Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/E75995749FBB11EE9CC97552C4F9AE02.roa
File: E75995749FBB11EE9CC97552C4F9AE02.roa (raw, json)
Hash identifier: ZAI+4riY0bMp3rH1Q2S6YHObsd39bxbkjgmo+oHIyuc=
Subject key identifier: F3:CB:AE:EB:3F:FF:7D:27:2E:D5:6D:82:27:DE:77:02:9D:5E:D3:FC
Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial: 0221
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/E75995749FBB11EE9CC97552C4F9AE02.roa
Signing time: Wed 03 Jul 2024 03:25:14 +0000
ROA not before: Wed 03 Jul 2024 03:25:14 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 133296
IP address blocks: 103.26.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Oct 2024 06:13:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Validity
Not Before: Jul 3 03:25:14 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6684c49a-6ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ee:03:ff:e0:f8:c3:92:f2:29:f5:ff:4f:5a:
fb:a1:85:25:24:9f:44:4f:f5:52:b4:50:97:5f:7d:
53:d9:d3:bf:23:07:7c:3d:49:ce:b0:30:8f:7d:34:
67:dc:61:0a:21:31:99:e9:35:ef:df:53:30:8a:82:
eb:15:6a:1f:b3:a7:6a:c6:f2:cf:99:1b:55:1c:23:
79:92:6b:d9:cb:d2:50:60:8e:57:f7:b2:70:de:1d:
c3:e6:14:67:bd:c2:18:26:70:01:a8:98:ff:01:fb:
e2:a8:f7:3d:21:5e:de:13:c4:dd:7a:38:b2:b1:33:
b5:7a:3c:c0:b2:16:8c:fc:f5:e6:ee:5a:5f:41:78:
d1:4b:5e:45:d0:aa:21:20:2d:d5:5e:e7:a3:33:ce:
7f:9f:a1:43:42:30:52:23:e9:7f:ca:ed:ce:36:3f:
21:82:8b:e1:ec:b1:df:36:62:21:6f:bb:74:ab:5f:
9b:f1:9b:cf:f4:86:29:fd:0b:f3:a3:37:81:29:86:
40:1b:ec:d4:70:7d:4d:7d:c4:68:20:bd:d1:b2:d0:
cd:43:47:ab:80:c9:d5:04:97:e3:ed:4e:e1:c9:1b:
2e:6f:e9:49:e2:ee:f2:e5:8f:f7:82:87:23:0a:80:
56:40:63:59:82:82:c7:ee:a4:eb:48:d9:75:00:21:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CB:AE:EB:3F:FF:7D:27:2E:D5:6D:82:27:DE:77:02:9D:5E:D3:FC
X509v3 Authority Key Identifier:
keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/E75995749FBB11EE9CC97552C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.26.10.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:2b:65:ce:b2:91:07:99:c3:30:8a:a1:da:6c:48:c5:fe:f3:
8c:3c:8b:7f:0b:d3:24:08:d2:b3:48:8b:11:f5:1d:89:44:d9:
8c:68:a7:d1:05:fb:a4:46:2a:a6:2b:c2:18:34:76:46:4f:34:
7a:c8:de:e2:ec:36:66:21:e9:b5:01:78:cf:ae:7c:99:23:cb:
6f:70:a7:f9:29:83:c7:b6:5b:88:76:16:e0:8b:98:81:92:e2:
7b:11:b4:87:28:6e:34:e7:6d:49:22:40:f1:f3:27:bc:be:1c:
2c:56:fa:4f:60:a0:61:9b:e4:79:2c:9b:71:df:2f:f0:7f:a5:
bc:b9:ea:ab:ae:14:02:f3:f4:5d:04:da:73:f5:a6:65:3b:69:
c3:24:8c:e8:ab:b4:88:e8:11:51:7b:bb:bf:ef:04:e9:5d:d1:
1d:64:c0:a0:c5:aa:7e:6e:5a:3f:81:db:2b:8c:a7:bc:6f:95:
45:2d:bb:34:24:39:fb:49:62:de:eb:c7:0f:6c:04:16:15:cf:
68:f9:a1:a7:e1:30:c1:32:b9:3a:66:d7:0e:36:7e:19:6a:fe:
e8:a3:53:ed:46:c1:bd:c9:71:11:c6:ec:9f:a1:19:1f:33:6b:
0a:a9:31:33:5e:4d:38:57:db:b9:2a:9c:81:75:02:33:72:0a:
36:5e:72:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 07:28:39 2024 by rpki-client on console-fra.rpki-client.org