Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91954C1/50C6E732E84011EA8A6B9980C4F9AE02/AB0FCA32F89211ED9061C04FC4F9AE02.roa
File: AB0FCA32F89211ED9061C04FC4F9AE02.roa (raw, json)
Hash identifier: wbL3gpnCOHEKU9gBuHjAlWxcCY+lLQoGdrT3GF5jZ5o=
Subject key identifier: 6E:27:7F:F6:45:AE:E1:2B:B9:B1:BE:11:67:DA:C8:2F:59:6B:70:31
Certificate issuer: /CN=A91954C1/serialNumber=4531A273C2C4EA68B67B98ADE55B4623EF9375A4
Certificate serial: 06F3
Authority key identifier: 45:31:A2:73:C2:C4:EA:68:B6:7B:98:AD:E5:5B:46:23:EF:93:75:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTGic8LE6mi2e5it5VtGI--TdaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91954C1/50C6E732E84011EA8A6B9980C4F9AE02/AB0FCA32F89211ED9061C04FC4F9AE02.roa
Signing time: Mon 08 Jan 2024 22:31:51 +0000
ROA not before: Mon 08 Jan 2024 22:31:51 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 131314
IP address blocks: 103.28.144.0/22 maxlen: 24
2403:cc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 18 Apr 2024 00:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1779 (0x6f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91954C1/serialNumber=4531A273C2C4EA68B67B98ADE55B4623EF9375A4
Validity
Not Before: Jan 8 22:31:51 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=659c77d6-303a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:87:c8:5f:a8:5a:cc:0c:14:27:80:03:ee:24:
89:f6:b2:3f:52:ff:32:6e:1f:7c:56:44:c5:de:05:
da:7d:11:4d:90:64:6a:06:9e:79:b5:c4:14:6c:15:
f8:98:e9:b3:14:55:eb:85:2f:4d:57:a4:8b:21:37:
d7:24:57:b8:8e:a4:73:3f:bc:7d:6d:f6:b4:3c:3c:
48:ed:9b:32:20:49:90:bc:7d:b8:1b:bf:c2:cc:dd:
d7:6d:b5:93:bd:fc:cb:81:e5:6d:c6:6f:01:fc:cf:
15:25:4b:74:85:df:30:0b:ab:af:81:4a:92:82:21:
c8:94:86:c0:ae:eb:00:bc:61:aa:ae:97:5a:05:5e:
50:e1:4d:13:7a:0e:1c:3a:c1:45:81:fa:9e:ce:af:
6a:f8:1c:f4:9c:67:65:3b:52:9d:96:61:9f:9b:16:
58:62:cd:79:df:2c:e5:16:75:77:0d:9b:fb:b7:87:
9a:a8:ed:08:95:48:97:3b:2d:28:46:9c:2c:17:78:
72:e8:2f:3f:fb:2a:c5:83:b8:68:cd:9e:23:83:5a:
20:51:a1:16:c0:cc:5b:14:32:1d:a3:c2:8b:34:b2:
90:27:0c:e0:98:e0:ce:f4:d4:ce:7b:ad:f4:cb:2e:
a8:36:6a:44:db:56:51:d6:5d:08:8b:65:b6:23:09:
69:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:27:7F:F6:45:AE:E1:2B:B9:B1:BE:11:67:DA:C8:2F:59:6B:70:31
X509v3 Authority Key Identifier:
keyid:45:31:A2:73:C2:C4:EA:68:B6:7B:98:AD:E5:5B:46:23:EF:93:75:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91954C1/50C6E732E84011EA8A6B9980C4F9AE02/RTGic8LE6mi2e5it5VtGI--TdaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTGic8LE6mi2e5it5VtGI--TdaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954C1/50C6E732E84011EA8A6B9980C4F9AE02/AB0FCA32F89211ED9061C04FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.28.144.0/22
IPv6:
2403:cc0::/32
Signature Algorithm: sha256WithRSAEncryption
ac:fb:a9:55:22:34:15:5b:bd:fc:93:1a:10:b6:a6:a0:8f:a1:
d2:84:53:64:f1:23:61:90:4a:71:ff:04:04:ac:c5:50:cf:7b:
ef:24:35:86:2a:0d:47:d4:ff:b8:bb:7c:c7:eb:63:1c:81:e9:
5f:6b:49:1d:ba:5e:c7:68:88:7f:5e:b6:41:38:7f:84:0c:9d:
01:76:e3:d7:53:30:05:69:fc:06:ab:d3:06:12:45:26:55:4b:
be:64:0e:e7:0e:c6:ff:a4:83:9f:49:16:11:39:d7:97:a1:1b:
ea:af:d5:00:11:47:99:b1:a4:c0:e9:83:ac:9b:5f:a2:01:ab:
e1:5f:66:00:09:1f:6b:80:4c:b2:9f:bf:ef:11:e4:ec:71:b4:
5d:f5:92:65:db:2f:f9:c8:4e:e9:b7:43:4d:8d:de:ce:72:67:
63:dd:5c:28:55:54:aa:46:e8:78:27:98:4b:0a:74:3f:21:d0:
ca:9e:99:bc:3d:94:a7:27:0f:a7:f7:5a:8f:a4:da:30:92:22:
4a:80:dd:a3:82:a7:bc:7e:02:32:e6:77:ab:d6:39:2c:c9:b5:
d0:48:3d:64:52:e6:25:b2:32:e5:ae:a4:73:31:06:7f:7b:85:
e0:a5:0a:7b:15:8d:c5:e2:a4:35:55:e3:d0:cc:1d:6a:b9:73:
ff:87:09:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:47 2024 by rpki-client on console-ams.rpki-client.org