Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/D74998AC889911EE83929070C4F9AE02.roa
File: D74998AC889911EE83929070C4F9AE02.roa (raw, json)
Hash identifier: LcRUWMp5ylCBuhjZGpu+Gkyj7S0VtZ4hzyMMM+ZG2m0=
Subject key identifier: 33:6E:6E:44:61:3D:4F:B8:FA:F7:F8:5F:00:15:76:B9:00:C5:17:5F
Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
Certificate serial: 0B65
Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/D74998AC889911EE83929070C4F9AE02.roa
Signing time: Fri 16 Feb 2024 19:57:33 +0000
ROA not before: Fri 16 Feb 2024 19:57:33 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 58629
IP address blocks: 103.251.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Aug 2024 13:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2917 (0xb65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
Validity
Not Before: Feb 16 19:57:33 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65cfbe2d-9015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:bb:07:f4:2a:03:28:46:81:41:2b:9b:59:01:
7b:87:55:c0:c6:c6:74:92:1a:9c:39:ba:ba:27:a3:
5a:62:cb:9a:32:ad:12:ab:02:42:f6:de:36:77:da:
c2:61:12:d0:2d:58:5b:81:56:00:b9:42:e8:ec:b7:
86:2b:11:b7:53:ea:b1:ff:7b:6a:95:0b:07:e8:59:
26:ba:41:ed:29:f3:74:0a:2d:6c:56:0b:55:f0:e6:
38:b9:97:16:e8:b5:29:80:74:0c:e2:cd:7e:dd:2c:
29:86:52:bc:33:03:03:84:64:78:d5:14:1b:5e:f3:
54:dc:c6:25:c3:03:3a:8b:86:16:ba:ed:3f:fd:1e:
eb:12:a3:6c:14:4f:6b:c1:b5:66:25:1f:18:1e:7d:
9a:66:d8:e2:e0:d1:06:8b:5e:1f:33:ff:83:98:4e:
11:bd:9f:0e:fa:44:38:30:5e:a9:e0:b1:09:9f:ea:
e8:d6:d7:bd:36:aa:ae:fd:3f:cf:dc:f5:1b:db:29:
1d:c2:62:2b:f1:d9:79:09:09:b4:52:7f:01:fb:cb:
11:b8:10:c6:da:46:89:e6:9a:3f:50:2c:0f:87:cf:
b1:8d:cf:73:94:63:9c:1b:7d:4e:51:16:13:7a:c7:
b5:1f:cc:29:20:08:c2:04:c5:e7:4d:77:89:ef:81:
86:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6E:6E:44:61:3D:4F:B8:FA:F7:F8:5F:00:15:76:B9:00:C5:17:5F
X509v3 Authority Key Identifier:
keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/D74998AC889911EE83929070C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.251.244.0/24
Signature Algorithm: sha256WithRSAEncryption
09:9c:e1:f3:da:48:99:16:f4:be:d2:b0:97:80:41:24:ac:8d:
6f:a9:63:b9:33:3a:f8:64:f6:06:cf:ed:6a:87:42:3c:97:6f:
20:cc:68:c9:9b:03:ed:c0:fc:61:34:24:3d:21:b0:d5:46:f6:
77:dd:44:4c:26:f8:5b:39:e4:7c:57:23:87:c4:af:d9:3e:f1:
3b:02:81:e5:d8:8a:f1:dc:d7:ba:0b:1a:3a:94:57:08:68:83:
00:ee:83:5e:d3:9c:81:5a:12:81:e8:26:1a:de:9a:e1:33:6d:
66:f3:9c:dd:56:e2:27:de:d7:f5:cd:ea:9c:df:2e:77:00:45:
61:11:ff:45:2d:8f:25:14:16:02:a5:fb:c7:2e:e1:2f:cc:95:
13:2c:12:1e:47:7e:5f:db:5d:1a:af:04:a3:87:3e:a5:e2:b9:
f0:12:95:c7:fd:39:08:48:b9:cd:59:cf:5e:0a:4e:65:7d:ea:
ee:bc:04:f6:93:45:72:21:de:84:11:16:bb:a6:6d:f6:76:db:
5e:07:d2:c9:a2:ce:ac:bd:92:e9:06:70:53:de:a5:c4:ed:ca:
e4:98:9a:69:b6:0f:3a:b6:b4:66:cc:ab:9e:25:64:05:5a:8f:
b2:cc:4b:bb:c4:bb:51:c3:5a:7c:b2:09:c1:b6:12:28:78:3f:
84:52:3e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 18 17:27:30 2024 by rpki-client on console-fra.rpki-client.org