Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/862CED6672FF11EE8AC06025C4F9AE02.roa
File: 862CED6672FF11EE8AC06025C4F9AE02.roa (raw, json)
Hash identifier: ScXzplHKMd0zCiSqkGSkTZ6N+rXGqUkGJ6g/rWhne9k=
Subject key identifier: 0D:EF:C9:6F:44:AE:04:A7:B7:6D:58:0E:06:0B:77:D6:C8:9F:78:8A
Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial: 012E
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/862CED6672FF11EE8AC06025C4F9AE02.roa
Signing time: Fri 01 Dec 2023 15:51:35 +0000
ROA not before: Fri 01 Dec 2023 15:51:35 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 146943
IP address blocks: 103.101.58.0/24 maxlen: 24
103.101.59.0/24 maxlen: 24
103.247.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 05:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Validity
Not Before: Dec 1 15:51:35 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=656a0107-f179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:83:5d:7d:43:8e:57:04:a0:f3:ef:33:70:a4:
31:88:c9:4f:1e:e1:16:2d:2a:a8:04:3f:47:2a:db:
a6:06:8f:bb:14:22:58:0e:66:70:7f:1d:76:15:83:
95:a3:fd:1a:2f:a5:39:27:58:7b:f3:1a:59:55:5c:
89:27:3a:ab:69:c7:11:7c:f4:3e:5c:24:57:12:ce:
3b:af:ff:ed:ec:93:78:7d:1d:f5:a2:2d:4e:b1:3c:
6c:5a:42:91:bb:f7:d7:e6:1e:1a:ae:0c:be:07:b9:
4b:24:62:b4:78:f9:8e:bf:0c:8b:dd:5a:7a:1c:5b:
86:e9:37:86:67:73:01:f5:1b:0f:7d:aa:25:b9:e1:
0d:14:41:6d:72:c0:ba:c4:98:b3:86:90:d9:01:56:
86:f1:80:b3:92:c0:13:c4:4e:11:bf:d9:80:65:75:
9e:9c:d0:68:46:b8:26:c0:f3:8e:6b:63:04:18:27:
a0:10:e7:13:8d:31:a9:1e:5b:02:66:cb:bf:19:85:
04:95:be:5e:cf:b5:3b:57:ab:89:7a:9d:cd:10:53:
7e:eb:26:e9:e2:81:4f:c2:cf:39:94:db:bd:19:b5:
d9:05:84:a6:c0:3c:0c:81:09:56:89:34:a1:6f:9b:
be:df:a7:b7:67:bc:6d:95:e2:26:22:20:5c:6d:6b:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EF:C9:6F:44:AE:04:A7:B7:6D:58:0E:06:0B:77:D6:C8:9F:78:8A
X509v3 Authority Key Identifier:
keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/862CED6672FF11EE8AC06025C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.58.0/23
103.247.19.0/24
Signature Algorithm: sha256WithRSAEncryption
51:7f:95:f3:3c:38:58:63:40:cd:c4:4c:78:bb:d2:90:5a:0b:
0f:38:65:81:1f:ad:b1:41:47:8d:97:16:70:aa:a8:5b:8e:34:
d0:1f:b4:78:eb:0b:bc:8c:a3:52:1e:df:87:e0:49:31:c7:3d:
45:88:78:ba:53:2f:8e:ab:e9:03:b2:2a:f3:d6:ed:c9:f0:c5:
04:bc:76:df:5b:74:1d:10:23:00:b4:ec:cc:e0:2d:a6:d2:fb:
ce:9d:f9:56:82:97:30:a2:d4:87:49:75:eb:d2:2d:4d:53:6a:
27:b1:6f:cf:7d:55:b0:a7:2f:fd:c5:f8:17:92:38:82:35:78:
c0:1d:7e:71:70:9c:ac:60:f9:e2:1a:ff:b9:92:19:24:cb:3f:
33:e7:36:cc:02:a7:9e:af:73:d8:a5:51:b5:69:f1:f5:6b:50:
57:43:bb:00:4a:33:4e:68:b4:1c:f1:b2:f9:5d:1c:38:1b:13:
48:4e:51:a4:c9:c2:c6:7b:ae:3b:73:2d:67:fe:98:08:be:ed:
f7:90:4a:13:ef:dd:bd:c6:2f:b7:c9:0e:9d:58:f0:c6:f5:93:
26:66:4a:73:9b:86:0e:ad:0c:68:f8:77:ec:f5:0c:01:a6:b1:
be:9f:03:86:24:89:22:ed:05:c9:49:36:f0:74:c6:72:58:3a:
ed:bc:19:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 07:14:15 2024 by rpki-client on console-fra.rpki-client.org