Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/576AF36499A211EE97FB3D32C4F9AE02.roa
File: 576AF36499A211EE97FB3D32C4F9AE02.roa (raw, json)
Hash identifier: Fd9RmINhMeOEaFyBLF3KZ4uqxEYrN/pemvKQruHxlzs=
Subject key identifier: FC:44:D1:17:76:58:49:3E:E3:94:8D:F2:6C:4F:88:32:F1:B3:1A:2C
Certificate issuer: /CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142
Certificate serial: 023C
Authority key identifier: BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/576AF36499A211EE97FB3D32C4F9AE02.roa
Signing time: Wed 13 Dec 2023 10:28:56 +0000
ROA not before: Wed 13 Dec 2023 10:28:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140045
IP address blocks: 103.184.92.0/24 maxlen: 24
103.184.93.0/24 maxlen: 24
2400:a560::/32 maxlen: 34
Validation: Failed, certificate revoked on Thu 18 Jan 2024 21:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 572 (0x23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3731/serialNumber=BC3A8BB0CDD08B6E3721B2C1D21A81714C3B2142
Validity
Not Before: Dec 13 10:28:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65798768-ca5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:e7:71:89:25:b4:7f:4b:1f:eb:75:39:9c:
d6:88:87:b6:83:6f:ab:5c:7d:e7:9c:67:76:89:b7:
6d:80:57:5f:14:67:db:e0:6e:7f:26:fd:c9:ef:99:
63:8d:de:9e:9f:1e:36:48:c2:54:ca:16:2d:fd:56:
ea:f7:01:a2:13:c0:66:c5:8d:0b:12:23:12:d2:45:
c6:a5:0a:80:48:b4:b9:ed:3a:09:b3:2e:09:bb:30:
92:82:77:0c:ad:f0:88:42:bb:7d:d5:7e:e9:e5:82:
f5:1f:c3:86:27:46:4d:4e:da:6f:88:8b:3e:f2:3f:
a5:f4:bf:eb:19:ec:56:6a:d4:e8:2a:51:10:62:08:
71:9e:d7:57:69:89:f8:17:49:dd:71:73:f4:4d:f4:
1f:01:91:cf:64:d3:a2:5c:37:50:19:b8:7c:52:6b:
64:69:c4:29:18:06:6a:14:c7:97:5f:d2:46:b0:b6:
eb:a9:c3:da:6d:0d:5e:84:e1:d8:39:3f:28:c6:23:
cd:84:86:92:8b:8d:c3:e1:ed:c2:73:2e:13:e8:25:
f3:4e:ca:1c:25:2f:a9:38:51:0d:93:a7:0c:dd:d9:
98:fb:32:a2:84:24:e4:78:3f:0d:d3:2a:36:dc:b0:
06:78:0a:d5:6b:70:1c:45:0b:b7:db:26:4e:25:56:
bb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:44:D1:17:76:58:49:3E:E3:94:8D:F2:6C:4F:88:32:F1:B3:1A:2C
X509v3 Authority Key Identifier:
keyid:BC:3A:8B:B0:CD:D0:8B:6E:37:21:B2:C1:D2:1A:81:71:4C:3B:21:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/vDqLsM3Qi243IbLB0hqBcUw7IUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDqLsM3Qi243IbLB0hqBcUw7IUI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3731/55B223EAC02211EC9265DA5DC4F9AE02/576AF36499A211EE97FB3D32C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.184.92.0/23
IPv6:
2400:a560::/32
Signature Algorithm: sha256WithRSAEncryption
90:e3:cb:c8:d9:ce:17:7b:65:98:c4:79:14:90:15:83:99:38:
6a:49:c2:7f:ed:73:c6:0d:3f:28:59:39:f0:72:f1:d7:f5:58:
e6:3e:1d:0d:c6:23:7c:70:44:7b:26:eb:fd:a6:67:33:57:81:
a2:97:99:5d:8a:c3:95:ca:cf:c8:d0:93:25:05:8b:ce:51:af:
0e:d8:3f:77:58:cf:96:60:ee:8c:e5:19:7a:6b:d4:4c:5d:e9:
29:d2:06:ec:be:65:2e:e9:3e:cd:bc:19:ed:4f:e0:f6:17:34:
91:c1:6d:c1:8b:72:d0:dc:62:2c:c3:81:2f:59:a6:b2:86:8f:
c0:e2:a6:38:ca:70:8f:95:b8:aa:96:77:bc:0c:03:97:5b:ad:
21:32:a8:ea:9a:a2:72:16:31:10:bb:5f:21:d8:7a:3e:85:34:
c8:1d:4d:d5:33:ba:dd:ce:cf:a9:14:0e:49:67:5c:74:97:fd:
21:87:41:2b:a7:77:7c:5e:44:e6:22:4f:c8:af:b0:a0:97:55:
e9:18:48:51:ec:07:c5:e3:05:3c:65:a3:58:2b:0e:93:c9:fe:
43:f4:b6:33:71:42:85:58:22:53:eb:2b:12:46:0a:dd:f2:49:
8f:f4:55:b2:25:c8:f3:9d:d7:18:e4:0f:21:f6:38:45:ac:8c:
85:0a:db:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:32 2024 by rpki-client on console-ams.rpki-client.org