Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/261F301A0B6611EEB716101CC4F9AE02.roa
File: 261F301A0B6611EEB716101CC4F9AE02.roa (raw, json)
Hash identifier: v8XwF+a6Ygvp7nDRpa9ggMrLIdEXN5h6SCBZEwuV9j8=
Subject key identifier: B9:9D:02:46:0F:51:22:09:50:7B:44:C2:2E:11:34:99:1F:A4:BA:AF
Certificate issuer: /CN=A91A352E/serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8
Certificate serial: 40
Authority key identifier: EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/261F301A0B6611EEB716101CC4F9AE02.roa
Signing time: Wed 11 Oct 2023 05:36:57 +0000
ROA not before: Wed 11 Oct 2023 05:36:57 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 17828
IP address blocks: 103.173.32.0/24 maxlen: 24
103.173.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 03:55:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A352E/serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8
Validity
Not Before: Oct 11 05:36:57 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65263479-4c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:29:ad:23:2f:19:f8:09:db:6b:b3:a5:43:9d:
48:f1:d9:21:28:d1:01:56:1b:c6:0f:80:f1:1b:f7:
c3:17:44:cf:55:fb:8b:20:d5:9c:d4:d1:0d:4f:8a:
04:68:51:0f:7e:ff:69:48:23:e8:a0:f9:c2:ba:a6:
f2:60:73:14:53:95:9c:f3:2e:5b:de:26:5f:be:0d:
44:ee:bd:d8:1a:5f:6f:45:15:ea:0f:8e:70:77:c9:
fa:7d:e4:60:4b:56:a6:1d:d1:7d:22:c1:74:7c:42:
1c:25:30:59:b9:5b:fb:48:7d:22:48:a8:50:4e:7a:
cb:c0:bb:19:09:38:d0:71:c5:93:68:82:f2:11:37:
41:58:6b:6d:ec:0c:e1:7e:47:45:f3:5d:4a:de:de:
43:e6:ed:e5:35:26:32:72:82:1c:c0:f9:fb:5b:7f:
17:71:7a:ab:7e:52:42:a8:d2:d1:3a:c1:e9:c4:3d:
1b:14:c4:ce:07:d9:f1:34:45:8f:cc:12:62:a4:67:
92:a5:20:d8:10:ba:ec:b2:93:7f:4e:e6:27:92:2e:
e0:97:63:15:c2:8d:52:84:04:b7:87:34:81:c2:cd:
35:73:93:dd:aa:a6:52:9d:38:9e:5e:2c:3e:b7:bb:
6b:40:7a:e6:c2:47:51:05:91:26:ca:96:c1:49:72:
d6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9D:02:46:0F:51:22:09:50:7B:44:C2:2E:11:34:99:1F:A4:BA:AF
X509v3 Authority Key Identifier:
keyid:EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/261F301A0B6611EEB716101CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.32.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:cc:e1:b3:ff:76:75:73:f3:03:d3:db:a7:c0:c8:81:3c:53:
2f:a6:ce:44:04:f0:1f:97:e6:5a:a8:ca:4e:c1:46:c9:5c:48:
ea:e8:1b:8f:ad:4e:ce:ec:c9:1e:2f:60:08:fb:15:fe:51:49:
e5:b8:d0:ab:70:23:4e:41:bc:58:0c:a1:ec:99:65:6f:a1:8c:
46:8c:cb:19:a3:5c:4e:cf:40:86:0a:84:4e:d9:6e:15:76:ba:
b2:78:40:38:8f:ef:1d:47:61:e5:d5:27:78:9d:4e:b5:8c:42:
89:ea:9c:ed:21:b0:bc:a9:f8:fd:43:7c:9e:83:10:d4:ad:0e:
2d:2c:00:61:32:47:10:cb:73:b8:bc:4a:73:46:dd:e3:33:d1:
3c:bb:d9:1a:18:4f:4b:4d:23:9b:d3:98:2c:1f:4f:24:3f:61:
09:f0:60:70:ee:38:34:f3:99:49:70:63:af:11:95:c3:fc:06:
ad:86:21:8a:5d:21:b1:e9:f0:2f:f1:d9:94:c8:26:bc:07:73:
e0:fa:d2:0c:bf:23:ff:48:75:78:05:59:47:a4:e4:f0:a6:38:
60:65:72:07:eb:56:88:84:55:f9:49:72:67:ff:c3:36:1e:55:
50:5b:15:50:55:0a:80:af:e4:69:a9:f5:6b:41:ae:87:a5:50:
59:fe:85:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:53 2024 by rpki-client on console-ams.rpki-client.org