Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/11C3C120568611EDAB9E6D87C4F9AE02.roa
File: 11C3C120568611EDAB9E6D87C4F9AE02.roa (raw, json)
Hash identifier: Q9OOmo0gXTqcJDZ8T8b+m/b9+zILC7a+41HOz0vbtVg=
Subject key identifier: A0:1F:DA:64:EA:06:0C:3B:15:98:82:52:E8:E2:CB:E4:DE:F5:CC:52
Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial: 2785
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/11C3C120568611EDAB9E6D87C4F9AE02.roa
Signing time: Fri 14 Jun 2024 05:41:56 +0000
ROA not before: Fri 14 Jun 2024 05:41:56 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 141681
IP address blocks: 103.254.120.0/24 maxlen: 24
103.254.121.0/24 maxlen: 24
103.254.122.0/24 maxlen: 24
103.254.123.0/24 maxlen: 24
2401:ae0::/32 maxlen: 32
2401:ae0::/48 maxlen: 48
2401:ae0:1::/48 maxlen: 48
2401:ae0:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 22 Oct 2024 13:47:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10117 (0x2785)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Validity
Not Before: Jun 14 05:41:56 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=666bd824-b91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:77:5d:29:f4:d6:b8:7b:a4:2a:e1:d2:38:
ab:8f:4c:61:2b:e1:f7:bf:48:84:7a:d5:43:3c:9c:
8d:10:74:a4:c8:c4:46:25:76:6b:bb:53:ca:98:76:
65:8e:01:17:46:ca:a5:7d:79:b7:6d:83:c0:ee:9b:
53:c0:05:91:1f:c0:d1:d9:46:e5:da:e5:da:c0:f2:
ef:ab:72:98:b8:f1:ab:d3:94:65:83:6d:f8:a0:2a:
9d:39:1e:3a:c8:0f:4d:fa:4a:96:0b:03:8f:b1:61:
28:c0:69:59:82:80:61:6c:17:28:76:4f:c6:d1:f6:
70:29:a1:52:48:e1:28:1c:d1:d5:a5:7b:f0:7d:ff:
36:95:92:53:26:5a:fd:b9:c9:44:75:50:b6:cb:18:
bf:b3:26:42:0f:13:ed:99:f4:e4:79:2f:ef:a9:fc:
ab:df:90:ed:e3:75:b3:79:89:46:13:ee:0c:14:13:
3e:8d:4a:f4:c8:be:1c:3b:89:33:38:30:85:92:ea:
a8:8f:23:8a:15:3a:17:55:6a:bf:f8:e2:ec:75:bb:
f6:44:fa:a2:32:c4:07:e2:74:83:43:37:c4:26:48:
6b:13:42:b1:79:5a:07:72:5a:81:a0:91:a4:9b:54:
0c:5b:5e:d4:48:a8:ac:ba:dc:4c:79:f4:65:29:4b:
67:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1F:DA:64:EA:06:0C:3B:15:98:82:52:E8:E2:CB:E4:DE:F5:CC:52
X509v3 Authority Key Identifier:
keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/11C3C120568611EDAB9E6D87C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.254.120.0/22
IPv6:
2401:ae0::/32
Signature Algorithm: sha256WithRSAEncryption
37:ad:dc:67:07:c7:ba:b1:5c:2b:1a:a8:be:0f:1c:64:bc:74:
f3:ad:fd:92:eb:5b:85:44:cb:86:b2:31:bb:4d:7d:f9:f0:dc:
a6:8d:ad:72:09:14:bc:e5:72:98:fc:79:b2:bf:b2:e5:75:1e:
dd:c8:ac:eb:14:65:8c:ff:fb:03:c1:43:93:90:f3:85:96:da:
ea:81:ae:de:99:f4:ed:c5:0c:2c:2a:a5:e5:4a:e4:37:c2:b4:
c4:9f:51:52:43:82:70:70:36:c5:4d:93:88:4b:6d:c8:08:e5:
be:df:eb:16:b0:61:35:8d:e9:86:c4:ab:36:40:5d:15:a9:5b:
8e:01:d7:b2:37:60:67:b5:1a:fd:fe:c3:d7:ae:b1:fb:5f:35:
8f:34:f1:8f:7b:69:19:1e:b4:31:92:c8:44:c4:54:94:7d:d7:
d8:8d:e5:de:3c:42:7a:41:78:76:ec:c6:ef:93:09:ed:71:46:
f4:58:97:c0:3f:25:80:48:a2:dd:ec:14:12:7f:d2:5f:58:d8:
c3:f0:be:c9:59:bb:a4:d2:aa:2a:d2:26:6c:6b:a8:98:ed:55:
7a:69:c9:ba:18:91:68:c8:08:3e:4a:34:40:02:d2:e3:f3:4a:
9f:a0:e0:94:98:2d:4e:3e:3a:a0:97:69:3f:64:eb:55:59:42:
ae:1b:f7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 16:12:48 2024 by rpki-client on console-fra.rpki-client.org