Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/A9C850AC11FC11EF839D777EC4F9AE02.roa
File: A9C850AC11FC11EF839D777EC4F9AE02.roa (raw, json)
Hash identifier: 0w4dRaUko9PMnzRCSv2cEP8fvoBhNezAYao8VuMx2vs=
Subject key identifier: 20:A3:43:78:18:7B:28:76:04:F2:DC:8A:B0:16:3E:B7:F8:7B:35:29
Certificate issuer: /CN=A91C8347/serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083
Certificate serial: 34
Authority key identifier: 2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/A9C850AC11FC11EF839D777EC4F9AE02.roa
Signing time: Wed 05 Jun 2024 09:19:44 +0000
ROA not before: Wed 05 Jun 2024 09:19:44 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 38478
IP address blocks: 103.219.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 04:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8347/serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083
Validity
Not Before: Jun 5 09:19:44 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66602db0-e80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:77:68:1a:e8:55:8c:e5:6e:44:6e:34:ab:
01:81:f5:80:0f:3f:ba:30:3c:5b:fe:50:3c:98:82:
07:66:00:58:f5:74:e2:60:03:14:4c:80:85:22:79:
2b:a3:4f:89:5f:da:c5:ed:c8:3b:1b:2b:63:83:0b:
79:72:f7:ac:44:3d:f0:17:6a:4d:f7:43:0f:1e:8d:
d1:33:c5:31:cb:53:45:a1:35:e7:69:04:27:50:07:
5b:ba:ea:f2:9b:7b:9b:ff:f8:5e:9b:49:1c:76:36:
e2:e1:48:f0:4c:8e:29:bc:99:8a:4e:eb:ee:9f:2e:
7b:0f:93:7f:19:6b:74:be:cc:8f:fb:73:9b:e6:16:
15:d1:79:d0:3b:4d:cf:22:6e:25:d3:81:70:1d:6b:
f0:4f:f3:94:5b:9c:c5:d9:d4:73:d0:1e:88:f1:d3:
39:bc:d9:33:51:a5:67:01:63:6c:46:a3:42:17:f6:
cf:50:1b:01:6e:69:b0:b5:fe:88:73:4b:01:ba:43:
24:94:54:de:f7:56:16:25:f7:11:08:d0:1c:e6:94:
15:94:19:60:37:8e:99:2a:d4:7e:6e:2e:51:b5:e6:
67:e2:33:b6:e9:51:92:a8:50:d8:19:54:bc:e4:c4:
12:63:3e:0a:8d:4b:7c:59:f7:74:c2:52:ff:8a:69:
d7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A3:43:78:18:7B:28:76:04:F2:DC:8A:B0:16:3E:B7:F8:7B:35:29
X509v3 Authority Key Identifier:
keyid:2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/A9C850AC11FC11EF839D777EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.219.192.0/24
Signature Algorithm: sha256WithRSAEncryption
63:2f:86:0c:cb:63:f7:62:b6:79:64:55:3d:17:8a:55:7a:dc:
82:eb:49:28:37:b4:03:96:5f:21:9b:aa:e6:e6:29:80:21:87:
31:1a:06:b2:9e:e8:b2:f4:a7:17:b0:ec:aa:5e:99:18:cf:7c:
74:59:4d:d6:43:f6:0c:c2:31:aa:96:c2:92:60:74:35:f5:f6:
24:ab:d1:6f:42:9b:0b:a7:16:8e:59:84:ae:1f:a8:fa:08:52:
f8:1d:f9:a7:c4:a6:c6:3b:27:bb:8c:03:1a:7f:37:82:37:ee:
3f:1e:68:d4:72:5d:0d:f4:da:bf:12:cc:54:93:c9:5f:16:87:
6e:6f:4d:ba:40:1b:d0:15:0d:24:8d:08:c2:fe:c6:ed:a6:03:
1f:3f:33:57:b8:69:64:c9:c8:61:6a:2f:c7:30:5e:d1:72:c8:
8b:cb:63:5b:d4:b4:7d:32:27:da:1a:41:8d:64:9d:26:a5:66:
ce:72:58:e8:69:ff:36:cc:2b:40:53:02:9f:5e:fa:31:23:18:
1c:b3:64:b4:fb:3f:9e:0a:73:d8:52:f8:59:38:8f:f2:61:02:
40:7e:92:64:2d:c9:33:66:3b:6e:21:14:72:78:09:5e:04:5c:
24:45:0b:e4:11:85:45:91:8f:e9:86:52:7c:c3:ec:d2:c8:eb:
29:a6:48:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:02:16 2024 by rpki-client on console-ams.rpki-client.org