Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/971DDCE0B23511EF8ED1973DC4F9AE02.roa
File: 971DDCE0B23511EF8ED1973DC4F9AE02.roa (raw, json)
Hash identifier: uCXgh4PfuvvlsDKMJ9xfxlDIdos6QmLv3JvjFD7BY3o=
Subject key identifier: 6F:4E:3D:E7:E5:39:7E:7D:34:42:8B:41:8D:D2:41:6C:D5:82:3F:49
Certificate issuer: /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial: 02A3
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/971DDCE0B23511EF8ED1973DC4F9AE02.roa
Signing time: Thu 12 Dec 2024 22:44:32 +0000
ROA not before: Thu 12 Dec 2024 22:44:32 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 208171
IP address blocks: 103.189.191.0/24 maxlen: 24
2001:df0:d840::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 12 Dec 2024 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675 (0x2a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Validity
Not Before: Dec 12 22:44:32 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=675b674f-16bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ad:32:42:9c:49:7f:ad:ce:09:4d:86:d7:18:
67:67:6c:0d:f3:5a:ca:cf:87:d0:05:f8:67:16:34:
38:65:d3:cf:86:8a:03:4b:b0:75:ba:72:f5:64:cf:
f4:a6:d1:74:01:05:8b:0e:a5:f0:2b:18:6a:13:9b:
f9:bc:79:c2:67:77:81:72:a2:e5:08:7a:3c:cc:25:
99:d3:18:41:83:d9:9e:7d:67:6d:ae:67:af:94:75:
50:42:54:87:a9:b5:df:d5:5f:76:29:78:5e:40:d0:
5e:d5:6e:d5:17:b0:9e:36:9f:c3:83:aa:aa:90:c7:
49:8d:f5:a5:28:6d:bb:d6:3c:1d:36:ca:33:be:9b:
99:6d:66:b1:ad:89:0b:fa:09:56:d2:25:f4:43:1a:
bc:83:f8:76:04:b7:7b:c7:e2:91:a5:f4:3b:c1:1e:
38:7f:a0:a2:c0:7b:75:b7:d6:7c:00:31:41:4f:56:
30:2d:55:1c:b3:64:49:65:5c:02:a3:30:6a:9d:ce:
d5:b7:40:4e:03:44:5f:85:08:65:fa:fc:4b:b2:30:
de:da:da:8e:c8:bd:19:db:07:80:93:bd:94:b2:eb:
63:63:23:63:6b:1f:8a:e8:4e:0f:5b:86:11:ce:1f:
76:92:37:a1:91:13:fe:e3:80:b5:40:31:7d:77:0c:
9a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4E:3D:E7:E5:39:7E:7D:34:42:8B:41:8D:D2:41:6C:D5:82:3F:49
X509v3 Authority Key Identifier:
keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/971DDCE0B23511EF8ED1973DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.191.0/24
IPv6:
2001:df0:d840::/48
Signature Algorithm: sha256WithRSAEncryption
27:a7:04:87:45:07:07:60:d9:16:ed:b4:60:6b:f5:47:52:a9:
4e:e1:36:40:41:d6:9d:e9:a5:2d:3f:6d:d6:d6:7d:72:61:b0:
fb:a9:13:cc:97:ea:24:0d:d6:6f:47:06:26:28:a8:2a:50:c7:
42:39:b6:43:b7:71:40:e2:de:da:a1:7e:ce:3d:28:8a:45:29:
c9:3c:18:6e:de:2e:d5:4f:5c:5b:a9:97:9e:70:d0:12:41:a3:
64:e8:0d:6f:ae:e1:16:d0:d7:85:61:5c:74:3d:b1:34:5c:c3:
69:c9:5f:a9:1e:cd:53:8b:4e:6c:ff:b1:8d:98:07:e3:d6:eb:
65:51:a2:2e:ce:dd:a9:0e:89:13:31:c5:ec:ad:a4:6c:7e:8b:
c8:6c:a4:26:9a:fa:e1:78:5c:4b:3d:df:34:f9:42:66:ce:f1:
69:53:5a:3a:8b:88:b5:5f:fa:4c:3a:f7:74:93:fc:c5:95:63:
5a:cd:85:79:6a:7c:c0:3e:d2:17:39:28:fc:62:94:6b:8a:ea:
14:c9:d0:c4:64:de:5c:89:f5:f4:6a:df:c9:6e:5a:79:b2:c7:
7f:e4:88:e7:5f:36:b5:a5:21:34:da:d8:f2:d0:71:21:bd:89:
36:81:f2:05:79:2f:cd:0b:8c:7e:ff:2a:7d:d6:61:50:c2:a1:
03:cc:81:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 03:28:12 2024 by rpki-client on console.sobornost.net