Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/7C82CA72798711EE9EDF9E23C4F9AE02.roa
File: 7C82CA72798711EE9EDF9E23C4F9AE02.roa (raw, json)
Hash identifier: JLga3f8XGNGqzVSu75dzwy6nkLk5bB2a7xtgPP9R430=
Subject key identifier: D9:76:4D:5B:5E:54:BE:06:D1:C5:BE:92:3A:74:3E:9B:70:BB:56:0F
Certificate issuer: /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial: 29
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/7C82CA72798711EE9EDF9E23C4F9AE02.roa
Signing time: Thu 02 Nov 2023 13:55:31 +0000
ROA not before: Thu 02 Nov 2023 13:55:31 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 60117
IP address blocks: 103.115.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Nov 2023 01:38:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Validity
Not Before: Nov 2 13:55:31 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=6543aa53-eb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:20:2c:9f:84:29:4a:26:d6:c8:49:34:88:f0:
66:03:bb:43:66:3f:01:78:fb:ab:6c:9d:82:d2:8b:
9d:da:cf:a3:1d:e9:9c:79:11:b2:88:31:77:9b:f4:
5a:71:37:64:8c:39:d6:8f:cd:7e:7d:85:99:0a:01:
80:0f:ca:aa:78:63:fd:7b:18:a7:e0:1e:ae:8c:fc:
7a:04:e2:6a:57:49:9b:fa:34:52:f1:54:4f:e8:9a:
de:2b:e1:31:29:bf:89:a0:75:4b:bd:6c:3d:dc:96:
0e:06:4a:a9:3d:19:34:e5:6f:da:cf:75:1d:a4:60:
13:24:38:7d:5a:40:95:b1:26:3c:90:80:59:17:8c:
8c:2b:84:af:20:78:98:b8:d9:4e:d5:fc:c1:77:ae:
96:52:40:a6:a4:4b:74:15:85:c5:38:00:d6:0b:64:
40:bd:46:9d:d0:21:ee:1f:57:0e:f1:4b:82:64:08:
f8:63:71:53:9d:40:de:ac:bd:22:a2:8f:21:8e:ce:
a5:f5:3f:bb:3b:44:98:81:3e:a1:a6:36:fb:44:25:
e5:f5:26:6e:c7:01:c1:37:0d:59:d2:43:38:1d:3f:
d3:db:58:ab:dd:b8:0c:07:59:18:cb:24:57:d9:6d:
a3:83:0e:80:55:e8:9e:93:0d:f3:51:70:95:f1:53:
03:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:76:4D:5B:5E:54:BE:06:D1:C5:BE:92:3A:74:3E:9B:70:BB:56:0F
X509v3 Authority Key Identifier:
keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/7C82CA72798711EE9EDF9E23C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.16.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:24:80:0a:9d:4d:8d:58:41:fc:b8:eb:1b:d8:93:9f:c5:59:
30:ad:c0:39:c1:c8:4c:ba:f3:87:41:f2:43:ee:84:db:bd:dd:
87:f2:59:ee:55:ec:b5:ed:9f:44:09:c8:c9:1f:5a:c4:02:1e:
db:cf:b8:bd:ff:65:7a:a1:04:77:99:24:d6:8d:d6:e7:3f:97:
89:86:7f:32:18:8b:f0:17:53:28:1a:d3:fe:f1:af:60:73:c1:
8c:5b:4b:39:7e:25:b5:3f:0c:6c:7c:b2:df:ba:d2:0d:66:81:
6c:9b:fa:95:ef:af:06:aa:f6:42:c1:7a:72:16:79:26:24:bb:
97:c9:16:1f:b5:63:0e:60:e1:7c:01:d7:0a:21:f7:4f:a6:e6:
aa:6a:08:51:1d:47:a1:70:68:b9:db:6b:bc:26:6a:8c:eb:d5:
23:fd:0e:73:5b:2e:ed:72:1c:0e:4d:05:b1:65:fd:50:af:11:
0a:47:29:07:c3:e8:3e:7c:7a:11:e4:c5:b2:a0:e2:f5:fd:a2:
74:6b:56:0b:72:b5:18:0e:9c:8d:52:c4:7f:8a:6e:ae:f0:1e:
ce:76:be:ba:92:3b:44:64:ad:4b:ed:75:52:51:4e:f1:34:fa:
7e:ff:93:fe:f4:09:dc:97:36:86:5c:e0:25:24:ce:e4:78:b8:
8d:4e:eb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:25 2024 by rpki-client on console-ams.rpki-client.org