Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/ED92BD72242B11EF80D1EC67C4F9AE02.roa
File: ED92BD72242B11EF80D1EC67C4F9AE02.roa (raw, json)
Hash identifier: 0WLDxGtwUuCq3nxM5aKf+ii9XHMI8P8nMwTFzRQ6/5k=
Subject key identifier: C8:3E:A1:9E:AD:38:75:37:45:85:DA:2D:DC:A6:8B:14:DF:D6:05:0E
Certificate issuer: /CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908
Certificate serial: 010F
Authority key identifier: D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/ED92BD72242B11EF80D1EC67C4F9AE02.roa
Signing time: Thu 06 Jun 2024 17:40:56 +0000
ROA not before: Thu 06 Jun 2024 17:40:56 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 25687
IP address blocks: 103.224.8.0/22 maxlen: 22
103.224.8.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 09 Jul 2024 18:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908
Validity
Not Before: Jun 6 17:40:56 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6661f4a8-f1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:64:10:44:8a:1b:b2:66:17:03:4f:bd:00:
22:ef:f3:7b:bf:7e:99:d9:1f:10:97:53:fa:58:d7:
84:c9:1a:dd:4e:d2:3a:9f:ee:79:1a:1e:82:e0:88:
22:8a:58:13:be:41:89:9f:c9:f4:3e:1e:b0:23:47:
91:fa:a0:34:c3:eb:9b:6a:04:f4:d5:fb:bd:9e:f5:
40:50:52:9a:24:63:3c:02:45:4b:83:ad:ec:1c:a1:
69:c6:f8:ec:73:89:6d:4e:1b:95:cc:76:fa:83:29:
9e:6d:b6:0e:79:9e:3f:7f:ec:e7:0e:3c:e8:2f:fe:
8b:5a:50:d8:8a:08:76:3f:6c:1b:a2:87:b1:f4:36:
81:52:47:75:67:d5:f1:8d:c9:b4:14:ce:d7:0c:9b:
25:b3:52:76:35:ba:ed:7d:89:b0:ca:71:48:b8:59:
db:fe:e9:01:e3:f2:e2:37:bd:3c:55:b5:a0:47:83:
69:10:ad:56:4f:84:52:17:69:f7:67:f3:ad:27:69:
05:ec:74:d3:e8:e4:ba:92:cb:ba:06:10:3b:20:b9:
b0:76:5a:2f:24:51:ed:95:32:06:76:ab:76:f5:ac:
7e:4b:ed:a9:a7:8f:a3:9d:fa:bf:75:20:d6:52:23:
b1:e0:0c:2c:b8:a4:ef:b7:0e:e8:a7:96:ac:94:96:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3E:A1:9E:AD:38:75:37:45:85:DA:2D:DC:A6:8B:14:DF:D6:05:0E
X509v3 Authority Key Identifier:
keyid:D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/ED92BD72242B11EF80D1EC67C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.8.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:91:1a:c1:95:a5:a8:34:70:d5:6a:57:91:7e:72:06:cc:84:
ca:8d:7f:0c:1e:09:e6:01:86:5f:34:c9:f8:b4:9b:64:fb:49:
bd:2b:63:9a:0b:85:92:38:6f:40:70:a3:aa:5f:b7:d1:39:21:
cf:76:b1:4f:9b:21:3b:ec:86:84:37:ae:78:e1:17:7d:ea:b2:
7f:18:27:5e:44:ee:01:d8:c3:fe:8d:5e:d3:92:5c:b1:08:02:
bb:eb:f5:bb:0b:e7:e0:cc:4a:ad:29:84:b4:4e:87:76:60:a8:
2f:8a:84:47:85:27:67:d7:b6:87:e6:1e:40:88:53:2d:b9:f2:
d0:99:d2:cd:5f:fa:b2:dd:dc:25:de:b3:19:5a:f4:92:11:84:
5a:6f:85:59:cb:84:52:42:5f:41:b7:91:5e:0d:bd:be:88:18:
5a:6c:b2:88:27:55:7e:f8:4e:ff:44:d7:6f:16:8c:63:a1:42:
53:56:d3:40:44:c4:fe:53:b9:47:d3:f2:c7:32:29:91:38:22:
b3:5f:2b:6e:c3:a0:af:86:68:86:00:0f:bb:8d:d3:4b:72:87:
7f:78:f0:87:2e:47:da:8d:14:b2:a2:44:98:c2:ea:d5:8b:8f:
f7:a8:73:1d:d1:6b:88:14:de:fb:e6:b9:7c:02:6f:66:77:e2:
a4:37:41:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 21:07:17 2024 by rpki-client on console-ams.rpki-client.org