Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/224EBA9A977411EB84A42F6EC4F9AE02.roa
File: 224EBA9A977411EB84A42F6EC4F9AE02.roa (raw, json)
Hash identifier: 5B159gsvRVveaRa9T21xHHDVSkLPq8vXvEKGN6STq2g=
Subject key identifier: BF:1A:41:EE:00:C1:28:DE:E4:17:87:E0:2B:CC:CF:D0:BE:55:B1:0F
Certificate issuer: /CN=A91D3876/serialNumber=127BD806A237D0CADE91182B9FC726659BE2EF71
Certificate serial: 04FC
Authority key identifier: 12:7B:D8:06:A2:37:D0:CA:DE:91:18:2B:9F:C7:26:65:9B:E2:EF:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EnvYBqI30MrekRgrn8cmZZvi73E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/224EBA9A977411EB84A42F6EC4F9AE02.roa
Signing time: Tue 03 Oct 2023 00:01:24 +0000
ROA not before: Tue 03 Oct 2023 00:01:24 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 132015
IP address blocks: 103.199.80.0/24 maxlen: 24
103.215.20.0/24 maxlen: 24
103.215.21.0/24 maxlen: 24
103.246.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Aug 2024 23:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1276 (0x4fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3876/serialNumber=127BD806A237D0CADE91182B9FC726659BE2EF71
Validity
Not Before: Oct 3 00:01:24 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=651b59d4-041a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:f9:1e:ec:ed:6b:95:08:0c:c5:71:dc:32:
5f:d4:9c:08:80:c1:4f:c1:41:42:47:f4:a7:27:05:
e1:91:93:39:04:60:78:9f:92:f0:ce:f5:7e:35:fb:
22:62:b5:d0:87:33:01:b3:55:c4:7c:cc:87:c1:99:
12:e6:a7:7b:af:4b:4e:12:35:77:95:c6:46:97:1b:
98:49:5a:37:c4:2c:da:16:a9:b1:6b:85:f8:97:a6:
18:7a:2d:75:fb:4c:aa:cb:71:39:44:99:46:9e:9c:
5c:33:4f:20:b6:cd:12:ac:55:ce:73:c6:68:a9:f1:
8c:44:c9:80:e4:25:8d:82:bf:4a:56:01:85:9a:7c:
dc:78:62:5f:b2:91:13:58:ea:7c:64:c6:93:c1:18:
35:ec:84:b4:0a:fa:33:40:d5:bd:5b:fb:65:85:af:
cb:28:5c:47:32:e6:56:c4:82:ce:32:bd:7b:5f:ad:
6a:dd:ae:b2:d9:59:22:49:aa:ee:1c:ca:51:11:57:
1b:bd:6a:71:2d:fd:d6:50:2e:14:b7:da:74:8c:01:
17:94:ae:55:d5:82:59:66:7c:19:49:7c:19:6d:81:
88:5c:6c:2d:44:bb:ce:d4:90:7b:b7:45:77:12:1e:
ed:74:91:71:3e:51:3b:72:c0:e1:4f:a2:b1:ff:24:
f8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1A:41:EE:00:C1:28:DE:E4:17:87:E0:2B:CC:CF:D0:BE:55:B1:0F
X509v3 Authority Key Identifier:
keyid:12:7B:D8:06:A2:37:D0:CA:DE:91:18:2B:9F:C7:26:65:9B:E2:EF:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EnvYBqI30MrekRgrn8cmZZvi73E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/224EBA9A977411EB84A42F6EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.199.80.0/24
103.215.20.0/23
103.246.186.0/24
Signature Algorithm: sha256WithRSAEncryption
07:25:d4:37:31:30:cb:5b:8a:44:00:d8:4f:ed:28:8a:f3:0d:
05:c5:39:e3:eb:81:1e:7c:cd:09:4a:95:32:4e:06:28:76:7d:
b2:10:5f:da:52:5d:03:26:ee:bf:0e:e7:70:c8:42:cd:25:f1:
3d:cd:40:d5:e2:33:48:e3:6e:b6:2e:fc:d5:85:17:0c:39:70:
97:d7:b3:97:af:fc:40:80:73:0c:9c:96:c4:d9:21:90:ae:96:
2f:1a:32:db:9f:45:29:9d:00:ee:f0:e4:4b:87:38:21:dc:0a:
55:16:21:ef:61:5b:8e:80:ac:00:ce:fb:3e:92:4b:52:7e:ce:
24:dc:7d:12:35:fb:d9:2b:48:ba:e3:c8:99:15:03:fb:ba:b1:
54:11:46:26:0b:5c:4f:5b:09:41:47:f8:c5:d1:7a:0a:e0:17:
97:bc:a3:d1:8b:5e:88:4e:51:c5:94:31:7b:f4:d1:e3:0e:59:
ef:2d:8c:ab:64:a9:4c:1d:6d:59:07:c3:88:45:ed:b2:76:ca:
9f:05:a5:b4:3e:ab:ff:a1:ec:5a:70:10:c0:cc:df:98:4d:5f:
13:c6:34:fa:c3:90:c9:4c:78:74:e6:00:ff:70:86:c6:33:64:
eb:32:37:a3:e5:cf:9d:9e:b9:04:90:20:8b:2a:d3:4a:1b:91:
af:94:89:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 01:46:29 2024 by rpki-client on console-fra.rpki-client.org