Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/A954D5DCD6D811EE974A2A4DC4F9AE02.roa
File: A954D5DCD6D811EE974A2A4DC4F9AE02.roa (raw, json)
Hash identifier: K2ppcfslFOm1NQB2+kE3rqai2P/3eVSHXjAH252XQ4g=
Subject key identifier: 0C:BA:A8:2A:2E:4D:3D:DE:25:23:93:3C:4F:33:12:2D:4D:38:E3:57
Certificate issuer: /CN=A915D1A2/serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3
Certificate serial: 0B78
Authority key identifier: 6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/A954D5DCD6D811EE974A2A4DC4F9AE02.roa
Signing time: Thu 29 Feb 2024 08:00:54 +0000
ROA not before: Thu 29 Feb 2024 08:00:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150676
IP address blocks: 103.112.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 May 2024 10:34:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2936 (0xb78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D1A2/serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3
Validity
Not Before: Feb 29 08:00:54 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65e039b5-9045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:54:a8:89:a9:33:07:6f:2f:84:2d:30:87:24:
03:ca:38:3e:b9:3a:34:46:84:3d:91:25:6b:ce:22:
11:b8:41:61:df:dd:6f:a6:92:36:ee:32:62:99:01:
3c:1a:4c:06:ac:e2:2d:a5:8b:b0:c0:7a:35:95:10:
d7:2b:47:64:82:78:be:aa:1f:07:ab:73:93:8f:80:
ab:52:12:23:a4:39:e5:be:83:97:2f:ae:d2:e2:5d:
c4:01:a2:68:7a:ae:31:68:ea:f3:47:be:0a:dc:55:
ef:8b:00:47:e8:00:8e:3d:66:a0:d5:30:97:6f:81:
c0:79:e1:68:2f:f0:30:46:d4:82:a0:41:7c:91:e9:
17:5b:81:25:4f:1d:51:3c:1a:67:51:e1:8a:9a:dd:
04:32:4a:5d:10:a1:34:fe:8d:88:7a:fa:0f:34:d8:
0d:9f:27:bd:33:86:f9:6a:7b:41:54:95:57:38:68:
ec:c3:3f:6a:ea:43:c6:82:a7:33:ae:87:27:4d:0a:
71:45:07:0f:26:57:cd:20:ef:fb:2c:31:58:d6:ab:
2c:cf:1d:10:5a:0d:f9:ed:46:17:4e:50:f5:25:38:
e0:05:39:f9:40:05:72:64:0c:c1:1b:ef:ba:56:d8:
62:02:69:5b:6c:69:67:27:0d:2e:39:ca:0f:e9:e8:
ec:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BA:A8:2A:2E:4D:3D:DE:25:23:93:3C:4F:33:12:2D:4D:38:E3:57
X509v3 Authority Key Identifier:
keyid:6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/A954D5DCD6D811EE974A2A4DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.57.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f4:fa:0f:e9:5b:e5:5e:fa:ee:51:64:ef:56:54:be:95:40:
cc:67:a1:7f:de:61:79:82:1f:82:a9:bc:c6:89:c7:fe:1b:9b:
b3:c8:2d:96:fb:7e:7a:be:8c:c8:1f:cc:6d:07:25:88:d4:1b:
8e:37:2c:12:ae:de:9f:5d:29:ab:25:b0:5b:23:00:b0:28:22:
5b:11:f4:9c:c7:1f:a2:de:6f:18:d2:66:e6:b2:a5:83:8d:ed:
11:35:ff:79:f5:25:85:e5:e1:11:e5:b4:f2:40:62:5c:d2:c0:
41:86:5c:2e:ad:8d:c0:24:10:97:57:88:05:48:76:b0:10:d4:
44:82:92:31:a6:c3:b5:a0:35:89:46:f7:bf:17:f4:c0:46:54:
8a:4f:c7:c9:e6:c9:86:ff:a0:dc:4d:b6:56:f9:1a:0c:ee:c0:
b8:f3:23:5a:e2:55:e7:f3:63:05:46:48:af:85:4c:98:49:99:
de:e4:8c:b6:3e:33:64:f2:45:bf:59:e3:54:eb:15:c1:ba:3f:
74:07:6c:f0:16:ba:e8:39:22:fa:39:f0:e0:3c:3d:fe:5e:e7:
84:a6:c5:a5:7e:84:06:2f:63:94:8a:54:5b:b8:eb:3a:af:28:
f8:d9:a0:ea:61:83:24:2a:c4:03:2f:fc:df:58:3e:51:06:d9:
23:c6:53:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 12:48:13 2024 by rpki-client on console-ams.rpki-client.org