Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/9C5E3292C13E11EEB9516A42C4F9AE02.roa
File: 9C5E3292C13E11EEB9516A42C4F9AE02.roa (raw, json)
Hash identifier: kuH+SnCndIuVVpFPOoiVhFvg0jcS9qacmRqgyw7RHIA=
Subject key identifier: 64:42:77:6B:18:50:7E:8D:41:BD:BA:16:39:40:C4:73:F9:A6:C5:D4
Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5
Certificate serial: 08C0
Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/9C5E3292C13E11EEB9516A42C4F9AE02.roa
Signing time: Thu 01 Feb 2024 20:15:15 +0000
ROA not before: Thu 01 Feb 2024 20:15:15 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 139879
IP address blocks: 103.74.22.0/24 maxlen: 24
103.74.23.0/24 maxlen: 24
103.235.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 21:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2240 (0x8c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5
Validity
Not Before: Feb 1 20:15:15 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65bbfbd3-0c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1f:71:6a:2c:52:73:50:15:df:14:c1:b8:62:
88:a0:50:57:d1:57:07:13:ca:26:db:25:95:40:67:
ea:86:de:4e:f8:d2:b4:97:50:e3:64:fb:e2:13:4e:
30:c8:36:0c:ae:38:08:74:87:72:33:03:08:4f:cc:
25:28:d0:26:bd:01:fe:bd:4e:33:a9:11:61:f9:0a:
26:76:91:c8:99:76:89:53:71:d2:92:fc:68:f3:fa:
49:d5:2c:e2:4a:b6:3a:32:77:1d:e0:2c:93:69:75:
a0:11:73:fa:76:e1:0f:bd:65:42:15:d6:ae:a3:36:
cd:19:42:5e:59:cb:4f:13:84:ae:9e:81:8b:45:de:
25:6c:c2:e4:92:a6:2f:20:48:69:09:af:cc:cf:3e:
52:74:69:f6:51:91:94:cb:89:87:3e:8f:8a:4d:89:
e3:98:d9:85:87:7b:31:d0:40:ee:1e:45:e4:8e:fe:
37:c3:2d:f9:ae:00:5e:fd:0e:a0:c7:86:6c:24:2a:
bd:e6:dc:29:3a:5a:39:c8:97:5e:f0:74:68:ac:33:
a9:68:fc:a9:2f:72:5b:ed:e3:97:d8:00:a0:e8:71:
a7:b7:0a:d3:db:84:be:d0:ca:27:49:d9:94:a8:d5:
d2:ca:10:11:6e:b8:d4:99:74:48:21:d1:28:3f:c7:
f0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:42:77:6B:18:50:7E:8D:41:BD:BA:16:39:40:C4:73:F9:A6:C5:D4
X509v3 Authority Key Identifier:
keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/9C5E3292C13E11EEB9516A42C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.74.22.0/23
103.235.77.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:bf:84:ad:d2:91:81:1c:e5:58:15:88:2a:1e:33:18:18:a2:
4e:0a:cc:95:0c:38:2f:33:91:5c:71:5c:df:6f:0f:ea:85:d7:
8c:4b:3a:c0:79:0e:d7:95:23:e6:67:bf:da:36:d4:b3:07:4c:
2b:71:4c:00:c1:ce:a7:80:3e:1e:f1:a5:86:ef:00:fc:40:25:
07:e8:99:50:e0:6d:bb:31:27:8b:dd:7d:c9:e2:17:be:15:8c:
03:54:fd:de:93:d8:75:1e:23:48:15:ae:86:f4:83:6a:7c:e1:
04:fc:0e:dd:19:11:ff:95:b4:f9:b8:b1:fd:cf:28:43:ac:c7:
9e:76:01:be:d7:92:21:3c:8d:80:ce:6d:00:cd:c3:0c:ff:ce:
db:d4:07:e9:49:8e:ae:d2:ee:58:05:26:1a:d9:ff:ca:1f:f2:
a3:b8:56:3e:80:12:74:9e:6c:9c:64:6d:e2:ed:38:87:fd:c3:
8c:11:bf:5b:ee:a3:b9:ba:67:e8:ea:47:f7:dc:75:b7:17:c2:
01:84:df:a0:5a:d4:6a:f8:a0:fc:54:e7:1e:d7:39:51:39:f1:
3d:62:d8:d3:d1:91:5f:43:52:99:27:bb:6f:f1:8b:9d:40:fa:
1a:34:2e:cb:60:98:6c:1a:fb:b4:d3:1b:c2:38:b8:b7:85:2a:
39:60:c5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 22:18:56 2024 by rpki-client on console-ams.rpki-client.org