Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/892BC732AA5211EEAFC18554C4F9AE02.roa
File: 892BC732AA5211EEAFC18554C4F9AE02.roa (raw, json)
Hash identifier: 1L/LCXgXAEKeJdCwUG1SkkhQh7aohecR4oNpzVDhjO4=
Subject key identifier: 05:FF:E4:03:59:8B:5E:F5:09:12:FD:72:7A:A6:98:23:E1:E6:04:0F
Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
Certificate serial: 041A
Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/892BC732AA5211EEAFC18554C4F9AE02.roa
Signing time: Wed 03 Jan 2024 16:09:56 +0000
ROA not before: Wed 03 Jan 2024 16:09:56 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 10111
IP address blocks: 103.172.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 13:40:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1050 (0x41a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
Validity
Not Before: Jan 3 16:09:56 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=659586d4-9d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f5:59:2f:20:95:b4:fb:7d:dc:57:61:20:af:
d2:d4:7e:1b:a7:eb:b3:11:2f:7a:c2:5e:3d:60:53:
7a:2f:20:20:1b:bd:45:a1:f4:e6:70:71:df:43:9f:
25:b9:c2:b3:f2:82:02:55:64:41:61:a6:af:59:cb:
24:9b:04:2d:e2:7f:c7:6a:07:66:ff:2a:0f:48:b5:
dc:65:b8:3e:37:82:eb:3e:1d:ee:b3:ae:4e:82:1e:
73:20:0c:76:ef:a7:e8:ae:02:90:a9:54:e3:83:7e:
63:5f:72:d0:13:7e:3c:b9:10:8b:44:4b:cc:bd:73:
37:50:ba:6f:b7:3d:41:02:6b:b8:64:f4:4a:de:65:
b3:2a:99:04:85:bb:33:01:87:43:ca:d4:12:b8:40:
21:b4:e0:1e:d8:ca:1d:78:cf:dd:aa:bd:50:ac:04:
af:26:18:93:3a:3f:f7:20:73:9c:76:1a:24:85:01:
8e:a5:39:d1:85:60:5b:f5:46:a5:09:93:9e:80:ac:
60:ac:38:89:2c:88:84:b2:b5:c2:97:74:46:07:76:
93:7e:86:3d:70:a4:42:e3:14:f8:1a:53:cc:34:3f:
6e:fb:13:0c:2b:3a:48:19:6f:d7:f7:28:4a:08:90:
49:2d:96:a8:94:f8:d6:8f:61:32:c0:10:b1:7f:cc:
a4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FF:E4:03:59:8B:5E:F5:09:12:FD:72:7A:A6:98:23:E1:E6:04:0F
X509v3 Authority Key Identifier:
keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/892BC732AA5211EEAFC18554C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.80.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ac:cc:7d:39:21:67:d2:65:bd:75:34:b2:1f:d5:df:ac:2a:
24:44:3f:e6:a2:d5:4b:c4:a4:41:db:b0:fa:fb:01:00:0c:75:
98:03:c3:67:3c:64:07:40:9e:50:59:1e:39:38:aa:26:3d:5f:
9c:22:5f:f1:a2:87:d9:db:af:be:0c:fd:10:5b:f5:9c:7c:a0:
00:0d:7d:81:4d:fb:6e:26:c3:1d:2e:37:81:9f:1c:ad:05:ee:
a6:3d:a0:c2:79:cd:81:8e:77:83:2b:57:3f:8f:98:cd:ea:9e:
e9:c4:f4:20:0c:2e:9f:bd:49:5a:ac:0c:a4:17:33:54:0e:45:
42:78:73:b1:fe:60:e8:b4:63:1d:ae:81:a2:b4:a3:b5:2a:ef:
a0:13:4a:b9:6d:74:63:08:64:f0:69:00:ec:b4:88:77:92:04:
c2:35:a8:ed:65:60:c6:de:26:72:20:f8:8d:bd:8e:29:46:8a:
ff:ed:a5:f7:f3:24:8f:0d:81:83:88:4c:09:62:63:96:7d:7d:
8a:2f:ce:7f:85:00:07:07:ee:a6:27:01:e6:c9:48:00:18:64:
e6:ed:97:9b:98:3d:7f:bf:e2:7d:9a:c8:d0:5c:31:13:2a:e9:
53:ed:05:b7:7e:87:b9:a2:d2:26:4a:e9:80:81:d0:8b:e2:ae:
ea:db:b2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 17:54:47 2024 by rpki-client on console-fra.rpki-client.org