Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91857810000/0/3130332e3134312e36392e302f32342d3234203d3e20383334.roa
File: 3130332e3134312e36392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: mZnQ3CklV8A38ExuC2+Sew+ZV1NaW8RShIpQfkVbefk=
Subject key identifier: BA:0E:48:99:8C:D2:BB:53:EA:52:2D:89:26:7C:96:13:BF:33:24:75
Certificate issuer: /CN=A91857810000/serialNumber=BECEB6F76A19B81208F3D3402617F51AE69E8C24
Certificate serial: 7251F9B86E7B966B3C3EF5287EC724A196E3F3EE
Authority key identifier: BE:CE:B6:F7:6A:19:B8:12:08:F3:D3:40:26:17:F5:1A:E6:9E:8C:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vs6292oZuBII89NAJhf1GuaejCQ.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91857810000/0/3130332e3134312e36392e302f32342d3234203d3e20383334.roa
Signing time: Wed 24 Jul 2024 09:31:11 +0000
ROA not before: Wed 24 Jul 2024 09:26:11 +0000
ROA not after: Wed 23 Jul 2025 09:31:11 +0000
asID: 834
IP address blocks: 103.141.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jul 2024 11:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:51:f9:b8:6e:7b:96:6b:3c:3e:f5:28:7e:c7:24:a1:96:e3:f3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91857810000/serialNumber=BECEB6F76A19B81208F3D3402617F51AE69E8C24
Validity
Not Before: Jul 24 09:26:11 2024 GMT
Not After : Jul 23 09:31:11 2025 GMT
Subject: CN=BA0E48998CD2BB53EA522D89267C9613BF332475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:49:74:86:7a:15:bb:97:8f:c8:4f:c8:a3:
16:7c:a0:9d:46:d0:60:e0:35:92:bb:6e:b9:61:a2:
09:f4:24:1b:e3:9c:70:53:3a:52:77:b0:f9:19:1a:
da:c5:e0:82:c1:28:0a:7e:e4:41:ea:07:0a:3c:c9:
e6:a9:3d:d6:e6:e6:56:bd:eb:f9:dd:dc:d0:bf:ef:
1e:89:2c:ec:5c:76:e4:3d:c9:b2:9f:71:5f:c2:62:
ca:d1:54:57:e0:7c:d4:fb:59:3d:34:04:b1:4a:c1:
2e:de:ed:79:ff:e8:b7:48:11:d9:bd:6a:d0:f5:0f:
c7:ab:c3:ec:ae:c9:33:22:2b:ae:99:fb:f1:07:2c:
80:c3:60:e2:4f:d0:9b:10:a4:4e:fa:da:66:b5:7a:
3f:68:a7:b4:a8:61:2b:b3:e1:22:25:c7:92:5b:26:
c3:27:24:77:60:57:38:92:b6:50:ac:4f:0f:9f:4b:
38:55:7f:b5:fd:4e:3a:12:57:24:58:28:ec:e6:f0:
da:4e:95:55:9b:db:d6:c2:aa:f8:a3:52:95:39:ea:
6e:57:fd:c9:b8:29:c7:6a:cb:6c:6c:e6:90:63:15:
c1:a1:5c:c3:e1:88:22:15:2c:a7:bd:81:8b:27:95:
eb:b5:2f:63:d8:c6:a6:8c:c5:a2:6d:42:fb:ba:c8:
24:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0E:48:99:8C:D2:BB:53:EA:52:2D:89:26:7C:96:13:BF:33:24:75
X509v3 Authority Key Identifier:
keyid:BE:CE:B6:F7:6A:19:B8:12:08:F3:D3:40:26:17:F5:1A:E6:9E:8C:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vs6292oZuBII89NAJhf1GuaejCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91857810000/0/3130332e3134312e36392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.141.69.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:dd:db:1d:79:3c:09:19:01:24:42:d4:96:42:ae:ac:8f:ca:
e8:51:77:a7:a0:64:80:a7:d8:dd:61:7f:27:6c:0b:ce:b7:0c:
06:ee:71:6b:61:45:77:c2:45:a6:52:e0:d9:7e:08:f6:fd:42:
af:ad:1d:c0:0d:ad:85:3b:01:ef:f5:f3:12:c5:76:73:a2:fa:
53:7e:b7:7d:32:e5:70:bd:bc:d7:cd:92:9a:dc:98:b4:42:cd:
3a:ce:46:97:77:18:60:8a:3f:43:80:79:d0:66:54:97:5b:ee:
b4:8c:70:fd:f3:bf:f4:3f:ae:f9:6d:e2:7c:a8:cb:23:fb:cb:
00:e4:88:51:d0:2f:52:1b:29:e6:ff:ab:40:5a:fb:81:83:08:
3c:95:20:c2:b0:ad:b7:33:6c:de:7d:8f:c9:d9:8d:8d:e4:80:
8a:80:7f:f4:6a:2e:95:d7:93:a1:d2:ee:8d:70:0c:65:c2:02:
83:a0:d2:23:13:ce:4a:e4:ce:f6:af:69:10:36:a4:9a:38:1f:
d5:56:df:0d:98:fb:64:a9:57:ee:73:70:50:47:cb:64:af:e2:
d5:19:9a:7a:84:7c:09:43:e0:e5:a2:fe:72:6e:fa:a3:0a:36:
9c:ff:9a:4b:2f:73:97:5b:fb:36:56:af:da:93:cc:dd:bc:86:
58:32:ee:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 15:53:33 2024 by rpki-client on console-ams.rpki-client.org