5:
65:c1:f4:98:2c:aa:52:b6:c6:16:d7:ea:ea:49:c0:
a8:7a:29:91:3e:5a:8f:74:b8:f5:7e:d0:9c:8d:f1:
4e:fb:27:d4:2c:8a:ed:3a:fe:55:49:e8:a3:71:e6:
7e:df:bd:02:f9:99:92:dc:7c:e1:56:a8:8d:a4:31:
a5:36:b7:74:52:1d:b3:58:86:ec:8c:41:a7:c1:c6:
9d:91:ba:87:12:1e:26:0b:62:2d:d7:f6:3b:b0:75:
d2:29:ca:2d:48:bb:3b:94:12:cc:6d:ae:d2:83:59:
26:81:6b:fb:04:f1:53:aa:3c:e5:1b:b5:5f:1d:bc:
a9:64:9c:2a:44:22:da:63:e0:0a:26:88:29:d2:ca:
4b:42:a9:c2:e9:09:f5:ca:e9:1d:19:df:29:9f:ab:
4d:af:4a:35:8d:da:82:4e:c6:8a:bb:d3:b6:38:08:
2e:16:31:bc:bb:be:f7:5a:d2:0d:57:66:c1:64:e9:
64:03:38:cb:cd:90:47:27:ed:56:95:80:54:4b:59:
12:ef:cf:e7:fd:81:d6:3e:72:d7:9b:da:ff:26:5d:
70:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:71:2F:D0:87:5A:5A:4A:37:B5:FC:49:C7:48:BB:0F:5E:E8:7E:D3
X509v3 Authority Key Identifier:
keyid:B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/61DAB892621B11EF9A45547AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.205.18.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:6d:1c:c4:b3:d7:f4:02:b5:2f:cb:dc:92:71:e2:3c:e0:eb:
cb:2b:09:dc:86:0d:8f:1a:6e:8e:96:97:0a:e1:f3:85:ec:42:
8b:ca:1a:8d:72:f7:78:b5:1b:a2:c3:5c:22:5e:d4:97:45:9a:
92:21:e6:4f:85:c4:95:33:99:a7:12:b8:e6:ff:91:ce:ab:94:
de:5d:7a:6d:d1:e5:32:e3:63:d4:50:24:ef:01:b1:c7:7c:5b:
aa:05:13:dd:37:8a:8d:a8:08:65:74:63:ac:8d:d0:73:1e:f3:
7e:3b:9f:90:5d:00:b7:8c:3f:f3:bb:6f:73:88:ce:ed:fc:55:
5f:0f:78:4c:ef:65:fc:d7:b7:6e:dd:86:5a:12:c1:b2:bc:5d:
b6:5e:1d:24:f2:b7:fb:62:ba:f9:5f:19:e8:b6:c5:34:45:09:
fc:4b:ea:14:47:76:1e:47:a9:58:a1:27:ea:f3:2b:ec:67:32:
1b:2f:a4:0e:c4:77:35:79:7b:89:e0:74:db:9b:2c:8f:75:41:
bd:8c:ad:80:aa:ab:f0:56:2b:77:e3:90:d2:51:92:15:34:f7:
49:6e:64:be:12:a9:90:2a:02:09:91:d1:03:16:fe:1a:d4:8f:
cd:b6:d6:ad:8c:c9:1c:f4:cc:4e:d3:33:49:04:a6:34:9f:7f:
a0:66:c6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 05:08:47 2024 by rpki-client on console-ams.rpki-client.org