Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/360AF6561ECC11EF9E27A323C4F9AE02.roa
File: 360AF6561ECC11EF9E27A323C4F9AE02.roa (raw, json)
Hash identifier: Vck3s7FHPurqvC0EC/r/5Jd745QOWcDJ/oyq1qkbys4=
Subject key identifier: 5D:AB:1D:D1:70:41:E0:DA:62:63:24:50:F7:5B:4F:C8:DB:9D:B2:0E
Certificate issuer: /CN=A9175290/serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Certificate serial: 0A74
Authority key identifier: 2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/360AF6561ECC11EF9E27A323C4F9AE02.roa
Signing time: Thu 30 May 2024 21:34:20 +0000
ROA not before: Thu 30 May 2024 21:34:20 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 138623
IP address blocks: 103.134.240.0/24 maxlen: 24
103.134.241.0/24 maxlen: 24
103.134.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 May 2024 22:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2676 (0xa74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175290, serialNumber=2C1C971200AAC68EA845EC0FDD87EC8C5012F29C
Validity
Not Before: May 30 21:34:20 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6658f0dc-89a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8f:c3:db:80:79:2e:0e:09:28:5e:0b:fb:ba:
0b:f6:8b:9c:d7:36:06:b0:cb:b4:9a:b5:70:80:ce:
11:24:7d:0d:9e:ff:d7:70:f0:ca:17:02:48:da:c5:
57:b3:1b:d3:d2:f0:68:c4:a9:0a:19:a9:ee:a1:a0:
7a:05:1f:da:4c:d8:b5:92:75:17:53:1b:2b:6d:db:
74:0c:e7:5e:91:61:61:0b:3a:47:00:41:97:ee:ba:
22:a7:09:c5:95:e3:a1:f0:dc:39:26:c2:89:f7:5a:
e2:70:a4:c0:4b:2f:11:a5:90:0a:7c:9d:e6:fd:b9:
2a:d8:29:ac:70:52:72:7b:cd:ee:ea:ea:2c:ab:01:
86:8f:0a:88:92:dc:fa:c9:a5:52:b5:37:cb:90:ab:
a6:e8:a7:94:8c:25:b1:c3:88:c0:6a:38:9d:2c:ca:
67:c6:dd:ec:8e:8b:2e:d8:dc:18:b0:76:e2:74:69:
d0:3d:30:1a:16:cf:e4:f3:c8:80:ad:5a:fc:a7:69:
1d:c8:4c:c9:31:27:0e:80:bf:6c:fe:5a:53:54:85:
48:a2:46:19:23:0f:64:11:ee:ed:6d:8a:aa:68:3e:
f6:d5:a3:a9:39:02:6d:17:be:33:3d:8c:1e:b6:98:
76:8d:a5:de:c0:25:52:1b:45:df:12:04:87:d1:e5:
29:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AB:1D:D1:70:41:E0:DA:62:63:24:50:F7:5B:4F:C8:DB:9D:B2:0E
X509v3 Authority Key Identifier:
keyid:2C:1C:97:12:00:AA:C6:8E:A8:45:EC:0F:DD:87:EC:8C:50:12:F2:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/LByXEgCqxo6oRewP3YfsjFAS8pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LByXEgCqxo6oRewP3YfsjFAS8pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175290/BEF459023F6B11EAB7B9C56EC4F9AE02/360AF6561ECC11EF9E27A323C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.240.0/23
103.134.243.0/24
Signature Algorithm: sha256WithRSAEncryption
25:9a:eb:e2:67:24:53:ff:07:e0:55:80:78:e1:76:38:37:69:
c2:39:b9:f8:cd:37:ae:f1:8c:02:58:2b:af:10:7a:33:c5:87:
ee:a5:5a:7d:29:18:92:f8:91:0b:ca:1c:51:5e:f3:71:83:4a:
88:a9:31:05:70:01:ca:46:91:e7:35:02:d4:c7:07:1e:46:2e:
e4:d2:a1:3b:aa:e8:5c:42:a7:ba:0a:53:7c:67:d6:a3:81:5f:
20:1b:33:87:66:db:a4:e3:2b:b8:a6:3d:0a:83:0b:53:83:aa:
f4:bc:88:17:0d:9b:ba:1c:a9:ab:44:46:79:66:73:27:3c:dc:
1a:41:ed:6b:3c:a5:57:f4:eb:cd:fb:25:25:30:5d:03:fe:fa:
8a:3a:d8:f3:1d:17:0e:6c:0b:0f:3d:87:7d:22:4d:9d:6a:d1:
49:28:54:7f:00:17:d0:ff:5f:f1:ba:28:29:39:f2:e5:b4:b6:
c4:c1:c4:31:3e:91:93:3f:99:aa:e0:49:85:12:bb:ed:00:70:
57:15:9c:ac:e0:0e:1d:4c:73:55:76:40:67:2d:a9:c1:34:6b:
67:f4:ae:85:fd:ea:d0:61:9c:f7:c5:44:4e:3d:8f:75:f9:b1:
9d:f9:c0:d3:bc:90:01:f9:1c:da:e1:60:56:00:8f:16:82:3f:
21:61:6b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:23:13 2025 by rpki-client