Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/49627E0CC62F11EBBE33C65AC4F9AE02.roa
File: 49627E0CC62F11EBBE33C65AC4F9AE02.roa (raw, json)
Hash identifier: P0k0TuYyJCUBs1IzVMgmbq5NWaWbfkS/g6KtVNC+caQ=
Subject key identifier: D4:0C:3F:B3:04:E1:7E:E1:62:F9:9E:23:62:C0:11:E0:3B:9A:72:28
Certificate issuer: /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Certificate serial: 0457
Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/49627E0CC62F11EBBE33C65AC4F9AE02.roa
Signing time: Sat 03 Jun 2023 02:40:51 +0000
ROA not before: Sat 03 Jun 2023 02:40:51 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 142150
IP address blocks: 103.151.42.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Sep 2023 10:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1111 (0x457)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Validity
Not Before: Jun 3 02:40:51 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=647aa833-c921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:14:88:be:1a:66:bc:43:89:07:3b:26:d7:
20:1d:7a:bd:3a:34:ee:9b:12:91:48:b3:93:77:5e:
d4:27:25:16:dc:fa:1e:cf:f2:34:1a:a6:ba:a0:10:
90:f7:f3:dc:de:01:f3:2f:d2:28:38:51:7c:c6:1e:
11:fb:11:f6:24:14:24:92:c8:91:be:4e:5b:80:3c:
e1:cd:e5:3d:6a:3c:b5:de:d0:90:e9:0b:6e:46:dd:
a0:0a:0a:8a:0b:3c:6c:38:ba:31:c0:5b:0e:4d:cf:
70:da:8c:5e:b5:aa:c6:36:41:1a:2d:c1:63:75:ff:
1b:2b:b6:44:c7:73:5a:56:dd:d1:ba:3a:4b:70:12:
70:a5:98:77:b7:74:f7:4b:fc:24:f4:86:85:ed:8b:
65:89:93:cb:60:6e:89:2d:c3:5f:d4:9e:f3:aa:3b:
aa:5d:71:df:d2:e1:a4:21:34:7e:91:84:33:46:b1:
65:6a:1b:12:a0:2b:92:a0:36:e7:16:85:15:38:f4:
84:5a:54:e9:1b:92:ad:ac:82:13:70:f3:e1:43:a9:
d0:56:10:3d:95:18:af:fd:8d:19:10:cf:be:1a:d7:
2e:ba:c9:02:a5:23:82:5b:11:57:16:c0:ed:b0:cf:
4e:85:39:1b:ea:6f:a4:82:71:5f:7b:10:9c:f7:98:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0C:3F:B3:04:E1:7E:E1:62:F9:9E:23:62:C0:11:E0:3B:9A:72:28
X509v3 Authority Key Identifier:
keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/49627E0CC62F11EBBE33C65AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.42.0/23
Signature Algorithm: sha256WithRSAEncryption
59:53:ea:e0:bc:72:46:8e:30:cf:aa:c6:06:3b:8e:57:3d:43:
3d:28:4f:a8:53:50:36:8a:a7:96:64:48:83:12:f3:bd:f7:aa:
58:f0:4d:a2:06:6a:9f:5b:a8:68:10:10:be:b5:ba:42:92:37:
85:dc:0f:96:ab:66:c7:0d:5d:24:8e:58:5c:61:93:d9:e4:fb:
15:f2:e9:fc:43:4f:85:ae:4a:ea:77:a9:bd:87:4d:8e:df:f0:
33:6e:ce:d9:c1:69:29:7b:39:d2:38:19:c6:68:d4:bd:86:f0:
e7:7e:6d:5b:57:85:52:7c:83:5a:9f:dc:b2:9f:29:82:a0:1f:
31:28:a8:a7:de:41:66:8d:af:92:41:5e:39:16:f8:69:7e:f0:
ed:13:31:be:db:10:b7:79:fa:a6:a3:5d:6e:a7:a5:c7:01:95:
a8:b1:cd:3a:ff:d8:ec:c1:52:92:d5:17:c5:46:1a:af:4c:22:
ee:3c:46:e3:e7:3b:5a:fe:3f:bc:c8:31:c8:87:c6:7b:e4:fd:
fa:d7:70:f5:54:72:7d:be:ac:5c:43:0d:78:83:eb:33:da:2a:
c7:6c:70:30:24:37:3f:b4:98:45:ce:19:11:7e:0b:f6:8f:87:
d1:c3:9d:63:8b:bd:9c:c9:35:20:74:e7:0a:f5:3d:d0:1c:60:
d7:29:1c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:25 2024 by rpki-client on console-ams.rpki-client.org