Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/C56D894EA1E611EDABFD7D7FC4F9AE02.roa
File: C56D894EA1E611EDABFD7D7FC4F9AE02.roa (raw, json)
Hash identifier: NB3KRi8jHo19b9FxpO0EnozxWrrGqIHT5kuf41Wt+Mk=
Subject key identifier: 93:62:82:EC:26:77:99:39:38:B5:EC:74:F7:51:61:C0:23:2B:08:7C
Certificate issuer: /CN=A91316B0/serialNumber=FC74B25C0DAD893E19E522DAD9D9C012EB82F589
Certificate serial: 0298
Authority key identifier: FC:74:B2:5C:0D:AD:89:3E:19:E5:22:DA:D9:D9:C0:12:EB:82:F5:89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/C56D894EA1E611EDABFD7D7FC4F9AE02.roa
Signing time: Sat 11 Feb 2023 03:53:11 +0000
ROA not before: Sat 11 Feb 2023 03:53:11 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 137967
IP address blocks: 103.178.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 10:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664 (0x298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91316B0/serialNumber=FC74B25C0DAD893E19E522DAD9D9C012EB82F589
Validity
Not Before: Feb 11 03:53:11 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63e71126-e0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:45:21:3b:3b:34:7e:3c:82:9e:74:f6:4d:2c:
e0:51:c6:36:3f:c9:be:ef:29:a5:6e:b4:c9:bf:28:
58:53:fb:fe:fa:e4:6e:c7:6c:b8:d7:b6:b2:01:9f:
f5:05:5d:e2:f8:2f:56:06:b0:17:00:04:fd:71:65:
4c:46:dc:c5:b8:fc:bc:b1:2d:6d:41:f2:e6:7b:f6:
1c:fe:08:ac:7d:cb:27:8b:13:30:2f:f6:a4:fb:b1:
c2:d0:35:3b:99:14:3c:c8:4f:67:b4:f4:d6:97:5e:
67:e2:2e:d0:a2:5f:de:60:69:9f:96:a8:f2:93:df:
27:dc:7b:8e:59:ee:63:ca:5e:d8:39:9c:bd:eb:2e:
d2:18:e6:7d:cb:bb:2c:57:3e:23:3c:24:b3:95:86:
57:88:ed:cf:31:69:2a:02:58:4c:c6:bb:08:05:cf:
b8:ba:62:d2:f8:58:1f:e8:ef:93:09:13:cc:30:85:
c8:cb:e1:f5:a2:5e:80:50:e4:37:1d:e6:72:62:29:
2b:73:66:71:76:bd:f4:2c:a1:f5:e9:fd:35:05:3c:
58:d5:e5:7f:7c:f1:ec:75:77:40:71:74:94:57:45:
44:a5:55:f0:fc:15:43:60:4b:fd:9a:3d:e6:ef:51:
ee:f7:17:94:83:0d:c5:7f:56:f1:7a:03:7d:f6:5e:
ee:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:62:82:EC:26:77:99:39:38:B5:EC:74:F7:51:61:C0:23:2B:08:7C
X509v3 Authority Key Identifier:
keyid:FC:74:B2:5C:0D:AD:89:3E:19:E5:22:DA:D9:D9:C0:12:EB:82:F5:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/C56D894EA1E611EDABFD7D7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.31.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ce:98:bf:4b:4c:9e:f2:8b:02:83:05:31:1d:2b:52:0e:2c:
c1:b5:74:97:19:14:5c:37:96:e2:13:e5:49:91:7e:fb:1d:8b:
cb:48:dc:fb:ed:8e:e6:8f:32:6a:11:b8:17:29:39:8a:fd:22:
02:79:b5:aa:99:71:2d:6a:84:bb:0d:73:a9:4c:04:43:ea:cc:
20:5f:de:d8:f6:03:0c:81:e8:31:1e:55:77:12:55:0d:83:8c:
33:f7:53:7b:1c:f6:0a:ec:d6:26:87:9b:97:48:dc:ea:f8:5c:
d5:15:7a:21:f2:d2:ea:f3:ba:61:d0:6c:ce:cc:e6:02:34:61:
a3:51:ee:17:0b:43:47:e3:8f:5d:87:39:19:5e:34:b2:08:9b:
85:79:33:c3:e0:38:5a:57:f6:ff:14:bf:90:f0:a3:3a:ed:3e:
34:1d:6b:71:61:60:7d:82:41:ac:1b:f9:cf:6e:85:a3:46:44:
73:4a:fa:44:02:06:10:e4:b9:38:3c:86:0c:16:9d:72:88:97:
5e:27:70:27:dd:9e:3c:d6:24:0b:7a:ff:92:83:bb:c3:80:13:
ae:0b:3f:ca:b4:74:d6:a9:83:b5:6a:77:0d:0e:e6:33:95:62:
c6:d8:8b:3f:56:a8:d9:ae:43:f4:c7:67:30:66:09:61:43:7b:
84:78:3c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 14:02:43 2024 by rpki-client on console-ams.rpki-client.org