Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/CCECA010459211EE8445E969C4F9AE02.roa
File: CCECA010459211EE8445E969C4F9AE02.roa (raw, json)
Hash identifier: Jg+IJTfyhGrqXCSjKZfbjiI0UCxLZvaQX1lWTKGC0E0=
Subject key identifier: 7F:24:96:A9:9E:0B:2A:6E:C1:C4:83:B2:23:D0:04:2C:69:0B:87:1D
Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174
Certificate serial: 059B
Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/CCECA010459211EE8445E969C4F9AE02.roa
Signing time: Mon 28 Aug 2023 11:05:30 +0000
ROA not before: Mon 28 Aug 2023 11:05:30 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 136969
IP address blocks: 103.152.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Sep 2023 12:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1435 (0x59b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174
Validity
Not Before: Aug 28 11:05:30 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64ec7f7a-50c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f6:78:7d:2b:d8:b0:ef:73:0e:fe:93:16:38:
5a:f8:56:f3:49:51:68:d2:bc:e9:c1:9a:7e:99:a8:
06:3b:8e:46:54:98:59:74:e6:1a:03:4f:fa:f2:91:
13:a4:22:9a:3b:0f:d3:de:6e:55:34:92:2c:ea:d0:
74:90:78:1c:43:5e:a1:b3:fb:a7:c2:45:50:1c:8f:
f8:12:9a:83:ad:11:51:ee:4d:8c:ff:d7:0b:39:9a:
df:af:99:4c:16:9c:5a:4e:e0:3f:32:36:bb:cb:92:
0a:af:06:d7:f0:59:73:62:aa:8a:9b:f6:1d:81:4a:
21:c5:03:27:e4:c2:4b:e1:47:98:f3:2d:90:aa:6b:
2c:ee:e7:f4:ae:fa:65:d0:ff:e8:35:e2:f8:45:29:
6f:6e:b8:9c:d7:ca:e9:22:a8:a0:d9:4c:ac:00:4d:
10:94:f5:4c:d3:f3:d8:04:01:c9:7d:86:51:98:35:
43:13:2d:3b:e6:4f:e3:d3:9f:6a:b1:5c:44:2b:2d:
d9:e9:8d:90:bd:49:85:6f:95:6a:d2:a0:f5:99:91:
22:d2:c7:8f:c1:dd:79:52:ce:06:8a:6e:7f:66:de:
6a:ff:7e:7f:7b:02:6a:ef:9a:d7:ce:73:14:e7:91:
fa:3b:d9:7e:1a:b0:33:91:b2:80:01:12:1e:33:a0:
b9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:24:96:A9:9E:0B:2A:6E:C1:C4:83:B2:23:D0:04:2C:69:0B:87:1D
X509v3 Authority Key Identifier:
keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/CCECA010459211EE8445E969C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.101.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:95:2d:a7:42:f8:c9:41:09:f7:e3:17:bc:8c:95:33:55:af:
f6:9d:79:f6:9d:65:6a:08:0c:25:0d:c3:12:08:38:e6:d0:fe:
04:1b:53:7f:44:e0:62:58:1f:36:b6:20:32:6c:45:aa:02:64:
5c:35:29:77:9e:0e:5b:1f:27:81:9a:27:3b:fc:01:2a:d2:fe:
87:a9:a7:d0:04:06:cf:5e:ff:b3:25:18:34:87:97:c3:6d:c7:
08:d8:35:2a:a0:40:14:74:f5:cc:e0:57:17:78:ef:fb:14:33:
08:7c:dd:77:4b:c5:4d:d9:27:01:a8:10:79:36:f8:08:72:e5:
c2:7f:4f:e1:26:ad:c4:1d:56:b8:a4:f4:9b:80:59:49:f5:79:
7d:f5:c7:7f:08:68:01:18:cd:14:e7:b5:70:84:8a:62:e7:15:
c7:f4:db:46:93:7d:b8:27:62:cd:49:f8:69:4b:38:21:2e:74:
ab:7f:37:a8:de:5b:e4:0f:3c:3e:51:74:d0:15:d1:d9:ee:c6:
a1:1e:85:6e:c9:42:75:31:1e:a0:9c:f6:d2:3c:7f:e3:ec:09:
d6:58:a7:86:b7:22:f8:aa:cd:73:27:75:b4:59:83:f9:fb:08:
e2:1c:00:1a:db:63:95:5b:8e:38:b2:3c:17:e8:f0:f4:01:ab:
fa:8d:37:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:58 2024 by rpki-client on console-fra.rpki-client.org