Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/9087423C884111EE8651D113C4F9AE02.roa
File: 9087423C884111EE8651D113C4F9AE02.roa (raw, json)
Hash identifier: wSMcJyhGBGNpXMTJFGufJnGs0ten3oyuEPX9/ZW+KXg=
Subject key identifier: E9:E1:67:BF:49:AA:DB:FB:6E:89:8F:9C:00:F2:9A:89:3A:17:70:21
Certificate issuer: /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
Certificate serial: 0696
Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/9087423C884111EE8651D113C4F9AE02.roa
Signing time: Tue 21 Nov 2023 07:42:48 +0000
ROA not before: Tue 21 Nov 2023 07:42:48 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 141215
IP address blocks: 103.156.152.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 21 Nov 2023 08:28:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1686 (0x696)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
Validity
Not Before: Nov 21 07:42:48 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=655c5f77-1cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ab:51:89:d6:33:64:59:47:6d:4b:07:c1:dd:
80:6f:e6:02:ca:3b:9f:e0:04:76:73:23:6a:a4:2c:
19:46:18:d3:55:1e:51:ad:06:15:9b:db:16:e0:05:
46:55:7c:5c:c2:64:98:19:26:e9:ca:e8:9f:db:e8:
19:bb:33:7f:1c:87:fa:6b:57:ff:47:13:77:17:0b:
99:02:29:27:8a:86:0f:db:56:f8:74:bd:ff:65:b5:
f0:c0:0f:f7:d3:cb:f4:42:c6:71:9a:b5:10:e8:1c:
02:f8:2f:47:f8:ac:12:83:d7:e9:16:7c:93:5d:da:
ba:83:6f:0e:cd:25:f8:8f:9e:cc:fc:5a:45:8d:83:
13:b5:41:67:73:de:b0:81:29:87:f8:af:87:a1:de:
3e:21:27:e0:9a:e2:0d:87:fb:dc:69:b4:ce:9c:e5:
4b:47:8b:56:78:ad:17:90:e2:cd:5e:11:24:1b:3e:
a8:a9:d7:ce:cd:99:3a:15:5a:da:2b:d8:e4:d7:5d:
31:2e:cd:01:31:13:be:c2:46:fe:5a:92:da:f8:fc:
4f:b5:cd:7f:f6:8c:10:b4:93:eb:27:ab:02:5b:03:
18:5e:07:49:2a:f1:62:24:3e:94:0e:86:55:54:12:
33:d4:ca:d7:6c:66:21:78:7b:32:9c:be:60:0b:82:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E1:67:BF:49:AA:DB:FB:6E:89:8F:9C:00:F2:9A:89:3A:17:70:21
X509v3 Authority Key Identifier:
keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/9087423C884111EE8651D113C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.152.0/23
Signature Algorithm: sha256WithRSAEncryption
d5:30:de:c6:19:10:f4:0c:8d:42:87:17:65:44:da:c5:d8:52:
d4:a8:d8:97:f5:1c:25:0b:d6:4d:e5:4a:dd:3f:77:fa:a8:1c:
32:c7:0b:6a:66:de:16:30:a3:58:93:aa:03:14:55:b1:22:bb:
39:21:57:1e:0c:0e:92:cf:e5:fe:8d:1d:70:6f:90:19:33:a5:
21:37:3c:fa:60:2e:7a:6c:96:fe:36:8a:95:26:7b:1b:e6:ce:
06:07:81:33:69:16:06:80:4b:1b:23:7f:b3:72:87:1f:16:f8:
42:75:2b:49:92:ac:17:5a:a7:d9:d2:7b:18:9b:cb:f6:f5:08:
dc:fc:ea:9e:64:b5:75:dc:c3:4e:5c:f6:fd:80:0a:ad:86:04:
00:f3:4a:74:cd:b5:86:c5:78:7f:a7:7f:21:13:7c:0b:91:aa:
87:5d:cb:45:81:87:b1:1c:c0:55:76:47:62:1c:77:fb:16:09:
d0:c2:bc:f2:38:52:d5:6f:b9:5b:80:f1:db:77:fa:cb:a7:7a:
71:6a:eb:52:bf:e5:94:dc:9e:9e:af:48:4e:e0:07:f5:bd:b0:
06:70:e3:fa:34:ff:09:45:53:6d:57:f5:00:5e:03:53:79:e8:
92:58:a8:78:9f:9c:11:d6:4c:4b:09:bc:e4:8e:1a:70:0b:f6:
ea:bb:10:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:10 2024 by rpki-client on console-fra.rpki-client.org