Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D6F816F27E4E11EF8DC7241AC4F9AE02.roa
File: D6F816F27E4E11EF8DC7241AC4F9AE02.roa (raw, json)
Hash identifier: ErcouizHfLi1bY794Z5f+cb+jTreaKiQZchTcLVEfmI=
Subject key identifier: B7:6A:86:EB:9F:E3:BF:8B:D9:FD:DD:08:26:32:75:9E:9C:0B:5B:D4
Certificate issuer: /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial: EC
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D6F816F27E4E11EF8DC7241AC4F9AE02.roa
Signing time: Sun 29 Sep 2024 10:38:06 +0000
ROA not before: Sun 29 Sep 2024 10:38:06 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 215930
IP address blocks: 103.115.17.0/24 maxlen: 24
103.115.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 10:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236 (0xec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Validity
Not Before: Sep 29 10:38:06 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66f92e0d-4b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:0c:60:10:78:a8:5c:14:0e:2c:bd:ee:a6:
51:90:50:15:25:62:d7:ea:f6:2c:ce:40:fd:4c:25:
45:a6:36:de:f4:d6:98:10:3a:1a:2a:5f:7d:6a:91:
dc:b2:41:a5:6c:0c:14:36:ee:d1:e0:61:b8:2b:6c:
ac:55:88:7c:2b:85:dd:c3:b3:5d:8d:fc:47:79:19:
f9:89:41:7e:ab:1d:cc:9c:a9:e0:f2:a4:98:b7:98:
c7:a7:63:2f:36:f4:74:c5:82:c3:d1:8b:50:66:52:
22:15:9d:9d:55:a5:a6:8f:fb:ff:14:29:d7:94:50:
9c:52:b7:e0:06:03:9b:0e:8d:85:6c:8e:10:66:1a:
17:7f:b9:73:ef:94:1b:c6:26:b2:18:c9:32:e4:dd:
0e:1b:37:5d:38:ca:5c:97:e4:ca:49:bb:35:98:90:
69:ea:eb:9e:23:57:9c:fe:d5:a1:44:cd:db:8c:e5:
88:84:d0:e1:48:23:ee:02:a6:49:4a:30:af:8f:08:
67:89:1e:25:c5:3f:52:88:34:46:8c:dc:fa:11:a4:
73:7b:45:4f:3b:6a:75:4d:a7:54:10:d5:8b:eb:89:
c9:17:92:48:da:36:46:bf:b1:ba:af:58:e9:35:01:
3f:dc:74:f3:8d:87:1a:f0:99:8d:3e:52:83:7e:11:
14:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6A:86:EB:9F:E3:BF:8B:D9:FD:DD:08:26:32:75:9E:9C:0B:5B:D4
X509v3 Authority Key Identifier:
keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D6F816F27E4E11EF8DC7241AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.17.0-103.115.18.255
Signature Algorithm: sha256WithRSAEncryption
25:a1:92:41:a5:55:95:c2:ef:21:04:cb:a6:5d:c8:e6:65:48:
5a:cc:6f:16:87:a8:bf:7e:7d:b5:5a:3e:07:6b:c9:10:3c:de:
b3:c0:89:0a:36:85:b4:1f:00:a4:62:cd:4b:bc:58:89:74:53:
a7:ca:90:9b:d8:3c:56:c1:56:ae:26:45:99:18:82:82:2f:48:
2a:42:88:47:72:32:57:b6:fd:68:3e:f6:08:db:24:ac:14:4f:
b3:ae:57:41:7e:20:2c:6b:7d:92:b3:71:f8:06:8a:07:13:60:
7b:d7:5a:2c:88:c8:38:62:60:3a:bc:cb:63:44:ce:9e:8d:da:
5c:59:a5:0b:64:1d:49:59:1e:6c:42:64:df:9c:5e:4b:3e:f6:
96:27:da:50:72:f8:c7:f3:a5:07:d2:e6:78:14:b5:4d:1c:99:
da:8d:0e:74:49:1b:1b:18:d3:99:f5:7a:f8:b5:e9:dd:c6:ff:
e0:b5:de:00:2b:fa:69:93:55:16:f8:3e:59:ed:c1:03:ba:f7:
26:45:6b:a2:57:6a:c7:97:ce:a1:89:97:46:a7:08:01:19:81:
e9:bd:15:71:90:66:13:3c:e7:db:10:39:d4:1e:0f:93:f8:80:
e4:f5:b1:1b:62:65:fa:25:69:00:a2:7f:57:2d:28:6c:ab:1c:
9a:70:4d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 15:30:05 2024 by rpki-client on console-ams.rpki-client.org