Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232342e302f32342d3234203d3e20323039313738.roa
File: 3130332e3137332e3232342e302f32342d3234203d3e20323039313738.roa (raw, json)
Hash identifier: HYV+9mBJXc+1eHkc8L0sCnaAab7i78m55dA+tr8NdFA=
Subject key identifier: D7:A5:B0:1C:66:66:D6:9E:76:E0:8B:7F:D5:8A:26:E5:C6:C6:06:1F
Certificate issuer: /CN=A91E54810000/serialNumber=D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940
Certificate serial: 16654A033F100274C3D7E23C84A25D231BC22556
Authority key identifier: D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232342e302f32342d3234203d3e20323039313738.roa
Signing time: Mon 04 Sep 2023 06:15:57 +0000
ROA not before: Mon 04 Sep 2023 06:10:57 +0000
ROA not after: Mon 02 Sep 2024 06:15:57 +0000
asID: 209178
IP address blocks: 103.173.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Nov 2023 12:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:65:4a:03:3f:10:02:74:c3:d7:e2:3c:84:a2:5d:23:1b:c2:25:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E54810000/serialNumber=D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940
Validity
Not Before: Sep 4 06:10:57 2023 GMT
Not After : Sep 2 06:15:57 2024 GMT
Subject: CN=D7A5B01C6666D69E76E08B7FD58A26E5C6C6061F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:1a:d7:1a:18:7a:fe:97:e4:c4:d3:51:40:
a7:80:32:27:88:b0:d7:e0:1c:cf:fb:ae:a2:b9:8f:
8a:bf:e9:26:53:64:2d:93:15:01:d1:c0:08:2e:85:
0e:12:cb:44:3c:71:99:4f:9d:9b:b8:3a:c1:b5:fc:
91:f0:56:b9:23:6c:cd:20:55:c6:ba:1f:47:93:1d:
08:b6:2a:2f:da:cb:5d:3f:a8:8f:9d:7e:9c:f2:a5:
c5:d9:dc:73:40:98:e2:11:8a:b0:55:6d:10:03:ac:
c4:44:b5:b5:29:db:34:97:d2:f1:59:13:8b:2a:4f:
11:2c:66:01:3e:38:dd:8b:c4:d9:21:f1:98:1c:9c:
6d:bb:13:84:5b:15:59:b8:0c:38:8a:27:f3:1d:0b:
16:c9:95:26:6f:a5:e6:35:4a:01:ae:66:2d:41:d0:
98:ea:c4:3b:f5:12:fa:30:55:a1:4f:de:3c:03:04:
70:90:3b:4d:d0:00:57:27:ae:0a:35:ae:c6:27:29:
19:0b:c0:69:bc:18:0d:40:d9:2c:f1:f7:c3:13:a3:
02:a1:43:0e:30:4d:05:01:45:16:c2:a5:71:82:5f:
14:f3:ea:0e:5e:3c:f1:46:7f:6f:5d:4c:0e:8d:93:
82:ea:29:73:78:f4:16:ce:2b:b7:eb:09:42:54:6a:
7e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A5:B0:1C:66:66:D6:9E:76:E0:8B:7F:D5:8A:26:E5:C6:C6:06:1F
X509v3 Authority Key Identifier:
keyid:D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232342e302f32342d3234203d3e20323039313738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.173.224.0/24
Signature Algorithm: sha256WithRSAEncryption
74:14:a0:ba:ca:0b:b9:ce:0c:14:5b:39:86:47:ec:49:a8:5f:
bb:a0:c3:ea:e7:95:c4:50:8d:66:09:9a:82:9b:78:18:5c:79:
32:c8:b4:51:d6:d5:32:3f:8e:43:60:1c:cf:cd:40:46:e1:56:
ca:54:f0:47:55:8e:e7:41:64:0a:fd:b6:2f:fc:3c:09:8a:2a:
cb:d0:b6:9c:94:0c:f3:e8:f1:ff:32:a6:2f:6e:ae:01:5c:cd:
0e:57:ba:76:bc:f8:89:91:87:d3:a9:8b:13:f0:77:c1:8a:92:
61:24:4d:25:57:06:7a:99:fd:97:b9:c1:96:9f:ef:c5:32:69:
17:6a:35:40:d2:90:57:0e:ad:84:65:79:b3:d0:35:71:ee:7d:
36:eb:01:3c:f0:c5:2e:7f:2c:79:ed:91:03:68:39:f8:e5:7a:
de:2c:b4:e9:20:fd:f0:1c:d3:69:4b:74:95:5f:4e:d2:7a:d1:
1a:2b:18:23:75:a9:55:fe:e2:83:15:b9:47:b8:32:a1:9c:a8:
c6:30:98:ea:00:9d:c5:20:72:fc:03:bb:0c:21:0f:95:37:56:
c4:21:8f:27:be:7a:70:84:a6:dd:4d:94:f3:3c:4a:74:85:01:
de:45:f3:a3:8b:dd:c8:ec:57:83:18:10:1a:69:89:d7:ef:9f:
36:4a:40:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:51 2024 by rpki-client on console-ams.rpki-client.org