Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/76C2A8A2AC8F11ED9F292231C4F9AE02.roa
File: 76C2A8A2AC8F11ED9F292231C4F9AE02.roa (raw, json)
Hash identifier: zSeZ3w/F8C3cLNraMvVn9y3TgAQ2I7EbWW1/4UiDysQ=
Subject key identifier: EF:D5:E0:A7:B4:5E:75:DE:93:D5:27:D0:37:16:E7:26:C7:62:42:3E
Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Certificate serial: 0E64
Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/76C2A8A2AC8F11ED9F292231C4F9AE02.roa
Signing time: Sat 20 Apr 2024 18:36:46 +0000
ROA not before: Sat 20 Apr 2024 18:36:46 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 17916
IP address blocks: 103.30.184.0/23 maxlen: 23
103.30.186.0/23 maxlen: 23
202.53.192.0/20 maxlen: 20
202.53.197.0/24 maxlen: 24
202.53.204.0/23 maxlen: 23
202.53.206.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 03 Oct 2024 20:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3684 (0xe64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Validity
Not Before: Apr 20 18:36:46 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66240b3e-fad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2d:f8:56:9a:52:f6:11:2a:26:57:85:e0:04:
76:cc:82:68:41:d5:c8:5c:d5:71:49:b6:d2:46:7d:
05:41:fc:ad:3f:9a:71:04:11:47:be:99:b6:fe:e3:
3d:c3:1c:74:b2:97:40:9a:8c:e4:0e:43:c8:94:3d:
cc:92:8c:94:d9:64:20:83:46:4b:f7:51:e2:fa:87:
d5:9f:0b:42:ec:56:41:f4:2e:fa:da:53:de:0e:63:
b8:0b:a9:c0:cd:1b:fe:c0:d4:39:e1:4f:65:1b:ce:
04:68:d7:fe:55:33:1d:d6:75:d0:87:d0:72:9c:5c:
81:a1:1f:60:b8:50:c7:54:93:d2:d1:83:08:56:22:
87:2e:f7:38:37:72:00:bd:08:bc:6e:93:e1:d3:f9:
70:7a:c0:b3:53:ef:5a:60:50:ab:19:82:8a:30:b3:
19:4d:65:3b:ec:1c:91:78:a4:c9:c5:f1:83:1f:2c:
d7:31:28:a5:76:f7:22:9c:dc:c5:0d:3c:e7:6f:e3:
29:ec:42:fa:44:c9:b5:5c:9d:42:54:41:15:e7:26:
a9:b4:4b:36:54:42:2c:3f:a8:f0:fe:78:c9:35:31:
d9:01:d1:24:b8:58:43:d3:cc:f7:57:1c:ce:2c:85:
d9:fd:27:d7:4c:d6:85:72:43:9a:ca:cb:2e:29:0a:
a7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D5:E0:A7:B4:5E:75:DE:93:D5:27:D0:37:16:E7:26:C7:62:42:3E
X509v3 Authority Key Identifier:
keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/76C2A8A2AC8F11ED9F292231C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.30.184.0/22
202.53.192.0/20
Signature Algorithm: sha256WithRSAEncryption
ec:ed:37:cb:71:81:2e:3a:33:e0:ea:85:5e:f3:c0:8b:73:33:
c7:5d:33:79:59:b4:4f:f9:2a:33:87:29:c0:72:01:a0:56:5e:
9a:8f:ce:dc:a3:7d:b0:a1:25:60:aa:12:78:62:17:91:6a:f0:
85:f7:a0:24:b5:79:a0:c4:79:cc:c4:40:58:54:23:4a:db:50:
61:ed:48:c4:e1:05:36:99:90:42:13:09:15:d1:75:60:b3:d1:
88:b7:88:2a:0a:db:6b:04:04:5f:97:54:6c:66:b7:9f:c4:d0:
f2:1b:7b:4d:39:c8:39:c5:b3:0e:4f:e6:f8:af:82:bb:97:b1:
fc:e3:70:96:69:3e:1d:03:97:fb:18:44:3e:90:7b:be:3c:bb:
3f:b3:d8:7b:ef:29:46:58:6f:f0:e7:70:55:61:2c:ad:a3:05:
17:1c:9e:be:ca:ee:04:ad:25:70:38:93:a3:5a:12:79:ba:4c:
aa:1e:f5:43:83:cb:94:86:51:9e:cf:87:d9:c2:13:e8:e0:88:
d2:d2:a3:aa:ae:cf:1e:3d:c6:f0:4c:dd:92:26:ea:78:a5:6e:
40:7a:e1:fc:33:d0:cf:94:46:64:47:b8:d3:c7:cc:50:be:1a:
c9:4e:44:5c:98:03:53:22:ea:10:2d:9c:d8:30:07:5c:06:a7:
85:de:fd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 23:36:10 2024 by rpki-client on console-fra.rpki-client.org