Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3569E712512711ED89B40324C4F9AE02.roa
File: 3569E712512711ED89B40324C4F9AE02.roa (raw, json)
Hash identifier: yiSFmqkVORTfrWy5vNiwalZ1zFsKyw6qMVGw78ARl3k=
Subject key identifier: 40:7F:D2:09:A1:79:A6:3F:EA:AD:3F:76:0E:EB:FA:B6:A8:F5:6D:DF
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 3EB1
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3569E712512711ED89B40324C4F9AE02.roa
Signing time: Tue 12 Sep 2023 02:42:26 +0000
ROA not before: Tue 12 Sep 2023 02:42:26 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 149082
IP address blocks: 103.183.144.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 28 Feb 2024 07:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16049 (0x3eb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Sep 12 02:42:26 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=64ffd012-bfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:75:cf:0a:41:db:c4:c2:28:2c:2d:1b:27:
00:f1:4c:a7:54:e0:c3:75:11:61:ba:48:29:1c:63:
21:2c:5f:11:2b:b0:7b:c0:7a:9c:d4:1a:45:d7:0e:
27:ab:37:5a:44:47:31:8e:18:86:23:88:83:73:26:
d3:ef:f8:47:89:53:85:c8:2a:f9:79:5b:44:d5:92:
e8:77:37:d6:52:9c:e4:be:ed:1c:d3:f6:02:40:98:
17:9d:68:af:0d:01:5a:7d:35:80:db:8b:80:64:05:
d6:33:a5:bd:e5:61:fc:7e:dc:3b:5d:46:78:ae:af:
00:33:fc:79:7c:77:48:6c:e5:55:06:c9:aa:1a:6d:
0e:83:2f:f8:d6:23:ab:ec:7b:7d:92:23:d1:e3:4c:
13:9a:1d:5b:61:5e:0e:1a:66:c4:5b:48:a5:49:f5:
4a:9b:26:48:b2:e8:22:1e:c1:aa:29:79:a4:a8:11:
97:a8:5f:7b:04:6a:4f:4f:ff:7b:cd:9e:17:aa:70:
4e:e2:e5:12:53:a9:9f:54:69:ce:9f:8c:e3:62:b6:
a3:59:ba:f0:49:f4:e5:c5:d0:b7:6d:02:91:2a:7e:
f4:4f:2a:ef:be:49:d0:98:50:54:3f:db:f9:1e:4c:
76:49:2e:92:c6:2a:49:f9:4e:bd:c8:a4:80:81:6e:
e0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7F:D2:09:A1:79:A6:3F:EA:AD:3F:76:0E:EB:FA:B6:A8:F5:6D:DF
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3569E712512711ED89B40324C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.183.144.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:a1:58:3f:d7:f5:e6:56:c6:81:cd:88:11:a8:60:b9:1f:2d:
fa:77:6a:fa:8e:89:16:30:01:e4:9c:51:56:46:1f:d3:4f:ba:
06:1f:2d:48:9a:bd:04:d0:9a:19:0d:b0:c6:c5:1a:c5:e8:72:
ee:d9:fb:57:f7:a6:4e:b1:dc:9b:90:56:7c:6b:22:22:90:e8:
d7:f1:92:ab:ee:9c:e1:f0:41:25:21:11:e3:23:c0:d8:21:62:
ab:94:16:b2:1a:24:8b:19:8b:48:ff:26:b2:41:6c:19:d1:da:
90:0c:22:3f:c1:6a:8d:a0:2d:c8:d6:9e:19:05:ab:18:01:08:
bf:29:05:8c:e8:34:81:0c:b6:35:ac:37:c3:16:01:f0:ff:d6:
db:38:ae:4f:8d:f3:9f:c7:d4:23:81:bd:4f:a5:96:e1:0a:04:
bf:33:10:bc:ec:6a:c1:a0:c7:f3:37:21:4b:1e:e4:06:4c:02:
47:c6:36:9c:22:c6:96:ef:0e:d2:26:80:d6:14:44:8c:ba:a4:
8a:28:35:f3:68:d5:b9:4f:4a:6a:ef:af:5f:4e:40:58:8a:fb:
68:25:0e:43:1a:4f:f1:63:d3:60:00:b4:76:8a:a0:64:84:b9:
16:c1:08:cf:4c:bb:5c:69:dd:8c:18:98:0a:18:bc:12:81:da:
d2:6a:ba:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 11:28:43 2024 by rpki-client on console-ams.rpki-client.org