Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/892C1080E9BB11EF9EBA4472C4F9AE02.roa
File: 892C1080E9BB11EF9EBA4472C4F9AE02.roa (raw, json)
Hash identifier: Q3dcdIxN4a8NKPikPJak+T9eqDqlJTyz/BfMTzvLk0Y=
Subject key identifier: 33:D9:DE:4C:0E:A0:F5:55:F9:52:DC:99:30:30:13:BA:71:A8:FD:A0
Certificate issuer: /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A
Certificate serial: 03
Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/892C1080E9BB11EF9EBA4472C4F9AE02.roa
Signing time: Thu 13 Feb 2025 03:35:15 +0000
ROA not before: Thu 13 Feb 2025 03:35:15 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 41095
IP address blocks: 103.84.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 04:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE4C1, serialNumber=047EF1A1CF65966349866767655648EEF9110C5A
Validity
Not Before: Feb 13 03:35:15 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67ad6872-f030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:79:c1:22:1a:12:7c:54:74:87:f7:e1:0d:
68:43:32:5f:d4:a0:72:0a:72:ab:c1:e9:48:98:20:
a6:d1:8f:6d:13:67:cd:ca:bc:88:30:13:a4:a6:8e:
63:dd:22:1c:b6:1c:0d:8a:38:8b:dc:dc:bf:44:09:
42:bd:02:d0:fb:d9:c7:07:55:a7:df:c5:f2:27:de:
95:6f:d4:66:30:b4:49:90:2d:ab:b3:6d:97:de:fd:
4b:97:26:1d:0e:09:14:54:96:3e:a9:b5:50:7a:df:
86:dc:36:4a:a6:fd:c6:ee:20:df:ab:bf:20:84:a0:
00:31:c8:98:9c:9f:48:29:ea:38:aa:36:84:ae:ac:
c7:95:d5:9c:03:5f:1e:d2:a9:b2:2d:ac:eb:0e:c3:
a6:da:42:62:76:d3:33:9d:27:dd:8a:55:c5:39:12:
f2:55:32:33:54:9d:cb:e7:13:51:2f:28:73:31:c1:
7c:02:dc:23:f0:c3:f0:72:c5:3c:4e:da:21:13:34:
19:93:a5:2f:08:80:f7:02:13:cb:9e:85:8e:bd:b2:
d2:af:5d:a9:80:69:77:b7:3c:3f:0a:b1:ae:55:3b:
17:eb:15:f7:0d:f2:3e:a6:48:f2:6c:83:ab:ce:72:
13:61:0d:96:f3:3d:ba:0a:99:af:ea:9c:41:71:0a:
eb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D9:DE:4C:0E:A0:F5:55:F9:52:DC:99:30:30:13:BA:71:A8:FD:A0
X509v3 Authority Key Identifier:
keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/892C1080E9BB11EF9EBA4472C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.169.0/24
Signature Algorithm: sha256WithRSAEncryption
82:40:19:ee:24:26:8e:76:ef:d7:95:56:6d:56:ea:85:94:69:
85:82:72:74:b0:8d:3b:b1:76:e6:49:52:99:7e:a0:35:45:50:
60:89:36:c3:9e:12:43:04:a1:cc:73:5c:7e:28:df:ff:8c:43:
91:13:ed:14:90:f8:cb:6b:ce:82:48:99:d9:2c:07:27:7d:a2:
49:57:4d:28:72:87:aa:63:74:ad:dd:f7:87:3f:68:98:e2:88:
da:17:53:40:97:af:3a:fb:a0:f9:20:9f:96:dc:13:e0:14:f4:
50:c4:ca:56:a3:4b:ae:b8:f8:fd:40:cd:80:56:27:50:ab:9d:
38:3a:a4:27:e1:61:19:51:50:66:a0:7b:1f:c9:57:45:dd:c4:
36:bd:df:f8:a0:21:0f:15:99:76:bf:9c:bd:4a:c0:c6:5a:83:
61:8c:17:9a:7d:84:b1:30:74:47:2e:2d:e4:1f:36:6d:c5:5a:
3c:e5:86:68:d2:d2:4a:e5:18:1d:f2:a2:10:f5:55:33:bc:df:
ca:9c:4e:da:57:94:33:41:81:eb:24:a2:e8:fc:4c:43:22:6c:
df:f4:e0:26:f6:37:46:05:fe:31:54:eb:91:d0:24:d9:50:21:
3f:44:7e:fe:5f:d9:c0:9f:fd:22:66:39:4a:e1:fe:44:9a:d0:
85:2c:15:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:39:51 2025 by rpki-client