Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/007FA420AB3911EEBD67A713C4F9AE02.roa
File: 007FA420AB3911EEBD67A713C4F9AE02.roa (raw, json)
Hash identifier: tkr1LethbZSqlSOtTEG5sEI2TvbvWF4hAmd1s6u7aGI=
Subject key identifier: 99:21:44:D9:A5:0F:16:4D:36:FD:52:79:75:A8:3E:C1:67:40:6E:79
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 024A
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/007FA420AB3911EEBD67A713C4F9AE02.roa
Signing time: Thu 04 Jan 2024 19:39:41 +0000
ROA not before: Thu 04 Jan 2024 19:39:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.229.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 23:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Validity
Not Before: Jan 4 19:39:41 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6597097c-e99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9f:de:75:b1:4d:d6:b9:73:15:a1:4d:f1:72:
2b:f0:7a:b2:54:db:63:d8:cf:1f:1f:47:26:7e:a8:
39:e3:bd:c5:05:af:47:60:84:83:04:8d:f7:18:04:
af:ec:84:e8:9c:97:3d:ea:8b:d3:24:bf:61:0f:76:
46:8c:cc:62:c6:2d:90:fc:9e:62:04:c4:a9:11:2b:
33:76:5e:51:18:09:5d:60:9d:cd:54:6a:20:b8:57:
09:97:4e:1d:16:9c:dd:b1:cf:c0:89:da:f3:b6:0d:
fe:d4:15:1d:8f:43:a4:ff:a7:f4:89:6b:dd:17:e3:
da:23:a7:ee:e8:3c:ac:1b:1b:b6:a4:3d:c8:8e:6d:
c2:30:c2:63:39:ee:35:45:ea:39:7d:32:97:3f:c2:
f8:e1:b6:d8:6b:37:2e:25:63:72:73:dd:41:57:ad:
96:26:34:44:a1:5f:1b:2d:c1:ff:d8:a4:06:ec:42:
fd:95:71:11:99:48:9a:f1:1b:d4:27:5d:d3:c6:8e:
b2:5a:c8:54:bf:07:4b:7b:01:77:68:65:b1:4d:00:
c4:1a:88:90:8b:ea:4c:a8:19:e1:b1:d9:e0:bc:6d:
73:33:4d:5e:f4:a3:21:1b:8e:52:78:cc:c4:49:71:
d6:5b:64:95:79:8a:3b:43:4e:01:dc:b2:d5:15:08:
df:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:21:44:D9:A5:0F:16:4D:36:FD:52:79:75:A8:3E:C1:67:40:6E:79
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/007FA420AB3911EEBD67A713C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.116.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:c3:c6:de:56:43:9e:47:4d:1d:1a:a8:36:b5:e1:fe:15:4d:
9e:56:fd:dd:6e:34:58:92:6e:49:2b:f4:33:22:81:80:0b:c3:
1d:f5:58:66:56:18:f1:0c:ea:0d:6f:ae:7c:00:26:2b:a6:62:
a5:31:87:21:14:86:7f:40:08:ab:e7:b0:ef:b2:c6:10:b9:af:
dc:bc:8e:e8:f1:a5:e1:c5:e9:58:2f:6b:b2:a3:c7:aa:38:23:
69:72:6a:25:7d:d2:fe:94:2e:2f:10:b0:f6:50:54:50:79:55:
da:35:9c:38:7a:79:95:38:6a:76:3f:3e:81:7b:a2:c7:d6:83:
75:5c:eb:dd:a3:54:5d:52:d3:0a:e6:30:1f:cf:69:8a:f9:2b:
89:5c:bf:f5:a7:42:04:06:f7:1d:6d:47:0c:02:8b:9f:ac:23:
9f:25:a9:e6:1e:bc:ec:9f:f4:0d:f7:6f:a3:ee:9d:1c:2f:93:
3a:f8:ed:de:98:c9:fa:b1:ec:6c:24:ab:58:3a:f0:e4:41:a7:
b7:89:c2:96:c8:fc:6e:30:43:b9:48:19:04:53:0b:bf:db:fd:
f4:d9:5d:0b:29:85:29:ad:a1:f7:25:d3:47:4c:c7:68:3c:e6:
87:08:db:12:3e:9c:7f:41:91:8f:8b:6b:ab:26:10:ac:f7:7c:
e8:8c:9a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:02 2024 by rpki-client on console.sobornost.net