Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/1ABA2E12957911EE84039854C4F9AE02.roa
File: 1ABA2E12957911EE84039854C4F9AE02.roa (raw, json)
Hash identifier: vSrsV8d15r9DzlqAJYATev7fSx+34hWBXf3QZ6XmAcA=
Subject key identifier: 79:CC:19:66:62:5C:82:AC:05:E5:C8:BF:FE:F4:67:09:67:B7:3D:35
Certificate issuer: /CN=A91957D1/serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6
Certificate serial: 04
Authority key identifier: 90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/1ABA2E12957911EE84039854C4F9AE02.roa
Signing time: Fri 08 Dec 2023 03:23:07 +0000
ROA not before: Fri 08 Dec 2023 03:23:07 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 58580
IP address blocks: 103.54.232.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 08 Dec 2023 04:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91957D1/serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6
Validity
Not Before: Dec 8 03:23:07 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65728c1a-1f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:ef:15:0a:0f:fe:fa:f7:0d:b8:62:23:1c:
92:23:7b:c5:df:f1:dd:51:1d:6e:80:7a:e2:d3:bd:
8e:ad:89:8b:3e:e4:a2:00:6a:7c:0c:94:c6:5e:20:
1b:92:93:39:79:96:a0:67:e3:a9:de:14:62:8b:64:
94:68:ff:1d:a7:05:9e:83:55:dc:2f:a2:84:ca:f7:
0b:81:68:a4:a2:56:1c:b7:5a:14:6f:27:13:bb:4f:
0a:20:67:5c:51:66:48:42:3a:bd:84:0d:b1:e9:46:
d2:39:8f:da:80:cc:44:5d:9b:9a:81:59:2a:7b:d3:
19:91:3b:fa:00:d0:ba:bc:3f:da:c6:f8:98:b1:04:
6e:ff:bf:45:c4:03:7a:49:7a:fc:ca:9b:5a:a7:22:
14:47:16:0e:00:7d:2d:98:a6:e9:c9:14:c7:b9:34:
d0:4a:27:9e:b2:bf:ab:37:b0:6c:d5:9a:7f:fc:89:
18:7e:a7:0a:31:94:d9:26:b0:1e:88:2e:1a:43:b5:
74:1d:33:cc:e4:b5:d0:8f:bf:8c:4f:0b:18:9a:77:
2d:6e:36:68:fa:c4:dd:6c:f5:36:cf:a7:cc:ea:10:
6d:e9:71:23:b8:ab:ab:13:ba:63:2e:bf:c7:dc:fc:
1a:13:4c:b6:96:9c:e0:a5:5e:a5:28:be:63:f5:4a:
ef:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CC:19:66:62:5C:82:AC:05:E5:C8:BF:FE:F4:67:09:67:B7:3D:35
X509v3 Authority Key Identifier:
keyid:90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/1ABA2E12957911EE84039854C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.232.0/22
Signature Algorithm: sha256WithRSAEncryption
75:f8:77:9e:0f:5e:83:44:d3:ed:41:69:74:d6:37:88:cb:0f:
3d:82:e7:f4:84:c3:9b:69:64:73:0f:84:dc:4b:b6:3f:f7:a5:
9a:04:ee:eb:66:f3:56:52:2d:54:72:7e:c0:67:21:c4:87:0d:
3a:06:b7:9f:ec:b1:bc:99:d0:52:ae:b7:33:8d:e7:49:92:4d:
b9:7d:8f:67:eb:d0:71:61:5c:8d:e2:05:ad:1a:0b:ca:6a:bd:
ba:ab:b6:90:6e:82:a2:5c:c5:22:1e:b5:cf:a3:c8:43:36:65:
f9:71:8d:b9:6e:ba:bf:e3:d4:9e:2e:e2:2d:65:48:cf:fa:38:
c2:2e:72:ce:d6:81:7c:64:e9:8e:bd:ec:51:26:d5:d5:a0:6b:
aa:32:f1:71:ce:50:ee:16:d3:85:d6:ea:e3:c8:89:31:d3:7f:
e3:d4:14:a4:37:aa:6e:57:a7:20:57:2a:ab:6e:c5:8e:96:cd:
3e:30:8e:76:85:88:57:65:3a:59:8c:62:df:d8:06:d3:50:a4:
13:78:d2:b0:16:3d:e1:2e:33:90:75:24:d1:a6:fb:20:81:80:
e9:de:5f:eb:14:aa:fa:b0:6e:37:c5:2a:30:a3:88:da:a8:06:
de:b7:c6:95:06:81:56:de:32:5e:b0:77:94:03:99:96:84:3e:
df:c8:b5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:47 2024 by rpki-client on console-ams.rpki-client.org