Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/5CF42D5C75B411EF9445077AC4F9AE02.roa
File: 5CF42D5C75B411EF9445077AC4F9AE02.roa (raw, json)
Hash identifier: gctAa4o6n6NzrDgYPfThu5oEnwoKficOQnHUKC8omug=
Subject key identifier: FF:4B:F6:9B:9D:9D:6D:89:02:57:92:0B:22:9D:A4:41:0D:DD:E6:BC
Certificate issuer: /CN=A912DB83/serialNumber=5499CE363DF05C949322348829799B10EFF1D392
Certificate serial: 0230
Authority key identifier: 54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/5CF42D5C75B411EF9445077AC4F9AE02.roa
Signing time: Wed 18 Sep 2024 11:51:39 +0000
ROA not before: Wed 18 Sep 2024 11:51:39 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 9507
IP address blocks: 103.190.128.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 22 Oct 2024 14:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DB83/serialNumber=5499CE363DF05C949322348829799B10EFF1D392
Validity
Not Before: Sep 18 11:51:39 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66eabeca-d5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:28:46:c9:4e:03:b7:56:e7:c7:31:d4:6a:
53:53:5c:f5:b5:57:42:58:ad:76:81:8e:48:cb:ef:
2e:4f:5e:37:f8:00:fe:79:c6:76:a0:29:15:76:cb:
7f:65:83:4a:59:81:cd:4f:61:71:f0:24:33:56:ba:
32:3e:dc:8b:48:77:5e:d8:4b:91:55:96:51:ab:8b:
51:7e:f3:c9:16:c9:47:ad:da:88:2d:53:17:ca:1f:
cf:cc:50:d6:cd:b9:de:9e:b4:72:c6:e4:ff:6a:e5:
25:e9:2b:f8:dc:fe:eb:d9:b3:1a:d8:b0:67:e1:04:
44:79:d0:68:34:64:b4:04:18:1a:bc:5c:00:8a:0e:
2b:21:33:f2:ba:48:be:6f:ae:ce:59:ca:12:98:c4:
06:9e:3d:f0:eb:3d:8a:7d:c4:0a:36:15:41:60:73:
85:77:df:a8:cc:d1:e8:18:64:1d:4e:05:23:a9:ac:
eb:cc:fe:a3:c8:15:a2:8e:15:17:7c:02:ec:d8:a0:
2b:b1:d0:d2:73:57:5a:59:9f:07:df:66:f6:96:bc:
d5:72:bb:f8:e1:aa:fe:ef:e5:94:ab:95:9a:ef:ed:
0e:a7:22:48:21:37:de:dd:5a:0d:75:da:50:4d:92:
02:62:97:74:32:16:6d:9e:33:e9:05:da:e2:c3:c8:
bc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4B:F6:9B:9D:9D:6D:89:02:57:92:0B:22:9D:A4:41:0D:DD:E6:BC
X509v3 Authority Key Identifier:
keyid:54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/5CF42D5C75B411EF9445077AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.190.128.0/23
Signature Algorithm: sha256WithRSAEncryption
67:b1:e6:e2:69:db:0f:aa:48:25:42:a8:e3:cf:6f:84:04:2c:
f1:cc:44:9a:fe:70:f1:3a:bb:11:ce:72:67:a5:01:44:f0:a7:
38:b0:19:0f:15:a1:c3:be:54:bb:86:1d:75:7b:81:f3:c1:6b:
d9:4f:21:db:85:76:12:4d:9f:78:4b:7e:e4:1b:f9:08:4d:32:
3e:9a:b0:a9:b3:95:a6:80:81:e6:a0:00:48:60:b4:b4:e5:d9:
c6:8e:52:57:ae:d6:cb:b6:c2:89:f0:9c:17:92:43:ed:f8:58:
66:6b:92:97:59:82:89:50:0e:e9:43:aa:a9:a0:6d:7f:cb:02:
cd:13:3e:49:37:3d:1d:48:b7:1f:6e:8f:44:de:a8:fd:77:70:
fa:f1:f7:34:60:06:c7:ca:f7:db:7f:f0:27:32:3e:c0:89:13:
5c:64:ad:50:62:fd:64:e7:45:f3:d0:1e:cd:67:69:5d:ee:ad:
41:dd:e3:b9:44:b9:34:c9:01:f0:74:12:e8:ce:ee:26:7b:64:
d8:af:63:00:b1:0d:12:d3:26:09:41:67:c1:f0:d6:93:e1:51:
bb:d1:da:1f:26:9c:c0:ec:dd:21:62:83:02:3a:ad:83:84:be:
be:02:a2:04:a7:73:66:3e:d0:dc:a3:21:e0:25:6d:c5:22:17:
7a:6f:5b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 16:12:48 2024 by rpki-client on console-fra.rpki-client.org