Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/93B78EAC92A611EE9F12E120C4F9AE02.roa
File: 93B78EAC92A611EE9F12E120C4F9AE02.roa (raw, json)
Hash identifier: UaHivIWwzXijO4KoQWaxeGwVggFBNRDI1XvHwrMhlN8=
Subject key identifier: 7C:2C:75:89:F5:CB:C8:23:E7:25:71:5A:54:2E:7D:40:D9:34:1F:FF
Certificate issuer: /CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
Certificate serial: 02FB
Authority key identifier: 7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/93B78EAC92A611EE9F12E120C4F9AE02.roa
Signing time: Thu 29 Feb 2024 03:05:20 +0000
ROA not before: Thu 29 Feb 2024 03:05:20 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 132480
IP address blocks: 103.179.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 12:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 763 (0x2fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
Validity
Not Before: Feb 29 03:05:20 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65dff470-04e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:52:90:c1:4f:19:2d:52:d2:de:10:34:e9:
cd:ac:a7:ed:e8:71:ba:a1:34:36:28:a0:15:4d:c1:
58:2d:0d:74:42:a7:ae:99:5d:2e:12:33:4d:c4:8c:
85:f0:83:03:73:ab:49:ba:0b:76:13:c9:93:06:85:
7e:f5:7d:c6:15:47:0a:61:c9:e8:d9:c0:eb:77:a4:
fa:b8:6e:61:33:29:53:ca:b2:e5:e2:1d:be:32:dd:
24:67:53:1d:4c:4f:21:52:51:aa:a1:23:39:81:dd:
59:99:8a:ad:fa:8b:5c:19:a1:14:cf:2a:be:f2:54:
8d:9b:d0:bf:9b:08:20:de:2d:31:0c:f2:17:26:d5:
b7:97:dd:66:c8:dc:b4:bd:1d:3a:51:dc:40:ab:ae:
8c:b7:a3:53:fe:b0:f4:8d:94:c7:64:21:c3:61:95:
b3:48:07:09:4c:06:b7:fc:dc:b3:91:15:19:99:69:
4d:b0:d0:c1:fb:fb:2f:b6:18:7d:b5:ab:0f:37:4c:
b6:ea:9a:f9:d7:63:7c:ee:1b:66:13:9f:8e:1e:9a:
e1:6e:1b:1a:86:68:f4:c6:fd:87:12:ca:43:73:af:
90:c9:47:b0:64:79:4f:42:f7:14:f9:0a:b4:c9:c1:
59:65:ff:27:dd:b4:56:d7:63:87:c7:23:c9:01:9e:
46:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2C:75:89:F5:CB:C8:23:E7:25:71:5A:54:2E:7D:40:D9:34:1F:FF
X509v3 Authority Key Identifier:
keyid:7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/93B78EAC92A611EE9F12E120C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.240.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:14:29:b2:27:50:58:6c:19:18:3b:03:ac:d9:8d:2b:bd:cf:
88:f2:28:2d:f7:d8:84:cb:4c:54:29:7f:79:1c:90:d5:09:6d:
a5:4c:47:41:3b:28:c6:3d:78:89:e8:47:e9:d9:a0:1a:e4:81:
10:d6:2d:a6:3a:52:bd:33:fb:f2:50:1b:57:5d:3d:9e:f3:fb:
f6:93:14:3d:64:d9:d4:d1:d3:5e:8e:3e:e8:a1:f7:90:8f:09:
fd:62:4a:86:d1:ac:a4:51:8e:19:94:6f:70:fd:e9:ba:7e:52:
62:c0:79:4f:94:fe:6e:bb:15:ff:54:cc:1f:f1:ee:d6:4f:e6:
b6:3c:fb:b3:94:b5:93:40:5c:e1:42:5c:10:cb:ec:3d:e4:5f:
90:be:74:8d:44:f7:27:2d:a9:88:16:ca:ba:ac:30:3b:e6:9e:
5d:f7:ba:d3:7a:13:04:9d:98:b1:dc:44:e6:c1:3e:6c:e1:c4:
8e:a2:34:f6:0d:41:25:9f:4c:a8:67:9e:d0:7f:5b:17:b9:69:
47:4d:1e:70:aa:de:b9:5b:78:05:6f:e8:06:d6:4a:08:f3:b2:
7f:47:19:19:2c:27:8a:86:9c:e3:8d:d1:37:0a:b8:0a:1b:67:
06:cd:77:30:f1:0d:9c:f1:74:3e:01:a2:72:48:c1:68:51:9c:
55:6b:43:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 18:16:59 2024 by rpki-client on console-ams.rpki-client.org