Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/620A15C2190211EF80AA0D70C4F9AE02.roa
File: 620A15C2190211EF80AA0D70C4F9AE02.roa (raw, json)
Hash identifier: bu81bmhGl+bbEEmtU81qtlX2tK4LjMtHaDD1HEb62B8=
Subject key identifier: 74:5E:56:F4:04:F2:B2:25:C6:39:62:7F:4E:9D:74:0D:8E:E2:2F:7D
Certificate issuer: /CN=A9196F7C/serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D
Certificate serial: 18
Authority key identifier: C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/620A15C2190211EF80AA0D70C4F9AE02.roa
Signing time: Wed 29 May 2024 08:13:09 +0000
ROA not before: Wed 29 May 2024 08:13:09 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 152699
IP address blocks: 103.15.236.0/23 maxlen: 23
2001:df3:aec0::/48 maxlen: 56
Validation: Failed, certificate revoked on Fri 09 Aug 2024 06:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196F7C/serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D
Validity
Not Before: May 29 08:13:09 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6656e395-112e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:9c:7f:50:5b:b6:a4:fc:8b:ee:74:a1:ea:
c3:70:d5:1e:e9:ca:74:69:bc:3f:c3:04:fc:44:4d:
78:ac:6d:46:5c:04:65:2e:2b:81:91:9b:b0:d5:1b:
86:ed:44:a7:6e:62:26:e3:b7:16:9d:ec:83:e3:d0:
c5:4e:8e:d3:5b:d5:12:94:b0:02:77:8d:1c:0f:a1:
9b:a5:f9:23:be:8a:36:a2:b0:e1:6d:86:c4:af:f7:
a1:25:53:cb:72:b1:d7:53:cd:38:44:e1:1f:e1:d4:
1d:e6:dd:04:eb:ab:da:36:5f:4e:a3:01:af:be:3a:
a7:92:fb:00:9d:ff:e0:f1:f0:76:2b:60:80:5b:f3:
9e:0d:10:08:61:f2:43:3a:e0:45:55:fe:f2:80:ac:
32:68:23:a4:08:99:f7:d8:c8:bb:2e:46:70:cd:7e:
7d:c7:cb:12:e6:4e:7f:35:a7:77:2c:1a:6b:ea:5a:
f3:83:7d:36:67:0c:fc:26:0d:26:5d:e0:1b:14:66:
42:8d:a8:9e:b2:c2:6f:e1:4a:87:e4:3f:3e:26:38:
2f:bf:7f:6a:7a:bc:01:58:ed:0a:bb:07:33:0f:c9:
4e:98:06:50:b0:24:a2:b8:25:79:a6:a6:3f:37:6c:
c0:54:e4:48:18:b0:9c:f2:6d:48:d1:08:c0:75:6d:
77:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5E:56:F4:04:F2:B2:25:C6:39:62:7F:4E:9D:74:0D:8E:E2:2F:7D
X509v3 Authority Key Identifier:
keyid:C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/620A15C2190211EF80AA0D70C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.15.236.0/23
IPv6:
2001:df3:aec0::/48
Signature Algorithm: sha256WithRSAEncryption
5a:0a:b1:b7:63:d4:c7:b1:dd:dc:b0:d8:de:65:a3:4a:ad:4d:
0d:c7:0a:b8:ef:d7:03:ea:2b:f6:6b:0c:c7:d4:e5:bd:50:61:
dd:67:f5:6e:a0:3c:1c:a9:70:97:c3:ac:f9:9d:58:7c:55:fa:
0f:aa:21:78:23:39:72:78:29:f6:83:7d:4c:49:3a:ea:61:cc:
28:e3:d4:67:7f:84:c5:f4:c8:d7:e3:bb:ad:30:e2:06:23:e2:
51:96:a2:a2:79:ea:34:3e:03:72:d7:4e:c8:33:a8:f0:f7:48:
cb:b0:77:74:44:da:23:62:e7:a9:f2:ac:7f:27:1b:e9:ff:cf:
02:20:50:60:33:32:5e:3e:72:3b:ea:4d:10:7e:84:7e:0f:f5:
44:27:d1:b0:9d:0a:57:ce:0c:72:8d:eb:2d:db:a9:26:46:c4:
c8:fd:e3:91:ba:96:75:74:05:72:a2:75:21:ce:2e:df:74:40:
e0:84:3b:64:b4:35:cf:78:1c:40:73:bc:b4:e7:13:b9:64:e7:
fb:30:6b:37:36:f5:eb:1b:a7:c4:91:0b:e6:6b:ca:41:ac:73:
7f:2b:61:c6:cb:96:f1:8c:de:3f:d9:65:50:08:a7:ef:c3:1d:
a7:8e:2d:41:5d:b8:58:a8:fe:39:9f:29:74:ea:3f:b9:02:0a:
3b:da:81:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 10:08:29 2024 by rpki-client on console-fra.rpki-client.org