Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/AA5355BC06E911EFA9A17C3CC4F9AE02.roa
File: AA5355BC06E911EFA9A17C3CC4F9AE02.roa (raw, json)
Hash identifier: e+prgPKUklApd0FXi6MOsRXGcYGpH/ZXJ2w6EOQVmX4=
Subject key identifier: 88:22:AA:CB:28:E1:33:7D:F6:22:B8:51:B9:0A:27:D6:A9:84:B9:4D
Certificate issuer: /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
Certificate serial: 04
Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/AA5355BC06E911EFA9A17C3CC4F9AE02.roa
Signing time: Tue 30 Apr 2024 12:03:33 +0000
ROA not before: Tue 30 Apr 2024 12:03:33 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 61414
IP address blocks: 103.23.172.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 May 2024 02:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
Validity
Not Before: Apr 30 12:03:33 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6630de14-0c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:81:50:98:b8:bf:fe:79:34:b3:9f:86:b6:
a9:4f:60:e7:0f:b8:6c:86:fa:bd:93:fd:cf:7f:ca:
23:48:b9:5e:79:a6:35:d3:ab:cf:a5:bf:97:b1:bb:
e6:ec:ab:3f:9d:e8:f6:c5:82:32:29:93:de:d6:41:
77:05:96:35:b8:f6:41:f9:0a:48:b6:bc:16:e2:fc:
f6:5d:91:87:ed:ec:31:a4:61:21:03:93:a8:02:36:
b8:eb:14:00:69:79:bd:a7:85:3e:b2:9e:47:a0:b3:
32:bc:49:2e:3a:b1:a2:cb:06:e9:6a:2c:c3:25:05:
67:97:43:4a:3f:77:c9:7b:c7:c0:30:a8:ce:8e:b1:
7b:31:12:c3:f7:b9:cb:e6:78:a4:bf:5c:96:9b:d8:
b7:c4:f6:79:16:c5:d4:4d:fe:f6:a4:e1:f2:45:36:
96:04:fb:b4:4c:1a:bb:60:e2:ee:84:08:ba:29:cd:
26:ba:37:c0:70:0a:bd:74:a0:0e:71:07:71:10:43:
bd:1f:5d:3e:9d:6c:1c:3d:6c:12:26:93:2d:18:99:
8f:9a:5f:6f:8b:1e:16:9f:50:c3:47:67:db:d7:cc:
a2:f9:17:b6:90:7d:75:2c:ee:9d:cd:fc:80:57:4c:
34:f4:a1:3c:80:41:53:0b:44:93:6b:31:be:2a:b6:
31:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:22:AA:CB:28:E1:33:7D:F6:22:B8:51:B9:0A:27:D6:A9:84:B9:4D
X509v3 Authority Key Identifier:
keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/AA5355BC06E911EFA9A17C3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.23.172.0/23
Signature Algorithm: sha256WithRSAEncryption
20:68:3a:20:9d:0a:53:27:cf:f2:46:b7:d9:15:1f:b3:75:fb:
05:1f:c6:07:39:28:fa:c4:36:fd:fd:8d:af:6d:87:e2:9f:68:
e2:28:45:df:03:88:97:fe:a4:7c:11:1f:6e:e9:e2:ca:16:2e:
ff:6e:4b:5d:bb:ec:bb:cd:28:2c:80:56:b9:43:e2:e8:0d:42:
44:ad:95:c4:a5:1d:1e:c7:36:f4:70:a0:18:b9:17:dc:c1:44:
05:c3:9d:99:10:23:ed:3d:50:eb:4a:f8:54:5f:54:d8:71:e8:
3b:d4:f9:2a:6d:bf:ac:2c:17:a1:f1:a5:40:f4:08:a0:e6:ae:
4a:fe:ab:64:b1:d1:24:4c:61:4f:5e:b7:1c:27:46:71:b1:e6:
c8:87:c6:07:fa:d1:7d:b6:45:2a:ff:e9:e0:ef:d3:f5:d3:b1:
28:7a:97:76:94:3a:26:74:38:7a:cc:92:b7:54:c8:dc:8f:d2:
bf:dc:d1:24:f6:14:1e:a3:bf:36:17:54:ac:58:3b:4d:f3:98:
dc:9e:1e:cb:6b:70:24:e2:0a:bb:93:3d:66:f8:da:6c:b6:fa:
16:22:8d:0a:e9:96:d9:3c:4d:a7:c4:6f:7f:a2:9e:6d:ad:4f:
94:41:9a:1f:0b:93:3b:08:f6:71:63:e5:bb:8b:8b:a4:6f:9c:
83:db:fb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:53 2024 by rpki-client on console-ams.rpki-client.org