Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/2852BFB4460811EE89426081C4F9AE02.roa
File: 2852BFB4460811EE89426081C4F9AE02.roa (raw, json)
Hash identifier: 5SBJiAli/bXZtfPGIF/C9C+c1KAsv1ipxgIbFADv1co=
Subject key identifier: CA:8E:5B:7F:2C:80:ED:2C:9A:4B:8D:7A:30:3F:35:60:C7:DB:A5:5C
Certificate issuer: /CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E
Certificate serial: 034A
Authority key identifier: B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/2852BFB4460811EE89426081C4F9AE02.roa
Signing time: Sun 17 Sep 2023 01:43:01 +0000
ROA not before: Sun 17 Sep 2023 01:43:01 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 149794
IP address blocks: 103.174.210.0/24 maxlen: 24
103.176.189.0/24 maxlen: 24
2400:7060::/32 maxlen: 32
2400:7060::/40 maxlen: 48
Validation: Failed, certificate revoked on Sun 12 May 2024 22:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 842 (0x34a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E
Validity
Not Before: Sep 17 01:43:01 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=650659a5-e6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:b7:dd:ed:3a:06:dc:f7:43:32:20:a8:ac:
58:ad:2f:38:b6:c9:99:ec:5a:fd:9a:6e:8f:43:74:
ee:be:89:3b:6f:04:a2:18:40:ab:08:e8:36:a4:fb:
49:47:86:ee:4e:97:30:3e:30:1e:22:40:eb:80:84:
2d:78:46:40:53:66:13:0d:3b:9a:66:e7:65:dc:4f:
11:08:21:f4:ed:70:f0:7e:9a:d4:fe:0e:02:c0:85:
61:3e:7e:a5:d1:2c:1a:ba:70:f3:33:bb:06:2a:d2:
08:cb:00:cc:fb:1e:49:17:61:30:47:02:ad:57:6e:
86:ab:c7:1b:cd:34:cd:28:fa:0e:6c:1c:ee:df:c7:
ab:ed:2a:3a:df:d1:1b:23:19:fc:f5:c2:99:ae:50:
ae:00:3e:39:7e:2b:45:e5:7b:5e:73:7f:9a:70:de:
9e:d6:ac:04:18:7b:7b:c2:55:e5:91:81:30:16:3a:
71:8e:21:0e:c1:17:7f:9a:87:ae:a6:7c:19:42:85:
7a:eb:b1:de:0f:6c:1b:40:6a:34:0f:e4:70:05:c9:
d6:f7:73:22:35:ba:19:ba:84:98:aa:52:8c:90:10:
f2:3e:de:c6:ea:d9:dc:9d:c9:42:75:2b:86:b6:fb:
a5:4e:2f:fa:2d:39:26:22:d7:c3:ca:0d:2a:8d:7f:
a8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8E:5B:7F:2C:80:ED:2C:9A:4B:8D:7A:30:3F:35:60:C7:DB:A5:5C
X509v3 Authority Key Identifier:
keyid:B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/2852BFB4460811EE89426081C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.210.0/24
103.176.189.0/24
IPv6:
2400:7060::/32
Signature Algorithm: sha256WithRSAEncryption
6c:de:a5:f0:e5:70:55:2f:60:5b:38:78:4b:0e:37:fb:7e:85:
91:f9:30:e9:a7:8c:fa:59:ff:70:9a:8f:07:7e:65:82:d7:61:
da:5f:d3:2d:22:52:d9:c7:ef:68:3a:da:e0:fd:5b:ab:4d:73:
96:c4:82:d6:87:ca:4a:64:53:c2:fb:a6:b4:c7:ba:ed:74:dc:
e9:fd:4e:08:e3:61:47:83:1d:e6:7a:87:bd:1d:b8:0b:ab:c9:
34:5f:ea:b7:03:aa:00:2c:c7:fa:72:6d:0e:f5:4a:41:90:6e:
5a:b6:a7:f8:38:97:69:e6:24:6b:28:c7:9d:c9:68:c3:34:f4:
db:d8:21:9a:51:20:d7:56:cd:07:e3:53:0a:18:00:7c:b1:9d:
9b:9f:0b:5e:83:ec:4c:22:57:53:ff:cd:7f:46:e0:fb:f6:92:
bf:92:41:ab:ed:cb:9c:08:27:3b:b8:60:2c:40:85:a9:e5:ca:
b1:e7:4b:23:fe:c8:cf:87:ac:ad:11:f7:47:3d:0c:7c:4c:00:
d9:95:3d:32:f3:6e:47:16:7f:7a:be:44:8c:25:96:22:7a:7f:
ef:2b:a3:32:7b:67:28:da:57:f5:af:1c:fc:18:52:c6:12:f4:
ed:65:bb:57:09:d2:53:25:d9:97:49:fa:8d:63:fe:bb:bd:96:
52:3b:c5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:25 2024 by rpki-client on console-ams.rpki-client.org