Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/0AD2A8DA981B11EFBA039158C4F9AE02.roa
File: 0AD2A8DA981B11EFBA039158C4F9AE02.roa (raw, json)
Hash identifier: kBVoP3KDbToKXCoGZKAl1Uz+2B8eGx/V58qi4kfPN2Y=
Subject key identifier: D3:95:81:39:24:E1:1C:AD:D8:D9:70:B6:A4:94:28:CD:CD:C2:BB:CE
Certificate issuer: /CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411
Certificate serial: 06
Authority key identifier: 67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/0AD2A8DA981B11EFBA039158C4F9AE02.roa
Signing time: Fri 01 Nov 2024 07:56:01 +0000
ROA not before: Fri 01 Nov 2024 07:56:01 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 133858
IP address blocks: 103.40.164.0/24 maxlen: 24
103.40.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 08:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411
Validity
Not Before: Nov 1 07:56:01 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67248991-7453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:e7:55:49:90:ae:df:6b:8e:0f:0b:ad:9f:
86:39:a8:5d:b0:6e:eb:12:84:b2:c9:2c:37:b7:96:
3d:db:f3:ab:ed:18:75:7c:92:33:b1:48:5a:d8:fe:
75:1d:1e:e2:17:31:42:02:63:a1:b3:7e:73:da:1f:
5c:e2:dc:06:2b:3c:c3:5e:e6:fc:80:e4:47:fe:dc:
ba:f8:9b:6b:23:2c:5f:92:e4:86:d7:82:a0:f1:4d:
47:64:b5:a9:27:55:d6:9e:9c:9b:b6:4e:c2:b4:d0:
20:6a:72:05:0e:77:2b:00:1f:d5:98:45:ff:95:1d:
e3:9f:cf:bd:d2:5a:59:34:46:96:5f:a6:9c:14:c1:
e7:75:0b:92:e4:c2:a2:72:4d:c5:37:c2:00:cd:99:
0f:b0:a5:00:6c:eb:a2:30:4e:3d:c1:45:db:4d:79:
e1:33:86:db:e5:45:2e:8b:49:b5:b6:23:3e:27:d5:
46:c6:c9:0e:95:1b:f9:76:37:f6:ca:53:35:f6:fb:
06:73:31:2d:3a:f9:a5:6c:89:12:45:e2:4c:e8:c5:
31:8c:d1:2a:cb:f2:32:77:b1:4c:a9:36:b3:f0:99:
dd:3a:a9:a6:cc:45:bd:73:43:a6:0f:e0:44:03:3f:
97:a5:67:f6:92:fc:9c:40:fd:8b:1e:c6:8d:2f:64:
c7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:95:81:39:24:E1:1C:AD:D8:D9:70:B6:A4:94:28:CD:CD:C2:BB:CE
X509v3 Authority Key Identifier:
keyid:67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/0AD2A8DA981B11EFBA039158C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.40.164.0/23
Signature Algorithm: sha256WithRSAEncryption
11:37:0d:87:12:24:9a:b2:39:02:b3:73:99:73:0d:4b:98:80:
b2:91:a6:44:29:77:5e:f9:98:6b:1e:00:ad:9f:22:1d:60:55:
66:4e:1f:59:10:2a:36:15:0a:a0:93:6b:77:71:d1:df:c7:ca:
6c:43:ea:3b:59:3a:20:ad:c2:ee:48:03:19:b0:33:52:e9:11:
57:1e:12:3c:11:b4:f6:fb:8b:d7:32:6c:e4:a1:e5:22:a2:1e:
5a:ac:8c:ef:d8:be:19:1e:98:f4:60:6b:72:d1:23:b3:4e:7d:
8c:62:58:fe:8d:54:20:1c:fd:8b:58:38:3c:87:66:31:24:2d:
c3:7c:7e:2e:c8:a1:49:8c:12:30:98:3d:6c:98:2a:7c:16:af:
c7:a0:c6:c9:1e:4f:8b:28:a5:fd:d8:be:4d:e9:87:0d:49:5c:
00:d1:ee:f0:68:86:b6:5e:c5:e1:70:40:a4:fb:7d:4a:21:7e:
e5:24:41:a4:ea:57:12:cc:7b:0c:38:ea:fc:fe:2b:27:08:c5:
cd:33:bd:a2:30:ee:73:81:e3:59:59:90:d1:37:79:24:48:42:
78:a0:f8:c3:0d:c2:f5:dc:75:e1:86:a2:1d:c8:6d:c5:5a:d5:
1b:ad:64:88:73:f9:a5:f9:be:02:c1:ee:1b:df:95:48:5a:24:
4e:e4:43:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 12:18:39 2024 by rpki-client on console.sobornost.net