Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/369904CE214211EEBA1B697AC4F9AE02.roa
File: 369904CE214211EEBA1B697AC4F9AE02.roa (raw, json)
Hash identifier: 9gXs94r2WyfRaUbO5wqHo7XUG98GJPMHxx2OerYbRv4=
Subject key identifier: 7A:22:33:B5:17:BF:F0:23:81:3F:BC:AD:1C:D7:E8:76:A3:7F:31:15
Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial: 0222
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/369904CE214211EEBA1B697AC4F9AE02.roa
Signing time: Wed 03 Jul 2024 03:25:15 +0000
ROA not before: Wed 03 Jul 2024 03:25:15 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 135602
IP address blocks: 103.26.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 05:38:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 546 (0x222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Validity
Not Before: Jul 3 03:25:15 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6684c49b-5c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:9d:9d:25:a7:64:3e:94:35:0f:02:83:f0:
3c:77:2e:cb:d2:37:10:98:c1:26:f3:f9:dd:e9:81:
eb:b4:00:79:ff:d8:f0:2d:7c:f8:a9:83:e5:f6:9d:
de:2e:60:8d:b2:47:a7:9f:b9:38:d3:2f:b6:a4:bc:
73:b5:f8:a8:81:b9:93:ee:9e:b4:14:c9:df:b6:44:
1c:37:7f:6b:41:6d:31:f6:77:86:55:95:0d:4b:d2:
15:64:56:0e:51:d9:a7:9b:68:08:9f:99:c6:0b:31:
6b:ee:5c:33:21:24:80:fe:7c:32:8d:86:fd:75:49:
f7:d2:fb:17:8f:d8:95:c5:3b:2b:c1:2a:1e:23:75:
e2:c1:ed:64:34:8d:b0:95:92:a9:5a:f5:51:ea:d1:
29:55:92:3e:81:7a:e8:9e:11:55:64:ac:a4:e3:a9:
ac:99:57:79:a8:7f:27:b0:8a:17:c0:e6:e7:7c:e1:
46:a2:5f:7d:41:69:e2:4e:e6:57:bd:d7:8a:c8:b9:
cb:04:bb:38:ca:f0:35:e6:b0:08:76:e8:7e:f6:9d:
6a:37:0c:03:2c:a4:45:91:bf:71:41:b3:21:29:33:
38:5b:f6:78:0c:9d:92:16:cc:5e:d7:06:e8:f2:f8:
63:f3:7b:2a:d1:e4:ec:d1:b2:5a:63:0d:43:86:8b:
64:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:22:33:B5:17:BF:F0:23:81:3F:BC:AD:1C:D7:E8:76:A3:7F:31:15
X509v3 Authority Key Identifier:
keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/369904CE214211EEBA1B697AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.26.9.0/24
Signature Algorithm: sha256WithRSAEncryption
99:de:39:92:17:53:d6:32:8f:77:59:25:82:8f:19:88:ae:62:
6b:55:a3:45:48:01:3d:68:96:4d:de:27:05:19:59:5f:e0:9c:
28:a9:08:83:e2:92:2a:0a:62:b5:a4:0c:f6:0b:e3:a0:27:2d:
41:ba:19:de:51:97:f8:09:bf:df:20:30:fe:16:18:53:ac:1e:
2c:8b:82:5d:12:ea:0b:18:db:f0:b7:d8:08:a0:6d:4f:c9:2b:
02:3e:49:7f:5f:26:13:97:6c:40:8e:f3:85:1a:0f:4d:2f:f1:
6e:11:70:2a:35:d6:cd:ae:d2:7a:d3:0e:c4:63:cf:1e:b5:1e:
73:cf:b0:01:fe:3f:4e:94:ab:b9:a7:c1:ed:e1:d2:8d:70:8f:
c4:44:d5:02:fc:ce:e4:88:d2:58:4f:c5:87:ff:10:e1:94:7f:
45:6e:57:98:50:75:4d:4c:f6:c8:35:de:65:24:e3:9b:2f:a1:
df:b5:f6:bf:55:97:d7:20:b2:5b:60:35:dc:5d:14:3f:b4:6b:
89:34:79:5b:b4:e6:dd:38:b7:20:32:33:c1:16:17:d4:20:10:
5a:8c:d4:12:3c:b4:f2:e6:14:d0:44:dd:63:70:ad:8d:ad:c5:
00:ee:87:9b:66:40:1b:8b:aa:fc:d4:82:03:b5:58:a3:8c:53:
b6:22:2b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 06:53:55 2024 by rpki-client on console-ams.rpki-client.org