Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/ABD8E6E84B1111EE8AFD3555C4F9AE02.roa
File: ABD8E6E84B1111EE8AFD3555C4F9AE02.roa (raw, json)
Hash identifier: ILEzqBTcTvx8twxLt0Tj95U4aQ+fsZRVreZwEN4lrI4=
Subject key identifier: AE:50:D3:12:4B:B6:E6:7C:09:B2:C6:28:BC:2A:22:05:03:FF:CA:6B
Certificate issuer: /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Certificate serial: 048C
Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/ABD8E6E84B1111EE8AFD3555C4F9AE02.roa
Signing time: Mon 04 Sep 2023 10:56:17 +0000
ROA not before: Mon 04 Sep 2023 10:56:17 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 142127
IP address blocks: 103.151.42.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Oct 2023 10:37:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1164 (0x48c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Validity
Not Before: Sep 4 10:56:17 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64f5b7d0-ddc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:00:72:58:f3:c8:aa:62:12:5f:7b:1f:4e:
8f:cd:6a:d9:36:a6:2c:17:bf:3a:7f:99:a0:ab:9b:
7b:b4:dd:c6:c0:70:3a:fe:11:ae:2f:81:7a:0e:e2:
d0:32:c5:71:c7:de:1c:48:7c:3b:94:c8:00:8d:0d:
0c:12:ef:2d:6d:e8:6e:1e:ed:5d:87:71:6f:f3:1e:
7a:40:78:0f:80:8b:54:06:3a:23:fa:9b:3c:79:c8:
86:6a:4b:3c:f0:8e:af:13:6a:41:72:a2:ea:b8:bb:
e2:87:bb:7d:00:e0:1e:0c:df:ea:3f:b1:46:8b:17:
f5:4a:5b:49:dc:00:5c:ea:c0:14:7e:a1:59:d4:c4:
a5:d6:c5:fd:08:4a:55:ba:78:ea:05:8f:d9:87:50:
8c:56:f3:b9:b2:91:7b:52:54:d7:22:11:dd:37:b9:
42:7e:a7:a3:85:b6:b7:cc:ee:f3:d1:17:17:b7:a3:
0d:19:26:32:55:2e:b7:c6:a4:e9:a9:77:2c:6d:17:
e6:33:f1:9e:96:88:7b:5d:a7:d8:b5:5f:1f:88:8d:
f6:b4:30:93:09:9b:00:70:2e:8a:18:37:27:18:b3:
7c:0f:66:60:a0:e5:5d:8b:5c:c4:d4:2a:bc:bc:2f:
ca:5f:a4:9f:2a:bd:9e:35:88:8c:0f:f5:fd:1c:51:
d9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:50:D3:12:4B:B6:E6:7C:09:B2:C6:28:BC:2A:22:05:03:FF:CA:6B
X509v3 Authority Key Identifier:
keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/ABD8E6E84B1111EE8AFD3555C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.42.0/23
Signature Algorithm: sha256WithRSAEncryption
12:a6:dc:0f:47:dc:d9:6c:e6:ae:52:e0:fe:59:a1:5a:cf:5d:
1d:17:e4:b3:d2:a7:c7:05:84:10:b2:51:c6:71:ff:83:fc:2f:
74:1a:7e:05:74:6b:bf:c1:54:8e:96:c4:20:c2:1c:90:3e:2f:
3e:bc:c2:04:43:18:44:79:16:06:5e:7a:fa:45:91:3b:a4:fe:
24:08:c3:e9:27:cd:bd:5f:74:0a:15:44:73:42:6b:f0:7e:7b:
86:7a:aa:61:c4:f3:c6:83:27:24:c9:dc:3f:57:7c:fb:49:d2:
3f:0c:32:f4:c8:0f:43:3f:af:ba:26:f8:9f:e1:85:e5:24:07:
ca:ee:fe:3b:89:58:4b:fc:61:d0:9b:c1:61:83:03:9e:3c:2e:
37:dd:96:98:77:ab:31:0f:8e:a6:24:49:49:12:0c:fa:f8:4a:
aa:a5:2e:fd:a9:29:40:5a:09:ed:18:b0:f2:d3:05:49:55:02:
9b:a9:e7:ad:02:67:8e:94:59:a7:cd:b7:3a:89:32:41:9c:f5:
3d:92:71:da:45:23:94:7d:64:39:3d:b8:94:9c:e6:61:7f:da:
d4:af:12:26:b2:e6:4a:19:12:17:b0:c8:fe:12:fa:e9:a7:d2:
13:ab:18:1e:d2:30:ba:43:09:a2:08:b7:54:b9:ca:57:1b:05:
78:54:03:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:14 2024 by rpki-client on console-fra.rpki-client.org