Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/630535DA9BB411EFB7C7D125C4F9AE02.roa
File: 630535DA9BB411EFB7C7D125C4F9AE02.roa (raw, json)
Hash identifier: YZgW2Egz4+R7US51A/H15d2+JQUnPbRhI/6ZRdmM48Q=
Subject key identifier: 34:AE:CD:85:33:CA:0B:72:AA:73:81:7C:2D:23:13:DC:E5:17:4D:73
Certificate issuer: /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Certificate serial: 0309
Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/630535DA9BB411EFB7C7D125C4F9AE02.roa
Signing time: Tue 05 Nov 2024 20:27:33 +0000
ROA not before: Tue 05 Nov 2024 20:27:33 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 150108
IP address blocks: 103.172.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 13:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 777 (0x309)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Validity
Not Before: Nov 5 20:27:33 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=672a7fb5-818e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6c:25:3c:f6:45:d8:b0:9f:17:47:4d:7b:cf:
90:d8:87:be:a4:17:eb:77:21:15:bf:31:20:71:39:
32:0f:31:30:e8:6a:c6:bc:c9:7c:28:e8:73:59:43:
8e:90:7b:41:db:a8:5d:8e:73:f0:ed:fc:d7:6b:08:
ef:59:24:7c:0e:17:36:0e:f5:d0:e0:8e:cf:2e:71:
52:21:fb:9c:21:06:97:29:96:b5:56:f6:ed:96:8a:
39:15:36:49:fd:4e:fc:69:d9:50:c4:78:3e:b3:6d:
2a:5d:32:30:2d:0b:31:26:1b:7d:c9:1c:cf:41:eb:
64:a4:b3:28:b5:68:df:f4:83:e3:99:49:d0:02:da:
8f:a0:cd:b5:10:fa:04:2f:a2:3c:53:e5:4e:51:f8:
80:37:76:d4:bd:37:78:81:5a:f7:59:6f:34:3c:70:
16:29:71:98:58:31:8a:db:48:a6:48:ec:1c:66:f3:
9b:56:f2:e3:dc:7a:65:6e:fc:53:13:4b:1c:08:1b:
cd:b4:f6:99:8d:00:bd:6b:05:90:64:d8:7e:2e:84:
32:ff:9a:8d:3b:11:4d:08:ee:4d:90:d2:65:c4:ab:
43:fc:5e:3d:0b:7b:0d:82:64:c7:81:b6:a2:13:29:
d5:1d:00:e9:98:da:3f:5a:81:cd:25:a3:1c:38:15:
3f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AE:CD:85:33:CA:0B:72:AA:73:81:7C:2D:23:13:DC:E5:17:4D:73
X509v3 Authority Key Identifier:
keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/630535DA9BB411EFB7C7D125C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.166.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:a4:48:1c:0c:13:d7:d2:3a:c2:a3:2c:ba:7b:61:9b:9d:fe:
f7:dc:38:08:7d:1b:64:fc:9b:63:b1:b5:6b:a1:bf:6d:95:08:
d0:a2:ab:e8:4e:c4:13:a7:54:08:55:54:0a:44:68:31:ce:46:
07:97:4c:44:3d:30:bb:c3:cd:47:74:5d:5d:8f:4a:5e:c8:6b:
49:fd:ae:fe:9b:eb:f1:5b:96:3e:d1:a4:66:3a:ed:de:15:1f:
dd:8e:6c:e2:9a:3f:f8:93:cb:c3:ac:53:fa:02:e0:48:54:da:
dc:c3:f7:f0:36:f2:39:09:9f:5f:7c:77:3b:28:8c:3c:95:37:
27:cc:3d:d6:28:7f:f4:78:96:27:23:4c:3a:e6:25:dc:ab:46:
37:a1:34:b9:28:a6:11:cd:be:11:0c:07:37:e0:68:f2:47:b3:
28:d4:e4:bd:e2:ac:86:6e:c9:5e:2b:23:9d:03:f0:41:fb:9c:
43:1c:0c:b9:be:9f:b3:8b:4b:94:62:6e:aa:3d:ae:94:e7:fc:
4c:ed:b5:b0:85:a8:64:84:8b:36:3e:8b:28:58:82:63:48:bb:
54:f1:e3:b0:58:ad:7e:28:13:80:0a:5e:c1:c5:11:92:02:61:
9e:81:91:be:7c:d4:35:55:f5:6c:f2:cf:ba:a3:bc:82:b0:fd:
34:d5:84:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org