Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/0DBD0956322611EF9EF43D18C4F9AE02.roa
File: 0DBD0956322611EF9EF43D18C4F9AE02.roa (raw, json)
Hash identifier: ALx0EWkde7ZN8oOjGhdcYWuh8eIVExnrIgIFpl51X28=
Subject key identifier: 16:5C:B2:3A:1E:43:A4:31:5F:7D:69:30:B5:3E:EE:39:BA:A2:CD:9D
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 34E8
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/0DBD0956322611EF9EF43D18C4F9AE02.roa
Signing time: Wed 31 Jul 2024 01:45:57 +0000
ROA not before: Wed 31 Jul 2024 01:45:57 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.68.120.0/24 maxlen: 24
117.121.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Aug 2024 07:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13544 (0x34e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Jul 31 01:45:57 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=66a99755-44ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b9:38:e1:34:da:db:86:3f:13:f7:6b:a1:12:
87:65:ce:78:fa:8b:73:c1:f2:2f:bc:72:cd:2b:57:
c3:70:39:0e:c3:13:26:00:41:ea:99:b7:c1:8a:5d:
bc:50:de:aa:e9:68:80:f4:c3:ca:7e:1c:d5:a0:9d:
59:3c:6f:9f:d6:5e:a8:5c:d2:67:94:52:5d:8c:99:
1b:a2:88:a5:28:e0:17:fe:01:9c:0e:ba:e9:74:d2:
8d:85:8b:f9:db:e8:32:5a:70:f0:6b:68:af:61:d8:
a4:14:50:0e:6d:f5:77:0e:ac:b3:9a:f6:d5:4e:e3:
25:9f:f1:79:fa:40:46:5c:85:53:1d:db:1a:dc:72:
4b:82:9d:b4:52:60:54:02:42:d1:c8:0c:35:75:03:
fb:76:70:43:d5:c2:ae:df:99:02:8d:75:d6:77:32:
0d:79:dd:a8:f2:59:40:47:79:2a:92:37:c8:17:1e:
31:31:d0:72:78:0c:79:6b:55:fe:0f:2a:3f:c6:09:
8c:d3:3b:f4:ef:f1:e1:c6:01:a0:33:e5:0b:6b:6c:
1d:8b:1e:9f:0a:c8:ad:8c:96:29:36:eb:85:3e:ec:
d2:e3:9e:4d:f6:ae:c9:d9:61:a3:2b:b0:29:1f:72:
63:ff:07:65:3c:93:e7:f2:e6:3f:67:cc:f0:d0:cd:
48:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5C:B2:3A:1E:43:A4:31:5F:7D:69:30:B5:3E:EE:39:BA:A2:CD:9D
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/0DBD0956322611EF9EF43D18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.120.0/24
117.121.245.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:c3:c5:cb:f9:a7:92:84:c9:5a:cb:2a:17:41:0c:57:a7:1e:
2f:0a:9c:2e:a8:fa:4c:e0:a5:ee:6a:3b:ef:4f:40:db:9e:62:
93:8b:df:1a:cc:70:16:0b:38:b6:eb:a2:03:12:04:f6:28:b0:
74:3e:f4:43:d5:2e:91:d2:e8:0e:26:00:d3:49:f3:44:9c:a5:
a4:b1:1e:60:00:47:c7:8c:1b:ed:80:83:01:83:3e:2e:a2:d7:
6d:4c:64:8a:f2:62:66:15:e1:f6:62:5e:74:c6:01:41:ee:4f:
08:91:82:d4:8f:84:1b:16:54:69:2c:42:26:aa:5c:27:a5:b7:
97:7d:57:49:82:7a:66:6c:de:9d:b5:37:6c:3e:e9:f9:a9:5b:
53:dd:b8:09:35:b2:ee:f3:35:c0:d2:6a:63:00:85:15:e4:e9:
31:e2:86:5e:ed:90:23:69:cb:6f:90:91:9e:37:a4:1f:db:d0:
6b:0c:b2:63:ee:3c:27:47:47:e8:86:14:7e:15:dd:2d:96:d5:
49:a3:52:25:83:1f:e8:37:36:3f:a5:62:97:9b:2e:8f:0f:4a:
0b:bd:30:5d:f2:93:98:e7:d4:97:89:2a:cb:8b:63:9e:fd:fc:
f8:30:e5:38:07:c5:70:3b:ab:e5:b6:67:00:88:81:46:60:3f:
dc:f8:fd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 10:30:37 2024 by rpki-client on console-ams.rpki-client.org