Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/D60E488E25FE11ECA0EAA583C4F9AE02.roa
File: D60E488E25FE11ECA0EAA583C4F9AE02.roa (raw, json)
Hash identifier: zXTOKtrRdTWCAFFIj2KmV1PsJbIfM4Q4aTZLOKP6//A=
Subject key identifier: 7E:28:CC:7B:7F:66:99:16:1F:66:75:50:20:29:C6:64:E3:AF:57:B0
Certificate issuer: /CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Certificate serial: 0695
Authority key identifier: FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/D60E488E25FE11ECA0EAA583C4F9AE02.roa
Signing time: Tue 31 Oct 2023 22:51:01 +0000
ROA not before: Tue 31 Oct 2023 22:51:01 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 141217
IP address blocks: 103.156.176.0/23 maxlen: 23
103.156.176.0/24 maxlen: 24
103.156.177.0/24 maxlen: 24
2001:df4:f180::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Jun 2024 07:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1685 (0x695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Validity
Not Before: Oct 31 22:51:01 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=654184d5-e23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:72:89:19:83:08:90:9d:b1:ec:4c:48:d8:ed:
77:ae:14:1f:29:a3:ce:9a:28:ce:a2:d7:2e:96:df:
45:27:f1:51:14:35:16:02:4d:ac:3a:5b:4a:f1:90:
c3:c1:18:7d:fb:24:77:b6:66:b5:44:1e:de:d6:47:
7a:f5:8d:76:60:ac:30:c2:db:b7:12:b9:96:4e:3c:
15:48:57:bd:15:74:67:95:a0:26:54:7e:81:ca:9f:
48:ee:63:bc:5a:e5:41:39:ff:b0:03:e8:2a:64:26:
75:bf:cd:39:fd:45:54:30:81:a9:7b:12:5c:49:09:
8b:97:08:25:92:98:3d:e6:f4:bb:6c:ea:a0:eb:74:
22:e2:55:56:d6:b2:79:30:49:05:d1:61:dd:55:1b:
b4:c8:29:57:14:af:6c:56:01:56:1e:d6:91:ea:cc:
30:e5:14:5e:27:f9:27:7c:8f:ad:7e:e3:89:f7:53:
a7:62:07:b3:3c:56:4a:be:b4:9e:35:08:92:20:09:
fd:e0:92:3c:4f:86:49:f3:fb:2a:8e:15:1c:d7:e8:
50:51:0d:ac:c3:06:81:9a:a9:dc:97:42:40:8d:00:
5b:34:69:f7:a6:84:84:d8:e2:a8:07:f6:9d:c1:4b:
41:68:d1:59:df:15:b8:97:e8:cc:84:3f:7a:c7:38:
3c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:28:CC:7B:7F:66:99:16:1F:66:75:50:20:29:C6:64:E3:AF:57:B0
X509v3 Authority Key Identifier:
keyid:FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/D60E488E25FE11ECA0EAA583C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.176.0/23
IPv6:
2001:df4:f180::/48
Signature Algorithm: sha256WithRSAEncryption
49:8d:1b:03:d1:f8:07:7d:bb:d3:a1:b8:f1:87:48:9b:47:b6:
2c:51:e1:b8:57:f2:87:a3:9f:dc:b7:a9:c0:c3:cf:f3:b7:5e:
4b:af:47:07:93:d2:4e:d8:e6:c9:bf:9e:09:aa:12:cb:82:ca:
1a:79:be:5d:0c:92:31:24:d9:1c:aa:44:f7:9d:ca:3e:61:b5:
30:5d:c7:e9:4c:d0:35:c0:61:9c:79:7b:d5:90:a7:23:53:f9:
5f:62:19:9a:2e:a7:a7:63:66:cd:80:9a:ad:24:30:f8:8d:bd:
0f:f9:09:52:16:3c:4c:74:a8:83:2b:29:ce:4a:ff:59:3c:81:
b1:5b:fc:58:58:81:e2:7e:5c:40:81:e4:12:f4:33:d8:c3:26:
08:a0:46:17:93:dd:be:45:d4:42:9c:34:dc:09:31:6a:e0:9e:
d4:91:53:e8:63:d3:bf:0b:31:96:3e:ba:b9:20:75:f0:b4:3b:
dd:52:64:0d:8a:0f:f2:0f:f4:54:2c:7b:f5:34:fb:12:f9:a9:
75:90:20:4a:07:0d:9b:ff:84:8e:5e:a9:5a:8c:bd:ce:e1:63:
06:2f:f8:9a:a6:40:fb:42:59:a6:dd:b0:7e:69:8e:e0:e7:7c:
6e:3b:02:15:83:52:40:6c:ed:54:05:e3:d7:32:04:41:7e:ec:
b6:be:1e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:53 2024 by rpki-client on console-ams.rpki-client.org