Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BA44F506368411EEB6990B4AC4F9AE02.roa
File: BA44F506368411EEB6990B4AC4F9AE02.roa (raw, json)
Hash identifier: jTFyxe6CglFDATLKNVt5OY2afAYN5xhIPNY6NXnJ4Ao=
Subject key identifier: 82:54:1E:71:BF:07:F2:3F:90:FA:A3:5C:48:F4:55:AA:73:35:FA:E7
Certificate issuer: /CN=A916BFAB/serialNumber=0583A85FE313FC0D6366E22C4466B293EAD45AE4
Certificate serial: 02
Authority key identifier: 05:83:A8:5F:E3:13:FC:0D:63:66:E2:2C:44:66:B2:93:EA:D4:5A:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BA44F506368411EEB6990B4AC4F9AE02.roa
Signing time: Wed 09 Aug 2023 07:16:58 +0000
ROA not before: Wed 09 Aug 2023 07:16:58 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 140594
IP address blocks: 103.251.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Aug 2023 10:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BFAB/serialNumber=0583A85FE313FC0D6366E22C4466B293EAD45AE4
Validity
Not Before: Aug 9 07:16:58 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64d33d6a-a3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:ec:b3:d6:d3:dc:a5:c1:05:1f:06:d3:a9:
81:b1:a7:26:ee:b8:2a:a8:f7:17:ee:35:89:20:9a:
03:d4:ef:40:78:59:bc:9e:50:9a:fc:2e:a6:08:8e:
de:17:a5:77:35:0c:4a:39:c7:c0:eb:f0:03:f6:2d:
a7:f1:50:91:69:3f:7f:57:69:51:67:e9:77:9e:72:
eb:e6:a9:ea:0b:a3:88:32:a6:ad:63:28:3c:8b:67:
95:89:9b:dc:1e:d8:18:51:e8:57:33:e1:c8:98:ae:
6e:55:ce:a7:b5:28:ea:fc:b7:5f:08:f9:6e:71:16:
54:23:5a:5a:77:3f:7a:07:1c:43:6f:24:1f:02:5d:
d8:e6:38:d0:8c:50:05:95:c9:55:93:75:3c:96:9f:
a1:1a:d6:22:92:61:3b:b4:6a:4d:47:8b:26:43:be:
76:d9:6e:c3:57:16:f2:1a:60:72:83:73:fa:af:3f:
1b:c5:18:13:18:71:24:c0:5d:02:13:b2:ef:57:14:
57:78:06:ab:e3:75:12:76:59:ed:b5:a8:14:0a:97:
01:8a:e1:55:b9:18:09:5a:f5:2f:ff:aa:d9:83:4d:
84:69:f6:8a:d8:4d:90:e1:f3:34:35:eb:0b:d6:46:
ae:d5:d8:ed:02:9d:be:be:83:1c:86:00:04:98:ed:
01:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:54:1E:71:BF:07:F2:3F:90:FA:A3:5C:48:F4:55:AA:73:35:FA:E7
X509v3 Authority Key Identifier:
keyid:05:83:A8:5F:E3:13:FC:0D:63:66:E2:2C:44:66:B2:93:EA:D4:5A:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BYOoX-MT_A1jZuIsRGayk-rUWuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYOoX-MT_A1jZuIsRGayk-rUWuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BFAB/33A9CC9C368411EEA927F948C4F9AE02/BA44F506368411EEB6990B4AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.251.254.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d6:61:f3:35:f1:65:c7:a6:45:e8:62:bf:a3:38:4e:cd:7e:
8c:14:7a:bf:58:a4:cb:2e:7f:0d:7c:1f:71:b6:b8:d4:30:ff:
a9:42:86:bf:46:56:d0:da:65:47:1f:5d:dc:77:df:d8:50:ed:
d9:fe:34:76:48:a9:10:12:3e:b6:ac:91:1c:e5:3d:13:2c:6e:
a0:8a:70:20:a8:d2:5f:99:b3:3f:34:3b:06:e3:27:5b:91:b0:
60:42:a7:22:56:95:2b:75:35:69:ac:46:9a:85:50:30:58:15:
73:c7:de:2f:76:e9:94:88:c3:22:f7:c7:77:39:ff:cf:c5:3e:
33:b5:45:68:1c:fb:2c:c6:f2:46:09:03:ca:fd:d3:56:c8:35:
de:77:29:19:71:09:bf:d1:51:b1:8c:4d:62:77:d9:12:42:38:
af:f1:3f:23:c9:b2:28:97:21:72:94:8b:f4:bf:01:91:90:e1:
37:c0:22:3b:5b:f1:3e:69:7a:8c:8b:df:92:3b:fe:10:6f:9e:
d8:5d:3b:34:ea:6a:13:01:a4:e9:ae:26:65:4a:25:42:b1:6f:
59:eb:d7:d0:7b:f3:c0:37:bb:e1:18:e1:f0:bc:80:77:8b:39:
34:a7:33:50:f3:26:71:d5:f3:61:91:2c:73:c6:a4:43:14:e0:
d4:56:17:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-ams.rpki-client.org