Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/1E76D80E67E711ED899D7018C4F9AE02.roa
File: 1E76D80E67E711ED899D7018C4F9AE02.roa (raw, json)
Hash identifier: hhTaLeHGYhPKE8V1YRivpXY6Uz//zRvUYpZeREHd8dc=
Subject key identifier: 33:22:6F:D7:6B:73:BF:61:29:15:A0:B7:FF:6B:79:95:EC:E6:DA:29
Certificate issuer: /CN=A9196E05/serialNumber=7FFBDC3F779A8F9965305E7DEE51E6A6C535FFB8
Certificate serial: 0729
Authority key identifier: 7F:FB:DC:3F:77:9A:8F:99:65:30:5E:7D:EE:51:E6:A6:C5:35:FF:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/1E76D80E67E711ED899D7018C4F9AE02.roa
Signing time: Mon 30 Oct 2023 21:49:23 +0000
ROA not before: Mon 30 Oct 2023 21:49:23 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 139901
IP address blocks: 103.129.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 18:10:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1833 (0x729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196E05/serialNumber=7FFBDC3F779A8F9965305E7DEE51E6A6C535FFB8
Validity
Not Before: Oct 30 21:49:23 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=654024e3-be51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:52:bb:2b:95:80:af:a2:d3:ca:c4:41:50:70:
fa:bf:29:6b:46:da:27:8d:b1:38:47:8b:86:cc:a7:
c4:86:fc:93:2c:1c:52:22:6e:82:24:48:01:4a:b1:
21:e5:d8:a1:30:18:76:ec:9d:dd:a7:c6:82:e7:03:
1b:21:b7:26:4f:84:81:39:6e:26:ad:60:b2:91:59:
49:2d:05:c2:6f:8d:e2:93:72:93:80:c7:49:c4:e2:
a9:5a:df:41:d5:62:59:0f:01:61:fe:7d:43:fb:0f:
e3:81:93:2e:69:f7:b9:34:71:6f:47:5d:ba:a2:e7:
66:78:97:81:c8:dd:df:0f:49:cf:22:8c:2b:a6:5b:
c6:03:a2:50:55:6c:41:c0:12:44:b4:d5:14:83:84:
4a:6b:4b:a8:07:ae:5b:9e:3e:98:4f:ae:7f:36:05:
b9:39:f1:93:fb:ce:ad:43:b5:d3:cb:f2:51:9e:e1:
79:d0:da:1f:96:ad:43:57:7e:8c:3a:6c:5f:db:50:
c4:61:10:7a:91:f8:cf:b6:1b:0c:96:1d:99:db:94:
26:14:4e:b7:dd:82:a0:5f:bb:59:7e:69:6a:9c:60:
78:00:fe:bb:db:71:97:10:db:c5:08:16:34:16:b9:
96:73:a7:f2:9d:bc:fb:be:9e:22:56:34:bb:6f:b0:
2f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:22:6F:D7:6B:73:BF:61:29:15:A0:B7:FF:6B:79:95:EC:E6:DA:29
X509v3 Authority Key Identifier:
keyid:7F:FB:DC:3F:77:9A:8F:99:65:30:5E:7D:EE:51:E6:A6:C5:35:FF:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/1E76D80E67E711ED899D7018C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.34.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:fb:9b:b4:49:d9:bc:81:ca:ee:56:d8:39:84:e0:ef:cc:16:
6d:3d:14:20:37:bf:5a:52:ed:e2:8c:0a:44:d0:7b:80:49:87:
ee:7f:a1:20:40:ca:b6:1f:65:de:29:ba:34:24:8a:2e:64:28:
14:4f:8e:3f:ac:fc:ae:16:94:77:f2:fc:8b:4d:c1:ee:d9:4b:
02:2e:d7:96:c8:27:cb:5e:4a:9b:d9:0c:ee:b2:e8:20:4e:49:
fb:64:b4:2d:09:ec:f7:a6:4b:6b:4a:fc:a1:46:e2:9c:e5:9c:
81:99:66:11:b3:8c:dc:60:35:b1:ab:a4:94:15:77:44:7c:9c:
5f:95:20:ba:e9:e6:10:64:c9:98:bc:18:71:45:41:35:e2:64:
63:4f:68:b9:1e:bc:ad:c3:bb:a8:a0:ed:73:a2:a7:b8:3c:44:
5f:a9:75:05:01:e1:4a:d6:eb:bb:4e:c3:30:f8:1a:77:f4:7f:
f1:c6:29:28:54:92:09:70:af:f6:5c:41:c1:99:4c:9a:50:4b:
fe:59:8b:05:27:28:47:cd:c5:e1:ae:ed:b8:69:f7:dd:0c:8c:
2b:12:9c:1a:06:c5:a2:3c:e8:ed:cd:81:62:c4:bc:31:fd:c1:
d5:ad:6c:75:a8:a2:ea:d8:5d:9e:23:9a:df:52:04:5b:be:6d:
f5:eb:0f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 20:56:57 2024 by rpki-client on console-fra.rpki-client.org