Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/21A48214A7D911EEB0AE8467C4F9AE02.roa
File: 21A48214A7D911EEB0AE8467C4F9AE02.roa (raw, json)
Hash identifier: SrU7uhKnecjHqmpBSKVGu19D6xay2nbIyLWYXoCUT0A=
Subject key identifier: C9:94:7E:36:9F:D3:49:A2:93:54:3B:A3:7D:60:12:CF:E3:1B:30:73
Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Certificate serial: E9
Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/21A48214A7D911EEB0AE8467C4F9AE02.roa
Signing time: Mon 01 Jan 2024 05:06:13 +0000
ROA not before: Mon 01 Jan 2024 05:06:13 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 58715
IP address blocks: 103.38.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 May 2024 07:31:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Validity
Not Before: Jan 1 05:06:13 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65924845-75dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:9f:dc:45:ce:ca:23:4c:e4:83:e9:a6:67:
99:c5:07:bd:61:01:c8:b3:7b:4d:73:42:fb:90:3a:
e4:36:01:96:74:3d:25:4b:ee:6f:68:ac:33:a4:8f:
55:9e:2d:c3:0c:a0:a9:d0:eb:87:6c:52:cd:c0:2b:
68:f2:84:bb:1b:34:5f:ab:5e:75:1c:11:6d:b4:ea:
93:2d:5b:5c:df:d0:9e:c3:e3:5c:42:82:09:7e:6d:
15:f6:a0:ac:e7:03:47:a7:f2:25:7a:de:70:24:f8:
77:2c:dd:22:46:41:89:fc:97:55:d7:83:80:7d:90:
e6:ca:9f:57:08:48:0f:4b:c9:e6:08:ae:df:3c:e9:
10:f0:be:76:14:8a:06:bc:9a:7d:0f:c2:13:02:d9:
ec:f0:7d:3a:28:8e:c3:8f:5f:91:87:ca:6f:7c:8f:
28:38:9d:46:c0:c0:1a:67:1d:11:2a:bb:51:d1:34:
e7:91:28:42:41:f6:ab:ec:36:fe:a7:af:1d:fe:8b:
77:1b:e7:7d:ba:b1:27:51:69:1c:1f:71:a2:77:2b:
c8:7c:f7:22:36:4c:d5:5c:5e:cf:d9:73:78:f5:0d:
1e:dd:cb:91:71:18:9b:f1:ac:4d:1b:25:3b:05:cf:
51:24:27:37:56:0c:34:d0:88:c2:e6:d0:c5:15:3f:
96:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:94:7E:36:9F:D3:49:A2:93:54:3B:A3:7D:60:12:CF:E3:1B:30:73
X509v3 Authority Key Identifier:
keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/21A48214A7D911EEB0AE8467C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.38.54.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e6:dc:f8:e6:ec:ec:7c:e7:1e:45:f6:57:a0:0b:98:c2:c3:
e8:8b:a9:48:bf:9a:bf:74:f3:1e:cd:b1:b2:5c:77:8e:9e:b1:
f6:6e:93:72:7b:2f:30:e9:05:b8:22:35:3f:da:f2:75:8d:d3:
5f:01:d7:7b:55:aa:0f:b6:d6:77:89:54:ed:16:6c:5a:e0:8a:
71:ed:51:e0:14:7c:09:c9:76:a9:da:c6:66:9e:23:6f:cf:d7:
c1:c0:8d:9b:47:b8:f5:23:a8:5c:50:2d:53:c1:43:9e:b7:55:
17:ae:98:0a:ba:16:1c:c8:a6:e7:c4:59:06:27:f0:d6:63:2c:
83:4d:06:65:51:7c:8f:89:cd:5c:ac:a0:e3:2d:df:73:4e:30:
b7:6b:b6:42:af:ea:df:96:8b:f7:48:ec:96:95:bf:4b:df:0e:
96:14:77:58:09:8b:47:68:0d:2f:6c:1e:3e:d3:10:67:58:f5:
34:1c:41:62:9b:71:94:74:18:c0:34:60:0c:10:9a:58:bb:6e:
30:b4:12:04:f7:19:1b:ec:c6:fd:5b:0e:96:3e:fb:b4:13:e3:
ed:1c:4b:91:06:b4:31:a8:09:d6:66:07:c7:05:7d:2f:04:ba:
e1:8c:9c:27:b1:4b:1c:85:8c:eb:2f:0a:6b:d0:9e:b8:4a:46:
7f:a1:e2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 09:26:09 2024 by rpki-client on console-fra.rpki-client.org