Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5534/72CC32AA341111E8B5C38B26C4F9AE02/861CB0DAF1DA11EA8C98CE09C4F9AE02.roa
File: 861CB0DAF1DA11EA8C98CE09C4F9AE02.roa (raw, json)
Hash identifier: aurZeVcAQYmjDOdNnfBUOmcynWoO/c0zo5DShVYELH8=
Subject key identifier: BB:16:60:5D:99:99:4B:12:8B:C0:11:20:EC:0C:65:10:11:10:F4:79
Certificate issuer: /CN=A91A5534/serialNumber=FCDBDB4A2760F7A144F90452BE0CCA8ABCC17549
Certificate serial: 1415
Authority key identifier: FC:DB:DB:4A:27:60:F7:A1:44:F9:04:52:BE:0C:CA:8A:BC:C1:75:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NvbSidg96FE-QRSvgzKirzBdUk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5534/72CC32AA341111E8B5C38B26C4F9AE02/861CB0DAF1DA11EA8C98CE09C4F9AE02.roa
Signing time: Thu 22 Jun 2023 17:46:20 +0000
ROA not before: Thu 22 Jun 2023 17:46:20 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 17747
IP address blocks: 45.126.160.0/24 maxlen: 24
45.126.161.0/24 maxlen: 24
45.126.162.0/24 maxlen: 24
45.126.163.0/24 maxlen: 24
103.57.244.0/24 maxlen: 24
103.57.245.0/24 maxlen: 24
103.57.246.0/24 maxlen: 24
103.57.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5141 (0x1415)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5534/serialNumber=FCDBDB4A2760F7A144F90452BE0CCA8ABCC17549
Validity
Not Before: Jun 22 17:46:20 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=649488eb-5a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:18:e2:fe:73:3e:fa:4f:14:7d:eb:c3:fe:
4d:83:8e:30:27:b9:58:62:13:5c:99:29:12:28:5f:
7e:bd:b1:25:75:74:da:f6:16:90:1f:9b:f6:9c:8f:
36:84:26:01:fa:60:01:2e:71:1d:cb:25:0a:9c:14:
51:69:fd:8c:9d:f3:dc:73:ad:8d:f4:e4:8e:66:43:
df:09:1b:4b:54:57:af:ad:a5:39:07:a1:b1:d0:55:
2a:dd:d4:df:51:4a:f5:b5:a3:77:10:ef:b8:40:56:
94:54:0b:05:c5:b6:cb:ad:49:84:96:e1:54:ea:1c:
e9:98:f7:3f:0a:7f:d8:d5:57:43:2a:f0:15:b5:14:
7e:3d:e1:af:72:08:58:85:46:6b:3d:d8:95:76:af:
94:6a:0e:21:ad:d1:b1:fa:75:15:90:31:e4:63:1a:
19:76:f8:fc:45:8e:6b:58:75:b6:59:46:ef:d5:91:
e5:d0:c3:02:17:1b:02:1b:71:4f:1f:11:8a:9d:b3:
80:82:2c:37:ed:25:13:20:c9:a1:b2:fb:12:26:da:
56:61:fe:8b:57:b7:31:29:18:69:a6:56:e4:79:41:
7d:00:62:8e:bc:95:b6:26:79:b9:f7:af:85:da:af:
51:a7:4b:b3:b9:e8:d4:75:94:8a:53:d4:73:17:87:
3c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:16:60:5D:99:99:4B:12:8B:C0:11:20:EC:0C:65:10:11:10:F4:79
X509v3 Authority Key Identifier:
keyid:FC:DB:DB:4A:27:60:F7:A1:44:F9:04:52:BE:0C:CA:8A:BC:C1:75:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5534/72CC32AA341111E8B5C38B26C4F9AE02/_NvbSidg96FE-QRSvgzKirzBdUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_NvbSidg96FE-QRSvgzKirzBdUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5534/72CC32AA341111E8B5C38B26C4F9AE02/861CB0DAF1DA11EA8C98CE09C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.126.160.0/22
103.57.244.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:f3:2a:0d:28:77:d5:19:10:2e:67:ee:c0:0d:45:25:0a:da:
96:1c:77:c4:31:81:fa:52:b7:ab:80:a6:35:56:11:c0:65:bc:
41:e3:1e:73:da:1b:08:e0:73:58:fb:3d:75:4b:44:bc:0b:bc:
ce:92:75:d9:8b:33:ab:79:4f:3d:a6:f6:07:0f:c6:cf:08:38:
07:d3:06:cf:af:19:8b:cf:e1:1d:e7:16:bd:2f:59:27:47:52:
d0:c1:0b:1c:94:56:1c:e3:bc:52:87:42:ef:19:c2:a0:e3:f1:
24:49:8c:51:5b:95:a3:2d:44:88:ec:ad:df:10:4c:7a:9e:47:
9e:52:91:9e:dc:e5:71:92:2a:27:6a:ed:e8:2c:cc:86:9e:aa:
ac:1c:3d:c9:cd:0a:b5:a0:03:c6:9b:7f:58:dd:bc:9b:e6:7d:
b2:8a:d0:2e:04:37:90:c6:fb:4e:f1:80:2f:94:a3:e3:03:ea:
dd:da:23:54:67:e9:54:11:81:ac:00:92:63:33:ce:c9:9d:19:
8d:4e:30:c8:32:97:dc:e9:9b:dd:a9:f7:87:0f:fe:6b:fb:4a:
21:32:3d:92:02:c7:30:cd:92:fc:7f:3c:d5:2a:d4:3e:49:b5:
fa:7e:cf:ac:f5:78:db:17:af:8b:36:dd:ec:7b:e7:db:d4:78:
d8:4b:4e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 05:38:10 2023 by rpki-client on console-ams.rpki-client.org