Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/540897D485F811EEBCB6F74CC4F9AE02.roa
File: 540897D485F811EEBCB6F74CC4F9AE02.roa (raw, json)
Hash identifier: J1lfX/5jR7UblOR19xgLO27Z0c/TDh8beRavHVW8qqA=
Subject key identifier: 2D:A4:00:AC:0E:95:22:4E:47:90:DD:A3:61:89:2D:31:68:F5:AD:BA
Certificate issuer: /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial: BB
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/540897D485F811EEBCB6F74CC4F9AE02.roa
Signing time: Fri 05 Jul 2024 06:07:42 +0000
ROA not before: Fri 05 Jul 2024 06:07:42 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 149977
IP address blocks: 103.115.17.0/24 maxlen: 24
103.115.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Sep 2024 10:37:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Validity
Not Before: Jul 5 06:07:42 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66878dad-5902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c0:fe:ee:91:99:fe:29:70:ad:17:31:af:d1:
84:ac:42:1c:8e:da:0c:48:9a:bd:db:43:34:db:80:
d9:be:42:b9:ec:87:cd:24:13:e9:5c:db:aa:3e:9a:
fc:84:59:19:38:8f:39:34:0d:ee:63:06:e2:7f:ed:
7c:9a:89:05:b8:c9:cf:3e:9a:27:d4:34:5d:b9:6b:
15:71:a7:85:a2:26:50:3f:1f:99:9d:6f:ab:00:c8:
d5:72:f5:92:8a:65:57:f9:aa:1f:96:ec:bb:92:1e:
bf:a8:85:5e:ad:56:97:d3:f6:69:94:a4:c3:3f:31:
d2:8c:f7:b4:fa:4e:d6:83:4c:fa:38:4d:e7:c6:a1:
e0:80:29:fd:c3:35:0d:29:70:75:11:bb:9f:04:96:
95:d5:f2:30:57:a8:d0:55:ad:f9:aa:cd:ad:e3:c1:
ee:c7:d0:01:52:89:bf:da:cb:af:c0:e4:51:89:e7:
33:f4:5d:7d:d4:35:a6:56:31:de:ee:6d:51:af:49:
3e:f2:01:0b:d9:20:e6:99:54:de:cd:6a:06:77:7f:
64:35:ac:cc:ad:8c:92:3f:46:1b:04:3b:9b:cf:9e:
39:2e:d9:40:74:55:2e:44:be:7a:cb:c2:2a:2e:f9:
45:e6:40:98:09:f2:c0:17:00:ae:e9:ff:c9:63:16:
0e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A4:00:AC:0E:95:22:4E:47:90:DD:A3:61:89:2D:31:68:F5:AD:BA
X509v3 Authority Key Identifier:
keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/540897D485F811EEBCB6F74CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.17.0-103.115.18.255
Signature Algorithm: sha256WithRSAEncryption
3e:a3:3e:5a:c1:2a:9a:80:7e:d9:3c:be:e2:75:be:20:bb:93:
d2:26:7c:d0:41:d7:f6:c3:4e:53:5e:82:a5:69:24:9d:41:cc:
a4:7b:81:3a:03:c2:ca:53:b1:e1:0a:58:36:10:6a:23:f9:e4:
4f:9c:b1:6b:ff:7c:d6:d1:4b:34:51:45:48:1a:0c:ee:d4:e1:
9a:55:39:71:32:8e:6e:31:c1:a1:83:91:a2:7f:f9:bf:31:6f:
c2:aa:cb:58:3a:d9:02:0a:d1:4b:e6:ef:e5:69:47:d8:4b:39:
e0:f6:c5:77:f2:2d:ed:ae:17:64:82:4d:62:d5:cc:0c:73:90:
49:a9:53:cc:8b:1b:4c:93:f3:94:65:35:98:2e:63:75:d4:ce:
df:32:ca:1c:04:4e:14:86:20:d1:8f:bd:08:a3:ba:1b:7d:9e:
7b:bc:6d:19:c8:5e:46:d6:71:97:36:3b:56:33:a3:ad:3e:15:
6c:6c:b4:2e:ca:42:ae:ff:9a:d1:7e:3a:5e:cf:45:72:8d:87:
f3:f3:30:f3:1a:cc:05:63:43:70:1d:79:3c:11:ae:a8:4e:6c:
1b:d6:18:bc:c5:57:6e:85:d5:df:03:e6:ed:f6:46:0c:7c:36:
a4:88:e4:68:9e:58:be:fb:61:65:01:3d:77:2f:b3:dd:b5:12:
0a:fc:25:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 12:09:38 2024 by rpki-client on console-fra.rpki-client.org