Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20313531373635.roa
File: 3130332e3233382e3132382e302f32342d3234203d3e20313531373635.roa (raw, json)
Hash identifier: 4ZHMY8PU71aLAM/CqP5xIrzochJ3+fC1ONtngVtlETE=
Subject key identifier: AF:F2:B3:58:BF:1D:9B:69:FB:6E:EA:35:17:F8:DB:82:67:62:8E:2E
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 0A9B248C2928E8B84FB6918323DB75CA1DBCF779
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20313531373635.roa
Signing time: Tue 05 Mar 2024 04:05:41 +0000
ROA not before: Tue 05 Mar 2024 04:00:41 +0000
ROA not after: Tue 04 Mar 2025 04:05:41 +0000
asID: 151765
IP address blocks: 103.238.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 18:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:9b:24:8c:29:28:e8:b8:4f:b6:91:83:23:db:75:ca:1d:bc:f7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Validity
Not Before: Mar 5 04:00:41 2024 GMT
Not After : Mar 4 04:05:41 2025 GMT
Subject: CN=AFF2B358BF1D9B69FB6EEA3517F8DB8267628E2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f9:c0:6b:8a:3c:0b:16:ea:41:28:5a:22:62:
2b:1a:16:1c:dc:26:20:c5:5d:d0:29:86:ff:ab:23:
52:19:b7:6b:4c:54:4d:cf:ac:60:c6:0d:5d:68:e1:
b7:f6:13:d0:c0:62:b9:9d:48:1b:3e:75:57:36:ea:
58:3c:5a:32:c7:7f:33:24:f8:9b:01:2c:67:8f:8c:
6d:a9:98:b3:35:92:78:b7:1d:fa:9a:a8:45:a3:dd:
7c:00:90:18:27:93:f0:4b:f5:04:65:8a:58:76:2f:
99:a7:32:11:6d:61:78:d0:8f:e6:d8:55:bf:44:a6:
00:21:75:0a:34:31:cc:c0:9b:57:a7:50:db:a2:5b:
e0:49:57:7e:ea:cc:fd:10:10:e9:b9:dd:8d:48:35:
01:bd:c6:c7:70:73:4f:c9:a1:96:29:bb:de:b0:d9:
79:1f:b6:a0:9f:7b:a2:19:cc:25:2f:5c:d4:5e:77:
f6:df:93:44:e4:9d:b1:c6:d0:0e:59:54:31:f4:83:
35:7d:ca:a6:4e:eb:4d:96:c5:b3:05:b3:5c:07:b6:
53:23:ac:7d:36:10:74:2c:1b:33:b7:a8:6e:b2:d9:
33:8d:d7:24:04:7f:cf:b4:03:e5:5f:ff:b8:a8:de:
d4:fe:c4:ad:ba:11:95:9f:43:66:73:fc:75:90:79:
07:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F2:B3:58:BF:1D:9B:69:FB:6E:EA:35:17:F8:DB:82:67:62:8E:2E
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20313531373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.128.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:64:5e:21:43:38:68:64:3e:33:3b:dd:f8:a9:21:9e:a2:22:
69:a3:3f:69:82:9a:b7:29:01:8b:6f:72:49:40:b6:b5:79:43:
9b:f7:7f:7b:b1:fd:c1:6c:5e:67:4c:62:6e:57:d7:82:9a:6e:
20:0e:0e:28:8d:7f:21:f4:c1:14:04:3f:03:a3:ae:3e:7f:23:
e3:0b:41:5a:65:6b:4c:d3:da:23:35:2d:b5:59:2c:dc:6f:da:
f4:5b:45:c3:1a:09:a6:49:22:f0:f6:74:b5:01:d4:e6:89:74:
fb:2e:2b:49:ae:37:e2:68:90:71:1d:74:5b:7a:c2:66:a9:c0:
e3:8f:bd:38:32:f1:81:d9:fc:dc:b4:e9:0d:43:83:cc:67:b8:
2a:e3:6a:1b:38:4f:5d:17:58:d0:fb:48:c2:d3:4f:a4:d3:ea:
18:22:d0:c0:d3:ab:20:f5:8d:13:a7:39:e0:9b:63:d5:2f:8b:
b5:26:f0:ca:f5:89:6a:fc:ec:da:88:08:70:37:55:35:f2:6e:
d4:ce:d5:82:03:73:6c:00:93:26:77:81:a2:12:10:96:76:d2:
1f:76:6b:ec:08:d5:bf:eb:14:9d:b7:fd:61:58:a8:89:da:44:
c4:cb:94:a7:ea:a9:b9:72:86:65:76:d5:30:ad:d1:37:b8:98:
40:d1:3e:2d
-----BEGIN CERTIFICATE-----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Generated at Wed Mar 20 20:54:52 2024 by rpki-client on console-ams.rpki-client.org