Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/84AE56D6347011EF99085266C4F9AE02.roa
File: 84AE56D6347011EF99085266C4F9AE02.roa (raw, json)
Hash identifier: a8pVENZAquAwe3gZnJFGLglIyKH4aIzm0kJs+Y7ycKg=
Subject key identifier: 6A:CC:FB:DB:2F:B8:A4:80:A5:E1:AF:F1:D2:32:E1:C4:68:3B:7E:04
Certificate issuer: /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Certificate serial: 07D7
Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/84AE56D6347011EF99085266C4F9AE02.roa
Signing time: Thu 27 Jun 2024 10:32:14 +0000
ROA not before: Thu 27 Jun 2024 10:32:14 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 20473
IP address blocks: 103.125.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 20:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2007 (0x7d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2
Validity
Not Before: Jun 27 10:32:14 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=667d3fae-4f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:18:34:9d:03:e0:dc:f7:0a:b1:e8:13:d9:
f6:91:46:a5:d7:e5:ad:77:be:49:e0:4d:ff:f5:30:
f4:05:12:59:6b:7d:19:c4:6e:69:3c:a2:5c:e9:6b:
ca:88:fe:9c:e1:38:93:cd:53:2a:e2:93:22:ce:c4:
17:cc:76:2b:b3:a6:ca:fc:83:53:19:8f:23:64:c9:
79:a9:24:07:60:ca:52:38:30:06:74:63:d7:42:9a:
a0:72:06:a4:bf:4a:ad:3c:97:2c:85:c3:39:65:de:
d4:51:b8:d2:69:fd:bc:72:f7:32:17:e8:8d:fe:45:
00:43:03:f2:52:32:53:58:f1:69:97:7e:fb:b5:09:
95:2e:70:c6:08:b6:db:01:65:a7:21:22:32:4f:7d:
ac:8a:22:96:28:9c:cf:44:05:7f:af:3b:cf:40:39:
51:5f:06:b2:9f:40:fc:59:a9:45:a0:0d:c6:bb:a0:
81:4d:03:c8:9a:ab:cc:6d:81:93:6d:33:24:a2:11:
63:f1:e4:1c:34:a0:b3:6d:5c:13:5e:f7:49:d0:75:
8a:84:9b:db:69:06:19:0c:a9:1b:c3:39:75:2d:19:
81:30:8a:29:66:c1:38:4f:f1:55:99:37:5d:e7:2c:
b0:b0:0e:b4:15:55:49:9f:75:73:05:c1:de:e1:20:
1d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CC:FB:DB:2F:B8:A4:80:A5:E1:AF:F1:D2:32:E1:C4:68:3B:7E:04
X509v3 Authority Key Identifier:
keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/84AE56D6347011EF99085266C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.147.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:8d:0c:13:c0:0f:d0:5c:4b:72:c0:0c:99:87:5d:9f:7b:fa:
b0:7c:1d:6c:2c:6e:71:c4:81:ef:ce:df:11:1e:41:fd:8e:11:
41:59:7c:66:ec:d0:5f:cc:55:e2:d6:0d:31:0f:af:57:5e:b3:
9d:aa:dd:6f:07:1e:77:1a:f0:d3:98:9f:50:dd:16:c0:f7:1b:
1c:8c:77:7a:37:2f:70:45:02:36:43:86:b8:e0:cd:f1:f6:13:
1e:4d:26:88:bd:4f:20:6b:e1:eb:8f:cb:a3:3e:ce:59:6f:7f:
c5:0c:c6:44:c4:e1:af:c1:00:24:a4:b0:bc:49:21:67:0b:9f:
d5:7d:07:58:3c:f2:ba:fd:88:6f:a9:79:0d:bf:84:1f:2b:d6:
53:2d:f3:01:42:c6:cf:14:b1:bc:7b:8f:40:dc:bb:be:e4:fe:
e8:c6:04:84:37:9a:b4:d6:53:16:0d:a9:79:2a:34:00:3d:6c:
99:18:b8:3e:60:7b:5f:6b:3c:b2:62:c4:23:0a:06:ef:aa:ee:
f9:9d:bf:33:d7:91:96:5e:0d:57:3a:bb:08:5b:e4:64:ad:8b:
43:6b:78:eb:c5:e8:89:1d:68:7d:e5:3b:8e:c7:35:54:8c:88:
14:19:9f:cf:c9:d2:2b:f6:eb:a6:37:87:68:ec:5b:a7:c3:2c:
1a:bc:20:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 22:01:58 2024 by rpki-client on console-ams.rpki-client.org