Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/4B50B308310F11EEBEC00559C4F9AE02.roa
File: 4B50B308310F11EEBEC00559C4F9AE02.roa (raw, json)
Hash identifier: Hr3LxTNlUk141rdR+WcfuZQZumJdFKmN55DPe2zXEcs=
Subject key identifier: C2:F0:B9:0C:4A:BA:C6:2A:C4:6F:AE:CB:CB:D4:3C:90:4F:57:18:61
Certificate issuer: /CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Certificate serial: 35
Authority key identifier: 59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/4B50B308310F11EEBEC00559C4F9AE02.roa
Signing time: Thu 05 Oct 2023 05:25:47 +0000
ROA not before: Thu 05 Oct 2023 05:25:47 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 399471
IP address blocks: 103.99.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A27AB/serialNumber=59D588125A716698738D1D1E9E6D8A68D7409B27
Validity
Not Before: Oct 5 05:25:47 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=651e48da-72cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:27:f5:c7:bc:f1:a6:8a:c8:c6:49:1d:93:f9:
82:28:22:b2:13:44:c0:38:ce:de:c9:c1:e8:fa:55:
bf:63:d2:1f:62:57:a7:f4:19:45:c9:f8:e6:87:a4:
35:cd:a2:9d:cb:0b:53:fb:10:cf:3d:c4:8b:66:f6:
36:7c:c5:7f:5e:7e:c0:87:de:4d:a9:73:84:e0:a0:
41:09:86:35:56:07:c8:00:06:d2:35:bc:b1:b8:bf:
a0:3c:6b:7c:25:ce:40:27:98:9b:e1:e5:75:c9:5e:
c0:d2:54:4e:ea:b2:53:46:d1:03:52:4d:18:8a:57:
47:6d:02:16:2f:83:c4:89:7e:ae:4f:0d:8a:76:10:
af:9f:30:98:24:67:c2:d5:11:81:ad:4d:ac:bc:08:
74:23:1a:34:62:d8:f2:6f:5b:e0:b4:61:e5:a9:90:
8f:a9:b5:f5:7e:fc:b8:91:75:58:b3:da:d3:86:e9:
8c:8b:83:a8:be:39:70:8f:c8:9f:70:1a:f1:1f:5b:
a6:b4:1b:00:33:0c:b2:3f:71:13:54:b9:78:4e:eb:
dc:b5:ab:62:4c:26:0f:ea:d4:50:04:93:cc:31:aa:
d2:2c:d5:15:ed:9e:91:2d:46:ed:97:f7:26:fa:8b:
9d:8e:d6:71:54:b8:b3:40:a8:58:e7:38:ef:7e:2e:
db:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F0:B9:0C:4A:BA:C6:2A:C4:6F:AE:CB:CB:D4:3C:90:4F:57:18:61
X509v3 Authority Key Identifier:
keyid:59:D5:88:12:5A:71:66:98:73:8D:1D:1E:9E:6D:8A:68:D7:40:9B:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/WdWIElpxZphzjR0enm2KaNdAmyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdWIElpxZphzjR0enm2KaNdAmyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A27AB/6F6E9828310E11EE889FF03FC4F9AE02/4B50B308310F11EEBEC00559C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.53.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b3:a9:67:ef:fe:9a:9d:bd:34:5c:1e:f8:a4:65:2c:d9:bd:
e9:a7:11:24:f8:cd:c6:d3:c0:4a:89:37:7d:c5:df:e6:03:a7:
6e:7a:d3:52:b2:61:98:68:2f:b0:71:25:8e:5f:6c:a8:4d:80:
6e:78:54:34:fe:10:48:b7:1f:8e:d3:6a:0b:68:a5:89:e0:40:
e9:ec:ae:c3:04:d8:b2:bf:da:a3:71:ab:37:2e:a2:3f:a7:49:
3f:a3:a1:08:40:8a:5d:f5:49:87:7f:c0:7f:41:5b:cc:c7:c3:
58:18:ec:c7:6a:87:84:cf:92:43:33:7d:78:93:ce:c2:1c:6f:
d7:06:08:c3:e5:cc:9a:d8:35:2e:c2:6b:66:ac:73:a4:21:98:
c7:f2:86:df:d4:55:12:7b:06:e8:fc:b2:b3:a6:9d:75:22:db:
9e:06:75:2c:b8:bf:51:2a:cf:f8:33:1b:cb:5b:45:22:d7:61:
2e:24:88:d8:de:80:28:8d:1b:aa:2b:2d:cc:db:b0:bc:28:68:
5f:36:84:7e:c8:81:c4:84:9e:9d:a4:8a:95:bc:d1:ca:82:81:
62:10:2f:20:bf:c8:87:6c:3d:c7:81:97:c8:01:68:07:c9:df:
e4:41:9b:8e:15:dd:73:8b:77:f6:3f:f4:d5:08:c5:cb:52:c7:
1b:88:a6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 02:33:55 2023 by rpki-client on console-fra.rpki-client.org