Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BEBC/A77826A0CF8C11ED9B7D3A7DC4F9AE02/958550B8FBB311EEA3046F77C4F9AE02.roa
File: 958550B8FBB311EEA3046F77C4F9AE02.roa (raw, json)
Hash identifier: Dfye+W2BQzuMyr2EVkYValkLiD8ZoXXbsaZaL0XPBt0=
Subject key identifier: 5A:90:7D:B4:16:D4:B5:28:40:65:58:C3:CA:9E:1C:B3:12:D6:75:5C
Certificate issuer: /CN=A916BEBC/serialNumber=13AB60C800F9F72B2F3244F058C4258381092FC5
Certificate serial: CE
Authority key identifier: 13:AB:60:C8:00:F9:F7:2B:2F:32:44:F0:58:C4:25:83:81:09:2F:C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6tgyAD59ysvMkTwWMQlg4EJL8U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BEBC/A77826A0CF8C11ED9B7D3A7DC4F9AE02/958550B8FBB311EEA3046F77C4F9AE02.roa
Signing time: Tue 16 Apr 2024 05:38:42 +0000
ROA not before: Tue 16 Apr 2024 05:38:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132799
IP address blocks: 103.123.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Aug 2024 06:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206 (0xce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BEBC/serialNumber=13AB60C800F9F72B2F3244F058C4258381092FC5
Validity
Not Before: Apr 16 05:38:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=661e0ee2-2b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e3:52:10:6e:c5:92:f9:6d:6b:fe:0a:13:4c:
68:a4:b3:b4:cf:a2:da:b4:78:0b:36:31:91:6f:81:
90:8e:44:d7:f5:69:c5:eb:4b:3a:36:23:b2:fb:08:
d1:80:02:4b:ff:68:13:b3:9e:bc:53:89:94:27:4d:
eb:f4:3e:f0:63:5d:b4:1d:d8:77:49:2a:10:02:8c:
83:8e:2d:84:b8:f7:d0:8f:5f:76:fd:7f:40:2a:c2:
1d:a8:17:12:9a:5e:46:70:3f:7a:41:07:48:08:70:
16:ed:0d:44:07:11:da:f4:52:af:f2:dd:42:7a:9d:
1d:c8:64:42:9e:90:bd:7a:f3:07:59:a8:5f:b1:7d:
9c:bb:bf:bf:9c:a3:03:35:f1:96:4d:79:3c:90:e1:
4e:3e:b9:dc:e4:39:8d:4e:6e:1f:7e:0d:21:0d:b0:
71:25:5f:d0:54:bf:df:a7:c3:46:d6:e8:17:f0:dc:
83:50:97:88:62:c1:a2:e2:25:39:20:13:af:f1:16:
ae:b9:84:6e:d4:c4:4a:3d:1f:d1:26:58:0c:fa:96:
a7:77:dd:a1:11:16:84:f9:1e:ec:2e:2c:c8:f3:f6:
e8:cc:a2:e9:1a:1d:a2:ff:78:41:a1:1b:8d:2f:69:
13:4a:89:46:09:5c:1b:56:69:65:28:75:40:ea:ef:
c6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:90:7D:B4:16:D4:B5:28:40:65:58:C3:CA:9E:1C:B3:12:D6:75:5C
X509v3 Authority Key Identifier:
keyid:13:AB:60:C8:00:F9:F7:2B:2F:32:44:F0:58:C4:25:83:81:09:2F:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BEBC/A77826A0CF8C11ED9B7D3A7DC4F9AE02/E6tgyAD59ysvMkTwWMQlg4EJL8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6tgyAD59ysvMkTwWMQlg4EJL8U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BEBC/A77826A0CF8C11ED9B7D3A7DC4F9AE02/958550B8FBB311EEA3046F77C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.61.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:94:93:ec:5b:b8:f6:00:4a:e4:20:f5:8b:cb:08:9b:5b:a0:
53:e7:a3:45:87:63:6f:da:17:fb:78:97:33:14:4f:20:d9:fa:
17:ba:fc:4b:be:55:42:9b:cd:e5:11:a9:2d:1a:50:c0:7a:98:
b3:09:c3:2b:2d:c8:47:05:5f:f6:db:41:04:5c:79:f9:84:f6:
60:62:d8:b5:a4:4d:12:59:00:55:72:f5:93:f4:a6:78:50:dc:
fb:e6:fd:3e:65:6b:6a:36:c5:9f:50:60:5f:2c:7e:4c:6a:8d:
56:62:c9:09:8a:43:77:c6:46:34:21:94:5f:f9:8b:56:9f:13:
6f:53:0d:05:bf:f9:56:0f:80:3f:96:4e:ff:40:be:99:97:33:
61:41:44:ad:37:20:9f:72:9c:1a:f3:a1:12:f9:27:e4:bf:d4:
64:6d:ee:6c:1d:49:57:f1:e8:c2:cf:c6:54:84:6e:a2:a9:b4:
9c:29:50:c1:b7:e1:59:24:0d:07:9e:73:fe:9d:46:86:96:db:
65:ee:5d:3f:52:73:5a:ec:cc:1a:36:66:e0:84:91:ea:b5:5e:
0a:42:db:be:34:2c:b0:6a:57:ca:ea:31:bb:5d:95:5f:31:3c:
11:e6:c9:49:82:ce:c0:fa:0d:45:33:a3:e9:cb:59:8b:b3:00:
5e:da:da:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 08:39:50 2024 by rpki-client on console-ams.rpki-client.org