Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/B506FD1C4E3111EFB475160AC4F9AE02.roa
File: B506FD1C4E3111EFB475160AC4F9AE02.roa (raw, json)
Hash identifier: 3Y8YNTUtM64JjJzdKi/a0v353WDe5LgOOrUSpVRX7eM=
Subject key identifier: B6:A2:7F:5E:35:BE:E2:5F:EF:21:EC:B1:C8:82:AB:F7:95:28:B5:56
Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial: 0240
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/B506FD1C4E3111EFB475160AC4F9AE02.roa
Signing time: Tue 30 Jul 2024 18:06:52 +0000
ROA not before: Tue 30 Jul 2024 18:06:52 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 14618
IP address blocks: 103.26.8.0/24 maxlen: 24
103.26.9.0/24 maxlen: 24
103.26.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 08:21:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576 (0x240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Validity
Not Before: Jul 30 18:06:52 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66a92bbc-a268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:b4:be:42:10:76:f8:b9:67:d4:f0:4a:e6:
5a:76:d9:da:b9:f2:3f:87:50:1a:c8:1f:88:20:f0:
73:ed:46:24:96:c2:7b:8c:20:43:05:8a:26:56:c9:
e5:07:f9:c0:1d:66:4b:07:94:ee:26:1e:8d:3d:a8:
6f:41:a4:4e:72:ba:ed:95:41:1d:27:f0:ca:5b:ff:
20:a0:06:d0:b5:95:25:1a:3c:4d:06:1b:00:07:36:
08:13:1c:b6:8e:50:d8:8b:9c:e9:64:15:36:3f:8a:
0c:08:57:2e:0d:10:db:ed:c4:9d:55:98:05:fe:e5:
20:ea:38:7c:3c:8c:fe:87:4f:a7:ba:06:ff:1a:0c:
32:6e:39:22:4a:05:ea:17:6b:d7:20:c9:34:00:ee:
b3:f0:c4:ab:74:9a:ec:8a:20:aa:22:a0:bb:20:a0:
98:e3:47:86:5f:32:c7:a7:30:18:25:71:b4:aa:64:
6b:32:a5:ba:da:4b:7f:b0:55:61:40:2a:2d:7b:a7:
6d:86:51:a2:b6:8f:95:57:4d:12:66:65:3c:b2:51:
20:66:94:b9:d8:ae:93:c5:31:05:d7:41:40:1a:e3:
fa:06:3c:3a:31:54:32:36:ca:7b:a1:1a:7c:af:d4:
82:42:be:c6:8e:93:1a:4c:c8:5d:0d:56:56:8e:0a:
cf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A2:7F:5E:35:BE:E2:5F:EF:21:EC:B1:C8:82:AB:F7:95:28:B5:56
X509v3 Authority Key Identifier:
keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/B506FD1C4E3111EFB475160AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.26.8.0/23
103.26.11.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:dd:a1:f5:39:e5:78:46:00:61:ae:db:38:e3:7f:83:26:28:
42:c9:25:e3:f3:d7:14:cb:f5:b0:bc:1e:f0:56:1b:45:d6:7e:
48:3d:3e:e6:fe:12:a7:ff:d2:3b:8f:e9:64:f8:6f:d6:37:97:
a6:ab:1c:e8:8a:fb:42:f1:57:31:39:fc:b3:a4:ec:2f:78:8a:
d7:c3:39:ab:f5:bf:b3:8a:c3:30:8d:e9:bf:d4:38:18:b3:d5:
63:89:ed:38:5e:7f:23:e0:a9:36:3a:31:a6:de:06:91:9c:8f:
42:d8:a2:14:5b:b2:0d:37:0f:3a:8d:00:fa:7a:2b:00:f3:e9:
89:15:ff:47:fe:8d:83:b2:b0:da:a7:79:72:1d:c8:34:8a:73:
9c:fa:3c:aa:2e:d1:0c:fa:61:61:ed:1f:d5:ed:f2:cc:fd:90:
22:49:5c:d6:d0:f1:da:b4:33:51:27:58:30:c2:9e:d5:5a:8e:
98:38:55:ad:c4:2b:98:f8:18:08:b9:c3:8d:1a:a9:5b:f9:57:
26:6c:aa:e2:e3:8e:42:ec:c5:22:53:80:5f:45:8b:3f:a4:5d:
af:d3:fc:c4:f6:93:a2:fc:59:13:b8:42:1f:f6:58:3a:99:ab:
ca:a9:37:e4:60:4d:5a:10:b8:ed:47:54:37:17:72:84:b1:09:
25:62:f7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 09:51:56 2024 by rpki-client on console-fra.rpki-client.org