Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C984B/F32F001401D811ED9C85F851C4F9AE02/2A3E4DF001DC11EDA4B7F257C4F9AE02.roa
File: 2A3E4DF001DC11EDA4B7F257C4F9AE02.roa (raw, json)
Hash identifier: 56BPGPWaqRhhCkZAdHvAAee9wYzaL61TQ1IWobBaQTk=
Subject key identifier: 2E:E5:71:36:DD:5C:BF:51:53:0A:6D:51:E2:CB:C0:97:F3:7F:04:8E
Certificate issuer: /CN=A91C984B/serialNumber=3A830242E84EDC765A073120AC24F0400E4F6046
Certificate serial: 01D1
Authority key identifier: 3A:83:02:42:E8:4E:DC:76:5A:07:31:20:AC:24:F0:40:0E:4F:60:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoMCQuhO3HZaBzEgrCTwQA5PYEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C984B/F32F001401D811ED9C85F851C4F9AE02/2A3E4DF001DC11EDA4B7F257C4F9AE02.roa
Signing time: Wed 01 May 2024 05:07:09 +0000
ROA not before: Wed 01 May 2024 05:07:09 +0000
ROA not after: Thu 29 Aug 2024 00:00:00 +0000
asID: 17483
IP address blocks: 103.226.208.0/24 maxlen: 24
103.226.209.0/24 maxlen: 24
103.226.210.0/24 maxlen: 24
103.226.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jun 2024 05:04:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C984B/serialNumber=3A830242E84EDC765A073120AC24F0400E4F6046
Validity
Not Before: May 1 05:07:09 2024 GMT
Not After : Aug 29 00:00:00 2024 GMT
Subject: CN=6631cdfd-a667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9c:6c:c7:f4:d3:55:b3:55:05:69:3a:17:df:
34:f4:ed:77:6c:37:dc:ac:4e:1c:4f:49:11:0c:4d:
80:9c:4e:2f:bb:21:f9:01:0a:ad:f1:e9:6b:4e:1f:
aa:8b:c1:96:fc:d8:73:b2:00:57:57:2c:5b:5d:80:
8f:4c:65:9d:67:0a:25:e5:ab:7d:7e:d5:a6:9c:54:
72:23:56:52:76:b0:a6:4a:1d:d2:93:91:f8:c8:4e:
8e:5b:d0:55:c6:c2:3d:01:1e:6f:5b:0e:b6:c8:be:
4d:59:13:c1:b2:b6:95:0b:33:9c:2c:1e:9b:45:6d:
68:9b:1d:38:f3:bb:09:a5:33:ad:15:18:d7:e4:09:
59:3c:7f:20:dd:d6:2a:6e:70:5c:65:d4:2b:a2:cf:
33:2e:c2:cc:83:83:e9:5f:d0:1a:fc:14:c4:81:12:
18:28:de:7d:cb:6d:d0:34:5a:42:4a:82:14:51:61:
96:56:06:3b:fa:f0:be:e8:1f:50:e9:18:40:ad:f8:
2d:6a:30:90:c1:bb:09:27:57:aa:1a:e5:9a:9a:8f:
c5:c2:f9:7f:86:1b:d2:ab:9b:91:e9:6d:ab:22:d0:
3e:a9:b6:24:9b:40:9d:16:59:e9:50:c2:08:02:20:
1c:ed:eb:7a:86:d4:7a:98:2b:0d:04:02:56:67:68:
47:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E5:71:36:DD:5C:BF:51:53:0A:6D:51:E2:CB:C0:97:F3:7F:04:8E
X509v3 Authority Key Identifier:
keyid:3A:83:02:42:E8:4E:DC:76:5A:07:31:20:AC:24:F0:40:0E:4F:60:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C984B/F32F001401D811ED9C85F851C4F9AE02/OoMCQuhO3HZaBzEgrCTwQA5PYEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoMCQuhO3HZaBzEgrCTwQA5PYEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C984B/F32F001401D811ED9C85F851C4F9AE02/2A3E4DF001DC11EDA4B7F257C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.226.208.0/22
Signature Algorithm: sha256WithRSAEncryption
ed:91:4c:82:25:e9:b5:8e:dd:b1:ac:55:96:49:07:d3:79:cd:
b4:0b:e4:65:1e:e8:62:01:c9:25:07:58:67:e6:dd:66:b0:ff:
22:72:ea:38:b7:99:78:60:e6:ed:c4:88:b3:20:29:d9:0f:94:
00:13:df:34:18:ae:bf:a8:a9:b9:8b:66:4d:83:36:7b:82:16:
66:b0:31:fa:70:13:67:fd:5c:a0:bb:c2:1d:c6:3a:e0:b2:03:
ab:46:82:31:79:b4:7c:39:85:85:20:f9:77:43:54:51:b7:6f:
cd:a5:8c:6d:80:f9:e5:07:47:3b:bb:81:fb:ff:42:b2:94:9c:
b8:85:cf:1c:e4:87:2c:c1:4d:c4:9b:68:4b:f9:79:13:26:1d:
83:86:9d:ef:df:cf:64:24:62:d0:19:81:a9:95:f2:9b:4f:b8:
4e:bd:9d:ea:c9:c3:b7:6b:18:0a:1b:c2:44:10:15:df:9d:da:
f9:80:7c:84:7f:fa:86:b2:c9:02:b2:a3:63:00:cd:f0:63:29:
51:e7:ed:ea:4c:3d:34:1d:af:36:70:d9:7d:c6:ad:70:8a:a0:
5d:bf:34:4c:72:f4:88:0d:0b:eb:91:3b:5a:ad:0a:ed:7d:10:
d4:fa:14:ec:60:60:a2:2a:82:17:ef:18:2c:28:9d:34:c6:04:
6e:b7:c3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 08:06:39 2024 by rpki-client on console-ams.rpki-client.org