Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/CC44E2268C5611EDAF041E60C4F9AE02.roa
File: CC44E2268C5611EDAF041E60C4F9AE02.roa (raw, json)
Hash identifier: FXRy6u++M6bq18UGfmkDTcG+5ZduD1VXRn8TbkqN5AE=
Subject key identifier: D4:59:B8:58:FB:A7:16:18:D2:24:C4:A1:31:AC:2A:23:D2:F6:BF:58
Certificate issuer: /CN=A911218D/serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0
Certificate serial: 05FA
Authority key identifier: E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/CC44E2268C5611EDAF041E60C4F9AE02.roa
Signing time: Wed 04 Jan 2023 17:39:54 +0000
ROA not before: Wed 04 Jan 2023 17:39:54 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 134084
IP address blocks: 103.156.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1530 (0x5fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911218D/serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0
Validity
Not Before: Jan 4 17:39:54 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=63b5b9ea-c17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:00:7d:60:c1:c7:d3:18:6d:25:b3:45:86:
f2:96:95:72:7f:3b:a9:0c:d1:25:8a:77:ff:ab:52:
00:50:3c:42:54:d4:1a:8f:81:86:7b:87:11:bb:68:
bf:f4:75:ca:0d:c6:91:bd:1d:cd:fa:98:57:22:96:
6a:6d:b7:05:65:d3:57:de:d8:ae:01:a4:3a:31:d0:
52:f5:fc:85:08:fb:2d:f3:b2:53:b8:20:b0:b2:f9:
c8:49:84:a7:c6:e5:59:91:78:72:44:44:d0:4f:79:
ad:e3:e7:f2:b5:4b:ea:f2:1c:9f:04:a3:ee:cb:d7:
6c:2f:81:3c:2d:7c:f6:5e:07:63:c0:23:cf:5e:8d:
25:90:98:3c:e4:e4:40:d6:df:5b:da:9a:5b:be:db:
5a:fa:b0:e4:22:0b:31:9a:7b:11:96:56:9a:b6:a3:
46:82:58:32:bc:4a:34:3c:fb:e9:42:ec:48:0e:c6:
d5:0b:bf:3a:cd:b1:e2:d8:e6:6f:7d:b1:56:03:a7:
75:d5:89:4a:52:07:ea:f5:6e:8c:08:96:59:5d:5d:
b5:20:85:b1:9c:2d:9a:e1:b6:52:80:95:72:c3:da:
48:32:f5:50:fd:f8:18:f3:07:fd:a2:53:90:19:99:
70:c5:d6:48:d8:d4:8b:2d:bb:1e:88:da:64:cb:1f:
c5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:59:B8:58:FB:A7:16:18:D2:24:C4:A1:31:AC:2A:23:D2:F6:BF:58
X509v3 Authority Key Identifier:
keyid:E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/CC44E2268C5611EDAF041E60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.126.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:c6:51:a5:82:0e:2d:ed:a2:7b:68:af:7f:b6:2d:23:6b:5d:
b9:aa:45:92:44:e1:e7:60:b2:14:06:0f:e2:fa:8e:b7:4e:f5:
2a:63:74:53:3c:8c:56:ba:04:66:c4:a1:f3:ae:8d:7f:a3:14:
9c:ae:23:4e:22:ee:1f:bb:6a:9a:01:8d:f1:0f:8f:da:27:0b:
29:22:6b:73:23:50:f2:39:6a:a8:52:ec:ae:99:50:cd:37:7c:
ae:22:54:ec:4c:9c:74:2a:29:e6:d1:9e:4c:be:60:1f:44:81:
8b:c1:0e:17:40:0c:69:18:08:e9:b3:12:78:61:4e:d1:93:7c:
74:08:90:9f:0c:fa:02:0f:85:b6:8b:4d:21:24:37:89:29:e6:
5d:f8:b1:bc:2d:b9:ce:c1:22:39:91:7c:8f:56:bd:9d:e6:0d:
9f:85:46:67:57:a1:55:2c:fb:60:9d:96:02:45:e3:5b:8d:e0:
eb:dc:3e:5d:56:08:05:17:27:dc:01:73:2a:cc:a6:fd:0d:04:
ae:74:b5:f9:d4:ef:58:d4:19:60:de:0f:9b:ab:00:ea:ae:5c:
49:ff:47:a2:9a:b0:12:8f:d3:f6:fa:6e:e9:36:9d:9b:45:82:
53:0e:9d:70:32:ef:22:1c:64:50:a2:ac:27:88:2d:74:7f:ba:
29:99:63:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-fra.rpki-client.org