Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/884D9B68CD6911ED8A27BE3FC4F9AE02.roa
File: 884D9B68CD6911ED8A27BE3FC4F9AE02.roa (raw, json)
Hash identifier: P0vqqiTpIbUKYTQmlFZZE+MEyRaDSAycM2+iAW4KPR0=
Subject key identifier: 0F:C6:98:4F:0B:55:CC:78:2E:10:FB:A3:EC:E3:04:F6:EE:58:6D:8B
Certificate issuer: /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Certificate serial: 0A12
Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/884D9B68CD6911ED8A27BE3FC4F9AE02.roa
Signing time: Wed 28 Jun 2023 19:39:41 +0000
ROA not before: Wed 28 Jun 2023 19:39:41 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 149994
IP address blocks: 103.112.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 13:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2578 (0xa12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Validity
Not Before: Jun 28 19:39:41 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=649c8c7c-2a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6c:ae:75:d7:34:70:d1:d9:29:78:1b:7c:e1:
3f:7c:94:ff:44:b0:ce:0b:92:75:10:67:93:b3:bb:
20:20:39:de:12:61:f7:52:a6:19:20:59:1d:18:f3:
17:76:09:be:38:d2:e6:aa:86:1a:40:d3:07:46:61:
2c:d4:8a:f1:22:e7:7d:95:d3:08:95:99:a6:08:f1:
6d:34:86:bc:6d:81:ba:a3:5b:82:91:39:89:c1:07:
80:92:03:4e:8d:e4:f4:19:61:a2:c4:02:22:7d:f1:
fc:d4:b2:a8:0e:6c:f2:b4:bc:27:de:7d:37:a7:a6:
64:98:99:e3:0e:f2:11:27:2f:c9:12:48:d4:2e:2c:
01:95:15:fe:b5:88:a3:c1:2f:ec:c0:2b:6a:00:c5:
a9:7e:69:06:32:a9:0e:af:2c:b1:55:4b:33:74:53:
f3:ac:62:36:1b:35:f7:21:27:ff:93:9a:2f:38:c3:
26:c5:ab:d8:0d:37:f8:07:80:40:e0:d8:86:a4:82:
d2:fc:b3:d3:df:fd:2e:1c:35:05:18:62:c5:4e:a8:
8c:07:02:b2:b5:0f:ff:53:63:74:f6:86:6b:96:e0:
f3:cf:98:fa:08:d2:8a:45:6e:1a:69:b2:5b:8f:21:
07:21:76:5d:e2:57:f3:ee:24:32:c6:0f:55:07:79:
a7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C6:98:4F:0B:55:CC:78:2E:10:FB:A3:EC:E3:04:F6:EE:58:6D:8B
X509v3 Authority Key Identifier:
keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/884D9B68CD6911ED8A27BE3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.207.0/24
Signature Algorithm: sha256WithRSAEncryption
32:36:85:2d:55:f2:8a:0f:3f:58:f6:d4:7e:1c:eb:a1:ef:79:
c9:d6:e7:4c:08:55:4a:55:41:cd:ac:ec:20:ad:ec:36:4b:47:
6e:fe:61:63:eb:31:7f:3d:7a:b6:c9:a8:28:8b:2e:2e:d2:a3:
28:82:89:19:11:f0:0d:8e:a7:f0:fb:dd:b3:54:b4:60:bc:ea:
c5:46:03:c1:73:0f:7c:34:b9:a3:f5:a6:52:e0:2e:43:10:58:
00:ad:46:10:d8:d0:21:53:51:31:49:5d:51:fa:cd:3c:85:ce:
62:9b:b7:11:95:43:05:34:52:98:95:b6:d5:a8:2f:e6:b2:5a:
d1:41:f4:b5:c9:04:ae:16:0f:84:a7:8b:83:fe:0b:72:d5:53:
0f:88:b4:6d:c0:33:03:ac:e3:11:56:d4:db:1b:48:af:7b:3e:
c7:38:a9:59:b4:7e:d2:b3:c9:d5:40:ae:f4:ac:bb:6f:f4:cd:
59:93:fa:97:79:35:27:db:a7:26:5d:61:74:8e:18:56:8f:2f:
2a:5d:68:f7:39:00:80:fa:60:ae:74:a0:0c:11:fc:5c:22:23:
a3:44:3b:11:35:40:8a:18:dd:7a:1b:38:43:01:fc:71:26:42:
19:bd:5a:07:df:d4:c1:0e:6d:2b:d3:28:67:38:7f:c6:2b:ac:
75:e1:ba:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:36 2024 by rpki-client on console-fra.rpki-client.org