Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/29AFD0B0ECE111EEA7B9366CC4F9AE02.roa
File: 29AFD0B0ECE111EEA7B9366CC4F9AE02.roa (raw, json)
Hash identifier: KfP5yrJ4uCblrRo7Ecg14LYWF5D1gmz4SQvyOIFg5VY=
Subject key identifier: C5:F5:CA:FB:36:6B:54:FB:4A:AE:68:9F:57:9B:7F:83:8D:0B:78:88
Certificate issuer: /CN=A91ED073/serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
Certificate serial: 0103
Authority key identifier: 08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/29AFD0B0ECE111EEA7B9366CC4F9AE02.roa
Signing time: Thu 28 Mar 2024 08:57:11 +0000
ROA not before: Thu 28 Mar 2024 08:57:11 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 150417
IP address blocks: 103.37.184.0/24 maxlen: 24
103.37.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Mar 2024 18:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259 (0x103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED073/serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
Validity
Not Before: Mar 28 08:57:11 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=660530e6-7307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:43:e2:7b:73:af:57:67:d6:ec:a2:50:94:d4:
e5:88:6c:40:cc:9b:4a:fe:25:46:9e:8f:ce:91:65:
6a:5d:13:53:05:8e:a9:71:21:61:50:c6:d1:4e:0f:
da:85:79:26:0c:4b:d9:ba:77:68:b1:4c:29:04:94:
07:c5:f1:f1:3d:c4:70:a4:07:c0:2a:67:14:0f:29:
cf:45:18:9a:34:c3:ac:59:51:36:9c:2d:6a:d4:97:
f2:e5:fb:7a:5a:1e:e7:48:f7:98:0b:4e:80:17:41:
05:e4:81:bb:86:e5:76:9c:09:1d:f4:bc:d8:bc:3b:
bb:8c:45:4e:e1:5f:a5:9f:ae:06:a1:77:c8:82:ec:
ef:b3:b6:c1:6a:44:57:5d:0c:64:67:4c:01:3d:a8:
10:11:15:1b:ab:6b:4e:8d:38:d9:4b:a6:d5:57:2e:
1a:9a:f2:e3:bd:9f:8b:c7:97:f2:b7:e6:af:bc:fa:
42:92:6b:7e:12:d3:c2:0e:a8:3d:5d:60:1f:c1:86:
17:e6:76:75:f8:07:25:ec:b3:e4:a0:a5:83:32:71:
3f:71:00:34:86:f6:b2:ca:1e:87:1a:2e:82:d5:fe:
95:99:86:a7:f8:aa:77:8e:b2:8f:05:84:e6:14:47:
73:2e:80:ba:c7:2b:1c:88:bd:0a:3c:09:5c:d6:69:
3c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F5:CA:FB:36:6B:54:FB:4A:AE:68:9F:57:9B:7F:83:8D:0B:78:88
X509v3 Authority Key Identifier:
keyid:08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/29AFD0B0ECE111EEA7B9366CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.37.184.0/23
Signature Algorithm: sha256WithRSAEncryption
61:5f:69:e6:13:a9:a6:0e:75:83:33:42:7e:fc:08:eb:d4:56:
81:32:c6:ef:aa:e4:ab:01:7e:61:02:da:f8:9d:fd:ac:97:de:
de:b6:bc:28:52:68:92:15:6d:8a:10:76:8e:a7:b5:42:79:ea:
21:7c:89:cf:6b:d6:c4:aa:6f:d8:32:8f:d6:c0:78:0b:41:7f:
d0:9f:73:6d:86:1d:90:cd:35:8b:33:86:e6:18:69:01:9d:7f:
d0:4d:de:29:db:1e:54:13:68:b0:50:bf:8c:ad:e0:f5:b0:c6:
09:6a:21:63:fc:18:81:f3:63:57:1f:7a:fb:37:09:fe:8b:19:
f8:13:ce:6d:4f:c1:c8:fe:df:f0:bf:21:cd:f6:da:fb:92:7b:
e8:cb:fe:c2:64:61:0a:7c:1d:47:55:8f:f6:92:89:da:8e:fa:
52:76:b6:8f:eb:8c:11:2c:90:61:dd:d4:b0:b2:7e:85:0c:09:
0c:ae:b0:fa:64:4c:1e:12:b0:15:3c:80:43:74:8b:0e:db:5e:
f1:06:83:56:d7:70:e4:58:97:a5:87:99:cf:78:65:a0:0f:1e:
da:28:4f:f0:c1:04:67:60:d0:9a:ad:de:4d:c2:e0:22:f2:79:
dd:17:81:1b:6e:99:d9:ab:b2:9f:90:82:11:f4:5c:b0:73:41:
f9:ee:1e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 30 19:26:47 2024 by rpki-client on console-fra.rpki-client.org