Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/6E11CB8C86B411E6BAEB2614C4F9AE02.roa
File: 6E11CB8C86B411E6BAEB2614C4F9AE02.roa (raw, json)
Hash identifier: vfGsums2UjhDYeD5M6HBzYYc0www6SXfHtkg3CQp8NQ=
Subject key identifier: 32:5B:B4:18:36:5C:16:5C:EB:20:F9:73:4D:25:08:C7:ED:DE:46:3B
Certificate issuer: /CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Certificate serial: 2E60
Authority key identifier: 68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/6E11CB8C86B411E6BAEB2614C4F9AE02.roa
Signing time: Thu 11 Feb 2021 14:20:10 +0000
ROA not before: Thu 11 Feb 2021 14:20:10 +0000
ROA not after: Mon 31 Mar 2031 00:00:00 +0000
asID: 1283
IP address blocks: 103.10.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Mar 2022 07:20:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11872 (0x2e60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Validity
Not Before: Feb 11 14:20:10 2021 GMT
Not After : Mar 31 00:00:00 2031 GMT
Subject: CN=60253d1a-6162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0b:41:16:d3:09:a8:65:89:8d:1d:51:f1:44:
86:da:10:40:17:51:04:80:ba:70:2f:dd:74:13:a9:
0c:fb:68:36:90:0b:4a:3d:9f:b6:70:d3:a8:aa:f1:
e4:88:7a:5d:8d:7e:40:f6:3a:28:5d:bb:32:c6:da:
d9:4e:4b:ff:60:8d:fc:b9:64:2f:0a:6b:05:49:0c:
8d:97:83:8d:be:dc:3a:6f:f4:b7:66:f8:7d:77:6c:
a5:af:6b:a8:a2:1a:82:56:12:b1:16:ca:8a:cf:9f:
3e:84:1e:3b:2f:58:87:8f:79:fe:b5:c9:6b:14:37:
08:d6:02:81:23:98:b5:be:ca:67:a5:59:5f:17:e9:
55:0b:17:34:67:8e:fb:25:49:b5:42:88:a2:a8:56:
46:aa:95:57:f9:46:4c:fa:07:fc:bc:86:55:23:a7:
cc:78:43:35:8f:f1:88:20:0a:ab:e0:1e:da:58:dd:
09:1c:e4:46:98:84:c6:70:a3:3a:f4:66:53:22:e7:
45:35:f6:a6:3e:ab:a6:94:bb:50:86:e9:18:39:88:
09:80:a2:09:79:1a:11:34:a0:1a:fc:bf:32:12:09:
db:87:66:79:e7:01:3c:63:6a:99:45:71:71:89:c2:
09:3c:f2:2a:f7:01:c4:38:d5:78:40:2b:41:a6:09:
56:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5B:B4:18:36:5C:16:5C:EB:20:F9:73:4D:25:08:C7:ED:DE:46:3B
X509v3 Authority Key Identifier:
keyid:68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/6E11CB8C86B411E6BAEB2614C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.10.232.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:f0:c1:4d:23:1a:e7:b0:54:17:0d:38:dd:9e:83:18:67:d4:
36:14:39:e5:ea:69:1f:b7:b8:09:01:a9:e1:c6:60:c9:80:54:
fe:b7:a7:55:cc:7f:bb:10:4b:15:0f:b8:ff:a7:1e:c5:24:15:
06:a0:d2:21:85:c1:94:08:0e:19:17:3c:c2:37:6f:ba:4f:9d:
9c:9b:2d:5d:89:30:40:00:d0:73:2c:f0:4f:20:f1:0b:70:86:
58:30:79:1c:0d:c7:7f:43:43:e9:7e:ef:3f:81:c9:1a:d7:1b:
47:16:79:95:cb:df:39:99:dc:ae:bf:db:76:fd:41:bf:f1:58:
af:13:f5:7c:ec:1a:16:85:5f:21:7e:24:12:f2:98:ce:f9:64:
aa:a6:84:dd:ac:60:ca:64:3e:1d:21:39:97:10:79:49:9f:ec:
64:4c:65:2e:6e:74:18:fa:81:13:10:5f:74:8f:89:4b:0f:c1:
5d:a2:28:55:13:5c:79:af:d4:3a:11:c9:d0:f2:bc:61:ec:9e:
2a:4f:e7:8e:47:12:c2:d6:6c:a7:78:3c:43:c0:24:86:8b:6a:
db:af:cf:4f:3a:f7:fc:e2:bd:3a:89:d5:0a:3c:ae:96:2e:ac:
d3:ca:fb:e9:d9:6a:1c:cd:81:e1:2d:74:ba:30:f0:05:d4:d2:
97:6d:ee:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:25 2024 by rpki-client on console-ams.rpki-client.org