Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/150C694892D711EEA7CD3F74C4F9AE02.roa
File: 150C694892D711EEA7CD3F74C4F9AE02.roa (raw, json)
Hash identifier: zJdwuzjVMtgSRhBMpVbcK6JeJ8ZWmO/hxdlqJWFd1qg=
Subject key identifier: EA:00:2C:79:63:0B:03:49:1B:71:37:6A:B3:74:78:64:C8:53:8D:D4
Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Certificate serial: 039A
Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/150C694892D711EEA7CD3F74C4F9AE02.roa
Signing time: Mon 04 Dec 2023 18:58:16 +0000
ROA not before: Mon 04 Dec 2023 18:58:16 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.175.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Dec 2023 12:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 922 (0x39a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Validity
Not Before: Dec 4 18:58:16 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=656e2148-943e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:68:54:37:36:15:ba:49:09:9d:29:8e:93:
6a:31:42:b1:2e:fa:00:af:47:05:30:b8:6a:32:48:
b4:7b:48:50:b3:50:09:1e:7e:b3:41:7d:e3:25:f1:
15:36:19:56:61:1d:a9:64:5b:80:8a:63:0f:e2:a0:
45:bb:06:c4:a3:33:7a:2f:70:01:97:50:19:37:30:
65:a1:06:8c:f7:d9:48:4e:c1:f9:23:cf:a6:5f:df:
ce:70:f2:aa:38:c4:c9:ed:f5:bc:e9:e6:d4:df:74:
56:02:32:35:a1:28:83:03:61:d1:59:9a:05:2e:be:
b7:f5:d2:47:af:c8:1d:e4:be:16:29:69:0d:ec:3c:
53:0c:16:0c:46:8f:22:b1:b8:c4:d8:21:7e:8b:fd:
29:01:d8:6e:7a:c7:56:ff:6c:7a:5d:5e:ca:d9:27:
a6:04:56:d5:66:6b:41:cc:fa:47:9c:66:2a:c0:76:
9f:51:64:4f:82:64:77:62:84:74:a8:c7:b9:1a:53:
6f:98:b0:97:e4:bc:7b:8c:69:2e:69:2b:03:b5:32:
54:fb:e8:2d:ad:88:39:85:0b:38:e5:ce:57:73:20:
dc:d4:07:08:58:86:0a:20:31:95:21:af:ba:63:36:
7d:73:f4:84:00:86:f6:12:7e:c6:57:7a:99:58:93:
f4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:00:2C:79:63:0B:03:49:1B:71:37:6A:B3:74:78:64:C8:53:8D:D4
X509v3 Authority Key Identifier:
keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/150C694892D711EEA7CD3F74C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.78.0/24
Signature Algorithm: sha256WithRSAEncryption
89:53:55:70:9e:db:55:3f:ed:e2:1c:b1:b5:80:46:77:82:d8:
c0:fa:80:1b:f3:04:22:f0:0d:4d:e8:8b:7d:4e:88:db:00:e2:
72:3c:88:a9:67:e1:9f:d1:20:d6:a1:52:88:f6:70:ec:4e:69:
bd:cb:87:33:cd:7f:c4:4c:07:78:f8:c8:e5:1e:96:cf:14:0a:
5e:5d:54:2a:9a:61:94:17:27:9e:9f:4a:0b:fd:e5:d9:f8:8f:
29:5f:a4:42:68:05:48:5f:92:2e:34:d1:6a:73:5d:21:f7:55:
e9:0e:a1:27:a1:80:73:6f:33:18:78:d3:0f:66:29:f7:90:98:
8b:39:94:d2:51:64:02:6f:eb:04:fa:60:e8:36:76:b4:25:0f:
d0:fa:f1:35:72:6b:af:db:5c:2d:8b:9a:89:c1:47:64:ad:33:
e9:3c:f6:5b:c8:f7:1e:c0:07:b2:cd:dc:40:9a:29:d1:f6:e4:
f1:aa:be:89:ed:09:2e:d4:2d:b9:d6:2b:f0:05:f0:10:54:19:
83:a2:63:79:ab:b2:cf:74:11:51:21:cb:85:21:80:af:8a:81:
5a:93:49:e1:04:66:27:ef:73:6e:41:6d:af:00:7b:c4:91:2d:
ca:67:f9:f4:7a:97:cd:68:13:5f:77:3d:7d:8f:45:8f:17:e2:
d3:b3:f8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-ams.rpki-client.org