Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/E44F1F668F7F11EFADD29E61C4F9AE02.roa
File: E44F1F668F7F11EFADD29E61C4F9AE02.roa (raw, json)
Hash identifier: uzpE7GYgH0lTJVyfPdIEE7+YOeH9R5pUtT0PxN2NXrY=
Subject key identifier: 52:C3:C1:A8:22:7C:97:7E:3A:F7:82:1E:D7:9D:1E:D0:30:1E:4E:0B
Certificate issuer: /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Certificate serial: 02FF
Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/E44F1F668F7F11EFADD29E61C4F9AE02.roa
Signing time: Mon 21 Oct 2024 07:41:32 +0000
ROA not before: Mon 21 Oct 2024 07:41:32 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 142063
IP address blocks: 103.172.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 22:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 767 (0x2ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Validity
Not Before: Oct 21 07:41:32 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=671605ac-d1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:59:85:b2:3b:72:e2:ce:93:65:42:5e:bd:
97:ec:54:78:e9:66:87:e0:5f:a1:cc:64:0e:f2:c4:
1a:46:9a:0e:6f:ea:ab:e6:47:5e:5f:a1:fc:5b:3f:
63:88:b4:91:42:ef:1f:60:97:24:09:78:82:10:ac:
aa:8b:ff:b4:67:a0:b4:89:6a:dc:47:36:ba:9e:e9:
14:5c:eb:73:0a:1a:04:6f:d4:87:d3:c3:50:ba:f2:
6a:66:78:1e:47:65:8f:96:6c:bd:0b:23:85:72:77:
ee:97:8d:55:6a:a5:d2:41:55:e8:11:3a:12:44:60:
39:dc:e0:80:ba:c8:b1:cc:6f:6d:ba:ae:56:b3:8d:
3a:8b:f4:7d:8c:80:46:6e:6c:84:37:2b:7c:d9:a0:
8f:aa:d1:d6:82:c1:45:df:40:9d:83:3b:39:d2:9c:
e8:33:0d:02:2d:95:94:43:df:9d:0a:24:a5:de:15:
75:8f:4b:68:02:a6:c1:7e:bc:2c:a0:d3:7c:81:c1:
bb:40:05:c0:ba:5b:a0:4a:a9:46:bc:b5:7e:2b:0f:
0b:cd:e1:db:2a:3c:2a:96:74:6d:66:f7:fa:49:f7:
87:72:c3:29:a8:51:85:4e:29:3e:97:33:5b:42:a0:
14:1b:c5:3c:5d:f6:7d:9a:bb:cd:9e:37:43:61:7b:
11:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C3:C1:A8:22:7C:97:7E:3A:F7:82:1E:D7:9D:1E:D0:30:1E:4E:0B
X509v3 Authority Key Identifier:
keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/E44F1F668F7F11EFADD29E61C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.166.0/24
Signature Algorithm: sha256WithRSAEncryption
20:43:f1:1c:35:d2:bb:7c:6e:94:07:0d:ee:ae:7e:a0:82:0b:
f2:6d:f5:06:81:0c:4b:79:37:cb:f0:42:d7:7e:da:58:63:fa:
b2:9b:52:47:e1:bc:a4:a5:4d:94:12:5f:8e:cf:dc:f1:92:85:
93:d0:e9:e9:3f:42:25:dd:80:ce:ac:99:d4:3c:b8:bd:8e:92:
0c:7c:d0:fa:9c:7f:29:6d:82:8e:2b:c4:d3:c5:64:ba:aa:88:
90:c4:71:a3:84:0e:2f:d0:4f:8f:75:0c:fc:e9:12:71:cf:48:
03:5a:1b:42:52:f3:58:6f:28:97:4f:8d:bd:dd:64:ad:f9:ae:
92:14:ce:1d:b5:e9:60:18:ec:ac:a7:a5:3e:e7:2a:a8:34:e3:
59:2e:77:7d:76:55:fc:62:9e:84:a5:f8:14:29:5a:95:86:98:
6f:ac:ac:15:6e:e4:16:a2:e1:18:87:2d:9b:21:26:ec:27:28:
10:be:5b:bd:5e:ce:35:62:7a:04:3c:47:27:fb:e6:fc:21:c6:
cc:f7:0f:fc:77:2a:1e:b2:b7:c3:9d:13:8c:3d:d7:48:4c:a4:
79:e9:97:09:df:ff:33:e7:f2:28:c2:79:c3:67:4d:ff:c9:08:
9f:79:bf:03:54:28:b7:be:6b:62:9e:a6:1c:3c:b4:8a:f0:54:
01:d0:6a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 00:40:13 2024 by rpki-client on console-fra.rpki-client.org