Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/C3A46B040E4E11ED85AF2C7FC4F9AE02.roa
File: C3A46B040E4E11ED85AF2C7FC4F9AE02.roa (raw, json)
Hash identifier: xKQNk0/YOiUe1Z4yFWsnOF2kJR3h5rMSm3X425Qv+qA=
Subject key identifier: 0A:BD:DA:7E:10:6C:52:82:AD:62:F7:D3:F6:68:A3:70:26:79:07:33
Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
Certificate serial: 1017
Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/C3A46B040E4E11ED85AF2C7FC4F9AE02.roa
Signing time: Tue 02 Apr 2024 18:26:19 +0000
ROA not before: Tue 02 Apr 2024 18:26:19 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 58715
IP address blocks: 103.86.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4119 (0x1017)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
Validity
Not Before: Apr 2 18:26:19 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=660c4dcb-405d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:74:08:48:ac:aa:00:b8:a8:38:61:80:dd:
7b:aa:f6:94:3c:3d:8b:f8:71:90:14:c5:b2:a4:de:
03:4e:4e:45:c9:91:43:68:a6:57:27:74:7a:80:a7:
a2:d0:a1:42:49:63:41:17:e7:6a:58:02:4f:5a:77:
0b:4c:de:b2:2e:a3:47:19:13:30:3c:3c:a2:05:a0:
cd:3d:ec:35:8e:42:00:95:11:f0:7e:17:4c:09:37:
cf:e9:07:77:81:e0:dc:73:76:28:ec:fc:10:d8:b5:
6f:dc:2b:e5:bf:7f:db:95:dd:bf:b4:28:70:83:df:
60:67:c9:b9:49:51:5d:be:8e:22:28:0f:61:da:51:
29:06:1a:1d:f4:44:b4:4e:f8:30:73:93:ac:a7:70:
e0:a9:83:1a:32:53:e3:25:26:27:a9:89:2e:64:ee:
d3:72:6f:ea:d0:3d:dd:29:d8:7a:5c:e1:b8:d3:f3:
98:99:42:c7:3b:04:43:f5:10:2b:44:3a:34:44:c5:
94:d1:20:7b:17:b6:82:4e:dc:6b:5f:2a:e0:14:10:
43:29:4e:c1:08:f7:14:7c:59:47:9f:c9:28:d4:a3:
b7:b3:05:ea:10:84:45:c2:d3:e4:73:7d:c3:a2:90:
5f:16:99:d8:fe:ff:bd:25:53:87:15:76:93:28:ec:
c5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BD:DA:7E:10:6C:52:82:AD:62:F7:D3:F6:68:A3:70:26:79:07:33
X509v3 Authority Key Identifier:
keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/C3A46B040E4E11ED85AF2C7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.86.192.0/24
Signature Algorithm: sha256WithRSAEncryption
06:02:be:6e:31:83:ec:47:ad:67:27:0b:1d:0d:35:93:96:13:
80:f4:6c:53:dc:f4:75:32:68:2a:96:da:1b:71:9b:fc:70:13:
10:73:78:ca:54:5a:18:3b:cf:29:87:de:b4:26:e4:e3:a0:f9:
39:9f:38:aa:55:80:dc:61:38:1b:ec:5f:e4:69:7e:d5:2c:21:
cb:81:0b:02:ee:ca:4b:4b:7e:13:55:c8:88:d7:1d:5f:f3:32:
32:3f:09:54:1d:4a:d3:67:b9:2f:a8:0e:b8:52:c0:75:c0:e7:
6d:fd:14:e9:b5:93:8a:2c:2d:de:66:d1:eb:5c:ee:fc:55:7f:
a8:a8:f9:72:f8:22:0a:fe:fb:29:7a:b7:cd:90:c5:44:20:82:
88:a0:3c:fc:f5:b4:66:86:16:55:1b:7e:9c:8c:0f:39:67:3c:
50:29:c8:4e:fa:50:42:94:73:54:4e:2a:08:7f:3f:9b:b5:72:
d8:20:15:17:f4:0b:82:f8:f9:ec:18:f7:6c:bb:a6:00:e4:35:
69:e0:99:60:fa:57:f9:1d:be:83:14:3e:c2:5d:41:45:28:21:
8a:44:fb:cf:39:e2:3c:ec:29:64:33:75:4e:59:fa:47:6a:8d:
c9:bb:79:c4:b9:72:df:4d:26:5a:b8:6c:11:01:b4:f6:1f:9f:
fb:66:70:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:44 2024 by rpki-client on console-fra.rpki-client.org