Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/70F96DD0759B11EFB9062C58C4F9AE02.roa
File: 70F96DD0759B11EFB9062C58C4F9AE02.roa (raw, json)
Hash identifier: dLoAYMqscnbJbVMbDOY158pUGlSq2gt7bokj44eDflk=
Subject key identifier: 80:9E:18:D3:4A:A2:E8:3D:94:C6:6F:9C:E6:EE:0A:8C:08:71:0D:48
Certificate issuer: /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
Certificate serial: 0A5A
Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/70F96DD0759B11EFB9062C58C4F9AE02.roa
Signing time: Wed 18 Sep 2024 08:53:15 +0000
ROA not before: Wed 18 Sep 2024 08:53:15 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 152177
IP address blocks: 103.139.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 14:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2650 (0xa5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
Validity
Not Before: Sep 18 08:53:15 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66ea94fb-901c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:5c:b0:d8:b1:21:45:29:8d:9d:ec:d0:ed:
ba:29:31:c6:a8:97:e5:d0:8f:47:3a:5d:d6:64:77:
27:3f:74:2a:7e:37:0e:99:b8:2b:53:7d:8d:d8:ef:
21:15:a8:95:96:77:84:14:5c:f8:5d:0e:a4:e2:26:
6b:0b:a2:19:5e:7a:cd:56:b4:06:41:ef:dd:7d:f8:
55:a4:03:38:7b:5c:e4:c9:90:d8:f7:f4:ea:5c:72:
f6:3e:dd:0e:d3:dc:24:b9:f6:0e:76:15:62:03:98:
19:79:a0:df:90:c1:e8:20:92:9c:30:c4:e7:03:7b:
10:a0:47:ec:12:1c:56:65:60:ee:72:81:3f:2c:c7:
bc:41:b4:db:5e:78:96:08:c2:ae:16:c5:70:5f:72:
be:91:83:95:54:35:1d:ca:cb:c6:35:3e:a9:66:25:
bb:d9:13:a7:56:5f:ed:96:1f:d6:ac:b8:f3:98:69:
f3:33:e9:d2:b8:ce:d4:09:b9:bc:3c:c1:3b:a8:50:
59:f6:bc:34:c4:6c:9e:39:75:7e:34:f2:7a:7c:89:
7f:f9:4c:9d:68:be:ba:e2:7b:7f:3c:c2:fa:eb:15:
4a:03:8c:95:3d:c0:a2:1f:18:d9:98:b0:e4:68:71:
a1:db:0e:63:84:d6:de:8c:60:ab:fd:67:04:ce:7b:
86:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9E:18:D3:4A:A2:E8:3D:94:C6:6F:9C:E6:EE:0A:8C:08:71:0D:48
X509v3 Authority Key Identifier:
keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/70F96DD0759B11EFB9062C58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.253.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:1e:6e:e9:8c:ad:37:5f:9a:7e:4b:33:2d:67:90:06:c0:aa:
1e:59:c7:be:40:88:5c:cb:5d:15:b8:f5:76:42:8b:83:9c:93:
6a:9f:79:1b:33:8a:bc:95:ca:87:d8:a7:5b:e3:92:59:75:24:
e0:f6:13:7c:45:58:49:d3:42:86:78:bd:9a:3c:cd:fd:7e:a6:
41:b3:5c:cb:c2:97:99:c3:14:82:57:71:c6:3d:cc:09:3a:d6:
ab:af:df:75:80:25:7d:87:7a:8b:e5:08:1b:b1:ce:62:b6:e0:
fc:37:82:63:6f:9b:d2:9e:ff:0b:bd:d0:90:63:99:b0:01:64:
b9:48:a6:a8:5a:1c:c0:67:49:5b:4b:d8:27:6e:9b:92:4b:91:
e0:1f:ed:99:1d:9b:71:86:32:55:4f:6a:b4:e0:ab:90:84:84:
f4:ed:d0:41:2e:52:86:51:47:d0:f9:58:3c:9e:a7:f9:f6:05:
4b:92:72:60:4f:35:92:7c:94:33:33:20:b5:be:59:05:b4:a1:
32:be:2e:71:eb:89:61:77:8a:9d:29:7d:0c:ce:3d:48:bd:46:
15:87:22:a3:7e:e5:52:d2:ed:0d:e9:bb:ba:c0:43:2b:3d:66:
e6:0d:26:ab:06:82:34:b2:97:0d:4a:6c:dd:b9:7b:11:10:3c:
58:14:c3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:14:14 2024 by rpki-client on console-ams.rpki-client.org