Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/73FA3E20178F11EFAA571420C4F9AE02.roa
File: 73FA3E20178F11EFAA571420C4F9AE02.roa (raw, json)
Hash identifier: TTFcX99FHqElmwiUCGZLnhpBAyIbc/UeIgK5UF1ee8w=
Subject key identifier: 21:90:A7:59:0F:A9:06:06:5D:FD:14:63:27:81:3A:4A:EB:E9:4B:0F
Certificate issuer: /CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
Certificate serial: 052C
Authority key identifier: 4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/73FA3E20178F11EFAA571420C4F9AE02.roa
Signing time: Tue 21 May 2024 16:30:36 +0000
ROA not before: Tue 21 May 2024 16:30:36 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 58895
IP address blocks: 103.145.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jul 2024 11:59:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1324 (0x52c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
Validity
Not Before: May 21 16:30:36 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=664ccc2c-b1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:41:ff:bb:9c:f6:8e:9c:88:50:74:9d:b2:
c4:11:d8:31:d2:59:16:76:cf:7a:a3:2e:0b:3c:c8:
f5:22:38:58:19:2a:07:ef:d4:27:4b:13:02:bf:09:
ce:db:70:41:c9:f4:d4:02:d8:bb:8f:23:88:3b:e1:
fb:0d:4e:82:18:02:03:ba:e4:a3:5a:51:68:2e:5f:
b7:0e:dc:28:c0:70:17:73:2d:28:df:07:84:17:59:
19:44:3a:d0:31:a0:6a:1c:5c:cb:c7:25:da:9e:92:
f6:fd:7a:20:a4:d5:d4:21:7d:1a:16:82:e4:a2:04:
3b:86:2b:ab:89:47:3c:66:52:ec:ce:c7:51:53:af:
1b:c7:57:a1:58:3f:52:3d:c2:ff:04:b5:56:bd:a6:
a9:0d:e2:eb:c5:33:b4:7a:0c:66:fc:d3:7f:57:c8:
ed:5d:f0:f8:92:77:e0:26:8a:db:e1:b3:da:0d:ee:
ec:72:2f:48:13:57:b7:03:14:78:1a:c5:49:c2:53:
e4:e1:1b:14:7d:ca:9f:6f:58:55:70:3f:bc:3b:ed:
fd:45:db:31:ab:f8:46:2e:57:1e:9d:b7:34:de:a1:
c6:1a:43:f2:f8:fc:02:dd:ff:88:76:ea:92:17:92:
9e:82:6c:b0:ac:4d:bd:63:15:59:0b:73:bb:f1:a9:
ee:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:90:A7:59:0F:A9:06:06:5D:FD:14:63:27:81:3A:4A:EB:E9:4B:0F
X509v3 Authority Key Identifier:
keyid:4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/73FA3E20178F11EFAA571420C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.184.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:1f:b0:68:2d:c0:8c:de:b5:cd:84:5a:99:d8:68:b9:5e:58:
12:b2:b1:f3:98:b4:9c:60:29:f3:f8:51:52:07:8a:a7:1d:aa:
1c:5d:e6:0c:50:7e:9b:5f:32:63:e0:e1:7a:e6:b2:9f:d5:1d:
23:0f:20:c8:30:cd:98:5b:5a:0c:e7:79:d8:3d:90:6b:a1:b7:
f5:d3:7b:d5:d3:cd:57:ce:45:3c:f7:1e:f7:76:a5:1a:be:25:
1e:51:9a:a0:43:6d:70:02:fb:e3:fb:a0:e7:e1:be:b7:d1:e3:
88:25:a4:e2:a1:dc:07:0d:de:87:d3:7b:47:a2:ee:e0:b2:4f:
22:2f:cb:f3:36:2a:ad:bd:fd:53:b9:cb:56:4e:99:ba:06:57:
d4:17:68:2a:0c:1b:86:ac:86:a1:da:c0:75:7d:54:5c:d9:5f:
a9:c5:1d:8a:e3:c4:53:af:d8:80:d0:4e:50:80:11:b9:8e:64:
e7:52:1b:c3:08:28:b0:fc:cf:35:28:c0:d2:15:9c:1f:3d:ce:
c0:e9:40:fc:4c:56:c7:06:df:16:48:bf:a6:e4:5d:4a:be:0a:
2e:93:a2:80:7e:f3:ee:33:ba:fb:4d:f3:8d:1e:4c:29:d0:be:
4d:19:d7:7f:45:f5:d2:1f:fa:ce:33:a6:91:a5:f3:1b:b9:07:
58:c1:47:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 13:32:04 2024 by rpki-client on console-fra.rpki-client.org