Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/9E1B3044EFF611EEA7028633C4F9AE02.roa
File: 9E1B3044EFF611EEA7028633C4F9AE02.roa (raw, json)
Hash identifier: l8O5vcvcnd7wOH8ijS8bXj8dhDKMm2Goy7WCWMPWHk8=
Subject key identifier: C9:31:04:E3:E8:99:10:37:57:7C:23:75:8C:89:17:99:17:29:98:AF
Certificate issuer: /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9
Certificate serial: 010A
Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/9E1B3044EFF611EEA7028633C4F9AE02.roa
Signing time: Wed 03 Jul 2024 05:06:02 +0000
ROA not before: Wed 03 Jul 2024 05:06:02 +0000
ROA not after: Fri 01 Nov 2024 00:00:00 +0000
asID: 150734
IP address blocks: 103.151.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 02:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266 (0x10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9
Validity
Not Before: Jul 3 05:06:02 2024 GMT
Not After : Nov 1 00:00:00 2024 GMT
Subject: CN=6684dc3a-f77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:f4:87:b5:a5:4b:58:95:f4:a4:fa:3b:47:
ab:d8:8b:b6:8d:a7:5a:a6:9d:22:12:e4:9d:43:86:
12:56:03:34:d4:d0:15:b0:dc:90:cf:7e:7f:a7:df:
90:1c:25:5f:a2:7e:9a:e6:9b:41:dd:04:fa:5b:27:
be:ce:bb:81:e3:15:f9:6c:59:4e:4c:2a:31:da:57:
2b:38:61:02:25:d2:71:e7:3f:7f:e9:70:fc:d7:f8:
98:2d:71:94:61:96:0c:67:6c:9b:a5:fe:e5:c8:94:
12:57:6a:54:b4:fa:ac:d7:72:32:bb:2f:cf:ba:84:
3e:86:8f:43:1c:b7:c2:3f:7a:21:b1:e0:80:16:f4:
59:1d:6d:18:95:ea:0b:aa:a9:8d:23:96:7b:d6:c9:
ee:b6:c2:64:0e:50:fd:6e:d2:03:77:b4:39:83:ff:
b3:49:03:3a:b3:bb:96:3a:40:eb:1a:6c:65:2f:86:
f5:85:6c:e7:4d:5b:cd:9c:f9:ff:f1:e5:61:66:d4:
87:6d:97:75:40:73:b5:44:1d:5a:8c:f7:b4:72:70:
a8:37:2b:bd:78:1c:1f:f8:a0:c0:6b:2c:53:36:86:
69:38:f4:dd:52:01:ac:f1:05:05:1a:d6:77:3d:1d:
ee:7d:e0:e0:ee:6a:f6:ad:e7:e3:29:0b:bd:6d:2f:
a5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:31:04:E3:E8:99:10:37:57:7C:23:75:8C:89:17:99:17:29:98:AF
X509v3 Authority Key Identifier:
keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/9E1B3044EFF611EEA7028633C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.12.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:7c:fd:6f:af:c5:37:e4:a8:d5:71:47:05:d3:ae:d4:d9:7b:
99:3e:a0:6b:d1:f8:80:7c:d4:8c:b0:3e:4b:df:43:f9:6b:24:
27:c3:c3:9c:4a:14:66:4a:91:0a:7d:1d:eb:fb:f7:6b:f5:21:
b9:2e:0c:89:13:4d:ad:c9:4d:b1:f1:e4:e5:0c:1a:a6:11:bf:
ac:19:0e:7a:8d:29:ed:33:d5:7e:4c:bb:87:9d:66:9e:7b:5d:
4e:d9:b1:f5:c7:d6:fc:1d:cd:10:01:fa:d4:d0:6c:f6:1e:cf:
f7:b1:94:35:fd:ec:b4:36:af:7d:79:94:46:39:bc:f9:89:9e:
f4:85:f4:6e:3b:52:3c:45:be:cd:66:7d:39:50:d5:62:2b:2d:
2c:c7:76:c4:d8:31:1e:56:3d:09:7c:b2:bc:c9:e1:12:c0:d4:
fa:da:c2:05:53:1d:8a:52:3a:a1:47:36:c8:a6:97:94:1f:ef:
7a:4f:5f:5f:57:71:f5:d6:c8:db:55:e8:b6:19:7b:b8:ea:5a:
f5:54:15:4e:34:26:e8:88:1b:4a:81:e1:ea:59:5d:3b:30:53:
28:3d:97:29:68:66:32:99:42:f5:35:74:f2:92:71:d3:a2:0b:
11:e1:25:12:b3:6d:bc:bd:d2:7a:c5:5a:01:31:fe:a3:c9:ec:
85:e4:79:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 05:31:59 2024 by rpki-client on console-fra.rpki-client.org