Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/183A10B2554C11ED90AB290BC4F9AE02.roa
File: 183A10B2554C11ED90AB290BC4F9AE02.roa (raw, json)
Hash identifier: 8FxAYpYAC+u+WtYUv2lqgjYmx4tk32baxRWcjQhu0gI=
Subject key identifier: F0:E2:4D:E1:4A:79:80:B5:AC:FC:FD:57:2C:51:84:CB:3A:51:F4:E5
Certificate issuer: /CN=A91BF28F/serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D
Certificate serial: F4
Authority key identifier: 86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/183A10B2554C11ED90AB290BC4F9AE02.roa
Signing time: Sun 21 Jan 2024 10:37:19 +0000
ROA not before: Sun 21 Jan 2024 10:37:19 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 150385
IP address blocks: 103.24.88.0/23 maxlen: 23
103.24.88.0/24 maxlen: 24
103.24.89.0/24 maxlen: 24
2400:baa0::/32 maxlen: 32
2400:baa0::/48 maxlen: 48
2400:baa0:1::/48 maxlen: 48
2400:baa0:2::/48 maxlen: 48
2400:baa0:3::/48 maxlen: 48
2400:baa0:4::/48 maxlen: 48
2400:baa0:5::/48 maxlen: 48
2400:baa0:6::/48 maxlen: 48
2400:baa0:7::/48 maxlen: 48
2400:baa0:100::/48 maxlen: 48
2400:baa0:200::/48 maxlen: 48
2400:baa0:300::/48 maxlen: 48
2400:baa0:1000::/48 maxlen: 48
2400:baa0:2000::/48 maxlen: 48
2400:baa0:3000::/48 maxlen: 48
2400:baa0:4000::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 25 Jan 2024 18:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF28F/serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D
Validity
Not Before: Jan 21 10:37:19 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65acf3df-55af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:23:06:33:74:22:b3:f0:de:23:19:e1:4d:e6:
e1:f5:2b:68:cf:5f:4b:1f:2f:f4:e9:d5:b5:18:a8:
16:80:90:8f:97:4e:c6:49:fa:5d:e4:47:a7:59:9b:
e2:1a:68:7c:0f:3d:f6:c3:e9:d8:f5:32:89:ab:2c:
37:55:c7:e9:ed:01:9d:c2:61:8f:7d:79:23:af:76:
a0:8c:cb:89:d7:04:4a:42:59:e5:29:3c:22:9f:0c:
42:e3:96:67:cf:b0:03:15:ed:63:e7:70:24:33:2d:
d0:ba:ac:ff:9c:d4:0d:2e:25:d3:dc:d5:35:02:e1:
59:e5:5f:59:6e:b3:93:0b:fd:e4:31:f7:fc:c7:1d:
0e:ea:f1:02:c8:46:c2:ac:ab:1d:43:11:d9:6d:67:
70:21:f2:b7:52:3b:91:24:26:94:d3:22:85:89:69:
70:98:c1:9a:e2:1f:48:9a:69:11:5f:67:c5:ec:e4:
f2:f2:6b:0b:e5:94:3b:d8:ca:1e:8b:40:bd:94:32:
10:b7:28:f5:d3:2e:f4:e7:d8:71:51:55:34:e4:77:
91:d6:bb:f6:6e:93:87:22:92:f3:e1:b4:1c:a9:6e:
2b:bd:f7:f4:98:02:b0:41:11:d9:43:08:39:5b:c9:
10:f5:67:53:65:95:19:0f:02:88:0b:92:5b:04:d9:
6c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E2:4D:E1:4A:79:80:B5:AC:FC:FD:57:2C:51:84:CB:3A:51:F4:E5
X509v3 Authority Key Identifier:
keyid:86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/183A10B2554C11ED90AB290BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.24.88.0/23
IPv6:
2400:baa0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:06:01:56:2f:3a:18:27:06:43:13:68:67:f6:6b:4a:ce:13:
c3:d8:95:a1:5a:c4:0b:80:fb:52:9b:b8:2d:bc:c8:c4:16:1d:
f6:c5:7a:53:96:44:cc:40:e4:40:95:09:bb:c6:fd:10:5b:c4:
ec:97:e6:f0:98:9b:36:eb:31:ff:79:68:ac:59:14:c2:82:3b:
b3:7b:62:33:d1:58:23:00:2d:d4:20:c2:9c:3a:bc:4d:fb:d9:
4a:f9:4a:94:dc:a1:5d:e4:2a:64:0c:75:af:76:e6:b1:cd:4f:
eb:39:4a:be:ae:a7:e9:7c:be:9f:c1:65:ba:1a:cc:22:ed:3a:
7a:ce:f1:74:47:c6:c4:c6:3e:a6:eb:93:1c:a4:43:15:00:92:
60:aa:3b:71:dd:a7:ef:c7:43:b6:c3:6a:92:bd:d3:25:38:c2:
d4:81:96:68:90:3a:fc:9c:db:27:23:cd:0d:95:68:1d:16:10:
30:8e:33:85:e5:83:4e:46:54:bc:3f:9b:8c:51:06:c2:ea:90:
b7:38:84:62:00:8f:15:a3:69:9b:f4:17:18:01:80:68:79:99:
ee:50:10:4c:19:a8:ca:17:6d:92:89:30:1b:90:1a:a1:bf:9a:
1a:27:8f:96:65:bc:76:d7:da:c3:6d:a0:17:64:b0:1f:b0:92:
5a:2c:9b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:39 2024 by rpki-client on console-fra.rpki-client.org