Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/5BACFA148BE411EFA25B6870C4F9AE02.roa
File: 5BACFA148BE411EFA25B6870C4F9AE02.roa (raw, json)
Hash identifier: kh1T2wqBGKRbuOt7Hvl36jfuEXSErSFrBQ22Ecncdko=
Subject key identifier: 71:08:2C:3E:1F:FC:87:62:22:11:8B:96:03:D1:11:74:05:45:C0:3E
Certificate issuer: /CN=A91F2364/serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2
Certificate serial: 0B
Authority key identifier: 47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/5BACFA148BE411EFA25B6870C4F9AE02.roa
Signing time: Wed 16 Oct 2024 17:30:38 +0000
ROA not before: Wed 16 Oct 2024 17:30:38 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 932
IP address blocks: 103.224.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 10:38:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2364/serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2
Validity
Not Before: Oct 16 17:30:38 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=670ff83e-2b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d8:7b:3c:95:7a:1f:fe:5d:15:80:90:6e:b8:
7f:75:11:02:de:41:6b:5c:7b:ad:6a:5d:7f:cb:98:
99:a7:69:ff:ca:d3:f3:c1:4b:51:90:de:dc:9a:6b:
5b:f6:c7:91:c1:34:87:21:e5:12:6b:9b:39:52:b8:
ad:da:1f:07:cb:ac:ca:77:03:e3:28:b0:6f:dd:d2:
03:e0:9e:a7:4e:16:89:d6:35:ca:11:86:a7:04:7f:
70:bd:18:04:8a:89:c0:7b:14:fa:f5:2a:3e:36:67:
b7:c5:90:bc:4c:83:f0:17:c1:86:4c:cb:7e:14:6e:
c3:dc:21:33:2c:90:b7:6c:89:bc:8a:5d:61:ce:80:
59:21:5e:3d:ba:72:e3:0a:fc:6f:52:7f:9b:2b:c8:
a1:56:15:0a:c3:bf:39:e5:83:dc:2f:19:06:15:44:
f3:b4:fc:23:a6:69:8a:b1:16:23:76:6b:3c:e7:f7:
dd:19:a3:b3:17:a3:50:f9:55:2a:f6:62:73:5c:4a:
44:fd:64:97:eb:a4:8c:68:69:89:54:a9:2d:47:5b:
42:d4:0b:36:b9:df:43:1d:3c:f6:2f:18:9e:8e:43:
b4:b8:4e:31:8f:b6:78:01:12:d7:59:d3:be:d7:29:
38:ac:3f:82:88:5f:9a:ff:4b:be:67:c2:ac:d7:be:
7d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:08:2C:3E:1F:FC:87:62:22:11:8B:96:03:D1:11:74:05:45:C0:3E
X509v3 Authority Key Identifier:
keyid:47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/5BACFA148BE411EFA25B6870C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.80.0/24
Signature Algorithm: sha256WithRSAEncryption
76:07:72:17:24:29:68:c1:63:62:eb:d5:b9:d8:d3:f6:0d:39:
3c:e3:5a:ce:1e:9f:7c:f8:69:ae:56:3a:89:f9:e6:88:c5:b5:
7a:71:06:4b:5f:37:e8:cf:3f:4e:f6:c7:24:85:0c:f3:e5:b6:
7d:62:0d:e7:09:01:3b:e5:cc:ed:f7:bd:dc:27:8c:d4:71:05:
46:3c:dc:4c:0b:8a:77:0c:2a:1d:a1:cb:1c:1c:5d:8b:89:d6:
84:13:b2:72:82:cd:66:75:6e:bc:65:27:e7:f2:f0:af:c8:a6:
6d:5e:00:c0:49:59:8b:77:b7:50:7b:32:8f:a6:0e:ff:41:41:
19:7f:e6:5e:66:6d:17:ad:fc:24:72:f5:dd:78:88:45:1b:52:
49:f3:7a:f3:f8:0f:d2:79:b7:ee:c1:4b:ce:73:40:de:81:d9:
bd:e2:85:9b:9e:b1:51:ec:ad:a3:1f:51:05:61:e3:d9:f9:61:
0d:47:71:48:01:87:fa:00:48:82:1e:ab:e2:08:28:c4:ba:ff:
2c:f9:22:2d:bc:04:81:a4:86:4b:67:88:ee:4d:8e:4e:79:b7:
cc:16:61:9e:b0:62:07:2a:fd:d2:97:73:1b:9c:7f:3e:33:90:
d0:7a:05:f1:83:c1:38:ab:f4:9b:1a:0e:fb:96:b3:da:e8:4d:
31:bb:67:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 12:50:57 2024 by rpki-client on console-fra.rpki-client.org