Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/924F1648B30C11EAB555C43AC4F9AE02.roa
File: 924F1648B30C11EAB555C43AC4F9AE02.roa (raw, json)
Hash identifier: rfU2uUvrtUjub2z1GzoYym4iiuqdRrHOWu4wBNjJ9Qo=
Subject key identifier: A6:14:86:9B:23:6F:ED:89:FB:9E:8A:CE:6D:82:11:8E:70:EA:06:97
Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
Certificate serial: 21F5
Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/924F1648B30C11EAB555C43AC4F9AE02.roa
Signing time: Sat 02 Dec 2023 16:23:07 +0000
ROA not before: Sat 02 Dec 2023 16:23:07 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 4842
IP address blocks: 103.27.78.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 30 Jan 2024 17:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8693 (0x21f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
Validity
Not Before: Dec 2 16:23:07 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=656b59eb-65f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:97:bf:3c:2a:d5:0a:04:93:d3:9b:4d:d8:
63:fa:b9:3d:a6:bf:94:d6:f9:05:97:44:2e:fc:a0:
3b:ca:75:ae:ff:d8:43:e4:06:0f:7c:69:c6:b8:58:
0e:69:69:57:1a:c1:1b:4f:7f:c8:c0:8b:92:a8:9a:
61:77:60:6b:92:6c:5c:5b:56:7c:9f:c5:b7:82:e7:
47:be:c4:e8:75:2a:a2:c1:a0:c3:34:df:12:49:2a:
9e:36:c8:bf:d0:89:b0:56:66:e1:33:8b:d8:3c:1d:
35:78:c9:da:29:98:ba:19:e7:02:19:c0:3a:1c:58:
8a:80:ad:cd:ed:22:63:cc:42:46:56:11:2b:e8:df:
3c:e6:44:df:e6:a1:61:c8:05:03:7b:d3:9b:a7:8b:
92:69:dd:5c:76:5b:6e:50:00:87:e9:61:0d:5d:61:
88:9f:c9:f1:ee:68:72:b6:03:26:22:88:95:f0:5a:
4f:84:40:6c:56:95:a3:65:ae:30:e6:a6:6a:35:c0:
45:ef:e0:5d:cf:52:cf:f0:8b:f2:ed:05:2f:65:05:
64:0f:a4:21:43:a6:57:dd:7a:39:dc:bc:6a:57:cf:
e6:ef:51:09:ec:45:da:12:96:ec:e9:53:4d:87:87:
e7:ad:58:23:5f:f4:ab:1c:10:70:5c:ec:6f:f9:bb:
e3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:14:86:9B:23:6F:ED:89:FB:9E:8A:CE:6D:82:11:8E:70:EA:06:97
X509v3 Authority Key Identifier:
keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/924F1648B30C11EAB555C43AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.27.78.0/23
Signature Algorithm: sha256WithRSAEncryption
84:34:db:85:9a:5f:0f:d1:8a:e4:73:8b:97:ea:05:04:87:b3:
08:bd:63:83:8d:0a:86:52:84:f7:bb:5f:05:24:c1:c0:e7:43:
3c:38:17:4a:19:b4:12:b3:58:35:df:60:7b:6e:dd:15:5a:e9:
e1:80:d9:df:4e:30:ef:6b:20:70:e2:ca:c5:a4:f1:b7:9c:16:
86:46:61:61:ba:2d:bf:db:f3:45:93:11:73:d3:1e:c5:9b:c3:
e7:d9:54:3b:02:e8:37:3b:8c:b8:78:d5:5b:13:c4:60:0c:69:
82:20:e6:2b:f2:34:dc:77:52:09:55:60:20:90:a1:16:13:ac:
75:27:b7:79:db:54:ff:03:3e:7a:68:0f:35:e0:ee:52:36:70:
77:ea:73:bf:a6:07:8d:34:1f:3f:11:0f:dc:67:69:ca:33:8e:
06:70:59:3b:e9:36:44:6f:44:ad:15:9f:2e:f2:61:8c:11:83:
ac:51:53:35:ed:49:4d:c0:53:5a:92:82:76:93:7f:83:fe:5a:
5b:60:0a:6a:26:7e:fb:8d:7a:2e:94:89:32:7b:8c:d5:f9:6b:
b4:49:cd:14:53:7b:a5:71:f4:de:f9:17:5c:4d:de:af:f7:24:
e4:0b:1d:72:8f:8a:25:4d:25:66:4c:6a:be:00:f9:e3:2f:1a:
aa:3e:c1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:06 2024 by rpki-client on console-fra.rpki-client.org