Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/0FB2FEC0E50311EE82351157C4F9AE02.roa
File: 0FB2FEC0E50311EE82351157C4F9AE02.roa (raw, json)
Hash identifier: uWnPBtSIwgRjNxnZK2lQXFkw704Z/HafYJTnv1Tk18Y=
Subject key identifier: B3:D6:9B:27:66:31:77:44:C7:23:25:EE:C0:C4:02:FC:B7:C7:74:94
Certificate issuer: /CN=A91C9025/serialNumber=06DF1B524BD0DDDDA179B0450627EAF7F8D94C00
Certificate serial: 0934
Authority key identifier: 06:DF:1B:52:4B:D0:DD:DD:A1:79:B0:45:06:27:EA:F7:F8:D9:4C:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bt8bUkvQ3d2hebBFBifq9_jZTAA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/0FB2FEC0E50311EE82351157C4F9AE02.roa
Signing time: Mon 18 Mar 2024 08:39:41 +0000
ROA not before: Mon 18 Mar 2024 08:39:41 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 49217
IP address blocks: 103.82.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 15:23:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2356 (0x934)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9025/serialNumber=06DF1B524BD0DDDDA179B0450627EAF7F8D94C00
Validity
Not Before: Mar 18 08:39:41 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65f7fdcc-9e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c2:8d:fd:08:1d:05:08:a3:1b:d4:c0:fd:05:
36:2a:bf:0c:6a:e7:ec:8d:b0:50:a1:fb:f8:b7:e6:
9d:04:cb:e8:45:7a:fc:13:2b:0e:60:1b:42:e6:a6:
a9:b1:6e:8c:3a:27:35:b6:88:ea:9c:0e:90:66:6f:
48:f5:eb:68:7f:2b:b2:e1:e1:5e:d8:0f:0e:e1:c5:
ae:dc:93:7a:a5:82:53:e5:33:9b:b2:09:cd:d2:50:
98:e2:9d:91:22:44:b3:d3:3c:06:ed:a2:56:a8:46:
48:65:c9:cb:92:ae:07:0d:53:ef:f2:9c:f3:4a:5e:
00:ca:f5:27:49:a9:ce:f9:2c:5b:f0:b6:41:8c:a2:
53:a2:ff:3c:71:00:73:18:03:74:30:47:70:61:02:
38:65:75:9d:b8:2c:85:50:5e:d9:ff:e2:01:19:c1:
6b:5b:f4:5c:ab:93:d1:8c:39:a2:52:c1:7f:08:a9:
4b:7e:c5:cb:3c:6c:5f:4b:47:04:22:a5:50:c7:b4:
de:7f:8b:f0:c2:f9:e7:7a:da:39:0c:60:b6:80:24:
ab:61:70:d1:20:ff:59:4a:af:56:3d:c6:1b:e2:d2:
31:35:07:74:dd:a9:56:f1:10:53:eb:7a:cc:c0:e0:
34:96:38:9c:e8:eb:5f:9b:cc:bd:4e:d3:23:29:57:
22:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D6:9B:27:66:31:77:44:C7:23:25:EE:C0:C4:02:FC:B7:C7:74:94
X509v3 Authority Key Identifier:
keyid:06:DF:1B:52:4B:D0:DD:DD:A1:79:B0:45:06:27:EA:F7:F8:D9:4C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/Bt8bUkvQ3d2hebBFBifq9_jZTAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bt8bUkvQ3d2hebBFBifq9_jZTAA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/0FB2FEC0E50311EE82351157C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.216.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b8:0e:86:b0:e7:61:c4:86:3d:37:95:69:db:4e:22:85:7f:
4f:00:34:51:6e:fa:77:e9:f3:e0:24:17:b4:44:5a:1a:08:75:
2c:03:3d:ed:b0:99:c8:16:8c:6e:27:6a:36:f5:81:be:8f:8c:
09:cd:68:ef:aa:5a:22:ac:47:0e:11:b1:2e:cf:33:de:60:32:
5c:b5:0b:f1:fa:ac:e2:aa:55:a1:47:55:bb:37:f2:69:83:f4:
d6:94:e9:40:35:a6:d7:19:25:a9:75:e5:2d:eb:ac:14:a9:3f:
4c:cd:05:34:c6:6b:34:66:31:c9:9d:1b:ac:85:e6:20:af:06:
94:45:fd:50:48:ae:38:b6:5f:07:f2:67:a1:1d:14:aa:6f:14:
a2:e3:e1:1d:72:e8:0a:28:2b:fe:40:2e:34:bd:c7:8e:ae:96:
6d:42:86:c6:05:9a:93:dd:67:a6:9e:25:d1:85:0c:ba:5b:d6:
d4:d1:1d:80:b3:fa:b3:cf:a1:47:a6:5c:55:7c:bf:0d:21:a4:
b6:e0:3f:b5:f6:ec:d0:f0:77:05:72:3d:b3:5a:8b:29:2c:a0:
45:e8:5a:51:66:90:e9:a7:6e:c2:9d:53:ad:1a:c8:96:b6:49:
ec:0c:fd:69:53:1e:ae:e8:3c:07:04:b5:36:8d:b4:c2:b9:70:
f9:7e:eb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 18:41:50 2024 by rpki-client on console-fra.rpki-client.org