Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/51BB7702690611EF91330D85C4F9AE02.roa
File: 51BB7702690611EF91330D85C4F9AE02.roa (raw, json)
Hash identifier: HAw83yrW3uH5cP12lIjGNuuD0u9/pSn2aSkVDNFwGYo=
Subject key identifier: 8E:39:FB:86:ED:2F:2B:81:F5:5E:8E:C3:DC:2E:3E:D5:36:D2:BF:FF
Certificate issuer: /CN=A91356BA/serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274
Certificate serial: 04
Authority key identifier: AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/51BB7702690611EF91330D85C4F9AE02.roa
Signing time: Mon 02 Sep 2024 08:36:07 +0000
ROA not before: Mon 02 Sep 2024 08:36:07 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 134196
IP address blocks: 103.135.113.0/24 maxlen: 24
103.135.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 01:18:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91356BA/serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274
Validity
Not Before: Sep 2 08:36:07 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66d578f7-877b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:38:70:7e:1b:e3:dc:3c:32:7b:52:6f:b5:
4c:7d:b3:ae:70:83:5d:71:14:75:f0:61:13:79:b6:
b9:08:6e:de:db:59:7e:8b:86:d2:0b:04:5a:fe:cb:
75:bf:cf:98:7d:f5:0f:4a:0b:79:86:32:4d:7a:d0:
c9:88:8f:7c:be:af:91:d2:f9:f5:be:59:b0:eb:3c:
46:e0:b9:dd:75:4d:5b:ec:fd:1b:ed:95:9f:a5:d3:
4c:16:b7:13:e4:9a:60:79:b7:0e:8c:4f:85:b6:3b:
92:a5:b4:84:6c:3c:18:dd:ce:fb:d4:00:0d:d4:42:
cb:e7:d9:59:7f:2d:9e:ae:4f:93:83:74:bb:08:aa:
a5:2a:84:aa:35:87:41:77:54:f3:a3:46:f7:45:97:
e6:1b:2b:2a:ea:bd:64:ea:f2:a2:96:ba:3d:8d:76:
f0:62:76:da:5b:e3:c3:98:fa:f3:14:80:95:67:7f:
97:6f:13:03:bb:ef:3c:16:7d:43:d3:51:22:f0:94:
52:95:50:a4:fe:fb:4e:f6:5e:5f:2c:b2:c5:be:3f:
77:23:eb:09:9e:18:7d:9a:86:52:c5:dc:14:7b:76:
5c:61:cf:16:75:a0:07:5e:dd:14:1b:d4:3d:9a:62:
3d:f4:e6:bc:f9:db:3e:28:d2:6d:6e:ea:c8:84:2a:
b5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:39:FB:86:ED:2F:2B:81:F5:5E:8E:C3:DC:2E:3E:D5:36:D2:BF:FF
X509v3 Authority Key Identifier:
keyid:AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/51BB7702690611EF91330D85C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.113.0-103.135.114.255
Signature Algorithm: sha256WithRSAEncryption
9e:82:e1:ae:ef:c7:32:0c:50:a7:c0:0d:a9:54:bd:fe:98:f9:
06:e7:ed:b5:d5:52:cf:1c:ef:d2:68:32:15:fa:d3:f1:ee:6d:
1a:c4:92:c5:9f:20:47:90:c1:ce:b6:04:92:b7:d6:36:86:e6:
a5:91:ef:2e:1b:74:7b:94:79:a3:d3:19:be:fc:6e:70:4b:b1:
dd:42:bf:21:2b:2a:6f:e6:cc:cc:b6:da:7a:73:d7:e6:ad:8d:
b8:8c:51:25:d6:a4:f5:27:ce:7b:8a:ff:e6:77:2e:7b:a5:c6:
34:99:97:58:63:91:31:a2:14:ed:74:17:68:3d:7f:5a:10:d1:
d8:61:52:48:a6:53:5a:72:e3:e0:3b:e9:43:7e:a8:20:fd:fd:
37:ff:e8:3a:1b:08:b9:ef:fb:69:a5:f8:7c:3e:30:31:17:d2:
38:aa:4d:11:68:7e:63:ac:d1:7d:3e:d5:ef:b6:5b:12:4f:d1:
c7:37:f2:b9:fa:78:aa:46:c8:52:7d:fc:2a:58:2e:93:44:86:
09:4d:f3:2e:28:a5:1b:6f:9b:6f:9f:79:3e:88:23:11:ac:04:
12:a1:d9:d5:fb:ef:4a:ee:e7:8a:ab:fb:6d:97:27:bf:20:d1:
e3:21:51:c5:8b:7e:fb:8f:17:69:55:b4:f4:2f:b9:19:bb:1d:
aa:e7:45:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 04:01:21 2024 by rpki-client on console-fra.rpki-client.org