Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/6A19FA1038F711EF9399FF25C4F9AE02.roa
File: 6A19FA1038F711EF9399FF25C4F9AE02.roa (raw, json)
Hash identifier: cuRNU8IXrn/Xg30lDJkQ5s2e2XGJeV8AA+V0hsS61Pg=
Subject key identifier: B4:8A:D4:27:36:C8:50:0E:FA:40:64:CE:76:E0:FB:80:FA:A6:42:C5
Certificate issuer: /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE
Certificate serial: D5
Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/6A19FA1038F711EF9399FF25C4F9AE02.roa
Signing time: Fri 05 Jul 2024 11:01:50 +0000
ROA not before: Fri 05 Jul 2024 11:01:50 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 17539
IP address blocks: 103.48.0.0/24 maxlen: 24
103.48.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 15:40:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE
Validity
Not Before: Jul 5 11:01:50 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=6687d29d-2a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:64:54:b3:bf:54:e8:2e:7f:9c:ef:ff:ec:b9:
68:1c:33:5c:e9:a9:aa:8b:6c:35:fb:5b:f8:90:ed:
da:69:12:0a:53:ac:8c:06:6b:4a:ed:a5:44:ce:35:
c2:38:48:9e:7c:8d:ba:ec:8a:99:4c:74:15:61:7c:
27:c2:b4:43:48:20:82:2b:15:1c:b7:d0:1e:cb:9e:
75:6f:d7:8a:6d:27:5b:11:eb:42:62:0f:f6:16:d9:
d5:0a:6b:02:2a:dd:fb:c6:e1:e6:ca:d9:6d:5d:9f:
3c:5d:44:6f:57:27:64:2c:a3:9d:2a:24:b7:13:0b:
1b:e9:2a:15:66:91:e8:ab:b2:6e:31:7a:b7:56:47:
0a:84:e5:1e:dd:3a:55:79:de:36:67:eb:78:f2:bb:
d3:ec:17:c7:9d:fe:14:5a:5f:9c:fc:f5:1e:14:12:
ac:fb:b2:9d:87:b2:f8:c3:f4:af:7f:7b:a8:1a:8d:
d6:4e:a7:ae:0d:c7:a6:48:e9:0a:bd:fd:e7:36:bf:
43:95:dc:42:48:a7:32:ee:1c:f3:ff:5b:40:ce:f3:
a6:07:7f:90:0b:fb:c2:44:3d:9c:1b:4d:b7:98:d9:
35:66:ff:60:a4:94:de:e9:bb:83:5c:7d:d7:ce:84:
8d:69:1b:51:31:34:b1:fb:9e:d5:7a:ff:41:cd:5b:
3e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8A:D4:27:36:C8:50:0E:FA:40:64:CE:76:E0:FB:80:FA:A6:42:C5
X509v3 Authority Key Identifier:
keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/6A19FA1038F711EF9399FF25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.48.0.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:66:44:4e:ef:ac:24:26:3b:92:be:c9:58:3f:df:a0:67:db:
88:a5:c2:d1:2d:51:4f:b5:1d:87:b1:ec:c1:c7:ec:ec:3d:d1:
02:33:e4:82:a0:13:01:38:d9:49:21:3b:31:d4:a4:42:b3:89:
4c:83:93:52:07:d4:29:50:2f:2b:76:03:df:b1:5c:86:4e:33:
d4:43:d0:fa:7e:7f:36:59:0b:20:f7:b9:78:6e:41:50:e6:22:
1d:ef:f5:26:9f:da:c7:9f:c9:99:2e:8a:8f:77:be:18:a0:eb:
b8:e3:3c:4d:97:2e:03:3d:8e:bc:18:65:c2:46:ca:15:4b:11:
25:82:4a:dc:30:7b:67:6a:39:00:f3:08:00:ab:98:48:6f:c3:
97:52:67:80:43:cd:38:a2:04:5a:bc:95:26:3c:43:cc:be:54:
69:87:45:6f:78:4d:b9:7d:64:35:c5:29:bb:63:91:6e:f7:8f:
36:39:b7:84:f0:58:cb:0a:6e:e3:1c:62:a8:a0:8e:0b:2b:01:
ad:bf:8f:60:f6:7e:4f:5d:d9:ac:c3:0f:d4:96:57:14:93:f6:
49:80:e0:5b:52:b5:79:ee:ec:45:42:13:63:0a:3b:62:25:d2:
a0:f3:ad:ac:d7:d0:00:3e:f6:ed:0e:e8:3d:b9:9d:b8:30:99:
01:76:68:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 17:06:19 2024 by rpki-client on console-ams.rpki-client.org