Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/BBCB50C0809111EF9A581686C4F9AE02.roa
File: BBCB50C0809111EF9A581686C4F9AE02.roa (raw, json)
Hash identifier: ke6Goi3cA36yKjLdpTKt4xLFml/1OEWcZQCHfF57GZQ=
Subject key identifier: FD:A0:0A:E0:10:4A:71:BF:0A:78:01:2D:FC:18:0D:23:29:F3:38:53
Certificate issuer: /CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Certificate serial: 0137
Authority key identifier: E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/BBCB50C0809111EF9A581686C4F9AE02.roa
Signing time: Wed 02 Oct 2024 07:41:28 +0000
ROA not before: Wed 02 Oct 2024 07:41:28 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 134475
IP address blocks: 103.237.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 07:39:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Validity
Not Before: Oct 2 07:41:28 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66fcf928-cdf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:b2:55:e9:08:f6:c2:e4:f4:13:b1:1d:34:
07:4d:c7:db:16:9b:66:5e:e0:fd:08:78:51:6d:93:
92:b7:13:10:01:f7:32:4c:ca:bb:df:6a:e9:8e:de:
32:ad:dc:da:df:92:cb:cf:be:71:ef:64:7d:ab:95:
ac:4c:a2:dc:55:88:78:a6:2b:49:51:80:82:53:76:
94:30:02:1f:46:2c:99:9b:fa:86:c8:fc:fa:6c:37:
e6:ce:7c:b0:85:39:c9:93:d3:5c:74:a0:c5:7d:de:
78:03:94:84:d5:e9:bb:49:7c:f5:13:e7:1b:a7:4c:
fc:aa:76:c4:7e:d8:d3:87:81:68:f2:db:99:7b:86:
5f:4a:e7:14:f0:6f:c9:f9:68:9a:6e:47:f5:44:d0:
7d:2b:4d:cf:18:ec:4a:c3:a9:63:94:bd:c5:fd:be:
68:35:76:e8:a3:c8:0c:34:35:fd:87:a1:56:2f:f1:
5d:c2:82:3e:24:47:c1:ed:f6:d5:a4:d0:35:96:0a:
c2:ef:2f:04:0e:dc:d2:c9:5a:53:c5:69:b3:8d:f6:
44:1f:c6:38:4c:6d:c0:59:f2:91:eb:2d:36:be:f2:
28:82:8d:8c:78:6a:67:63:b0:e3:84:40:e2:74:b4:
4b:8e:f2:51:50:f8:96:00:f8:80:12:73:68:b2:0b:
18:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A0:0A:E0:10:4A:71:BF:0A:78:01:2D:FC:18:0D:23:29:F3:38:53
X509v3 Authority Key Identifier:
keyid:E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/BBCB50C0809111EF9A581686C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.237.112.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:00:7d:60:50:ac:89:a3:04:ef:4e:77:47:dc:30:1e:5d:f0:
ab:e4:60:8f:8f:82:0c:88:32:97:24:2c:79:d7:a4:22:8a:57:
2c:d4:61:02:b6:9f:7e:96:c6:0f:08:4a:b4:e4:b6:74:25:89:
86:7c:67:e8:69:1f:4a:30:01:b4:09:8f:84:4d:d5:d1:1e:ae:
b7:2c:fd:97:80:ef:bf:31:c9:0f:dd:51:08:e5:0b:a4:1a:af:
d7:2d:e1:b1:11:87:5a:48:c1:aa:b4:40:9b:87:5c:7a:65:73:
4a:ec:b6:7a:98:a3:6f:45:b3:10:a9:2f:9f:0b:7a:ed:16:c1:
b9:ff:4e:ba:ff:65:0c:af:51:6a:20:cd:11:a4:7a:5d:6a:a3:
90:f2:a2:fe:50:12:8d:6a:6d:19:8a:ff:4a:92:d5:d7:f0:45:
e6:76:01:c2:c3:f7:95:46:a4:9f:62:88:4e:7a:91:d1:ae:50:
e9:87:0e:a2:c6:64:e8:0b:9a:02:36:ff:72:d5:95:13:f4:f9:
50:2d:f5:01:63:a0:74:25:5e:3a:22:c1:44:15:96:8a:56:cd:
cb:39:7e:cf:54:a9:28:23:10:20:f7:8a:95:55:4f:9e:d1:4a:
12:ea:87:c6:51:28:9e:8a:9a:18:02:12:91:e1:65:d3:29:7e:
61:95:0a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 10:13:29 2024 by rpki-client on console-ams.rpki-client.org