Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/C6C7987C1CD111EF93030913C4F9AE02.roa
File: C6C7987C1CD111EF93030913C4F9AE02.roa (raw, json)
Hash identifier: wrZQMw3Q1+dkzFb5r8UjMyzuDr//wHMcZVPL2CBffoA=
Subject key identifier: A3:EA:96:6C:26:F0:D8:51:AD:81:45:19:F7:FF:C4:77:7C:A2:03:9D
Certificate issuer: /CN=A91A822F/serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10
Certificate serial: 1C
Authority key identifier: D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/C6C7987C1CD111EF93030913C4F9AE02.roa
Signing time: Tue 28 May 2024 09:07:58 +0000
ROA not before: Tue 28 May 2024 09:07:58 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 103.6.160.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jul 2024 00:56:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A822F/serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10
Validity
Not Before: May 28 09:07:58 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66559eee-ec6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:db:3f:e6:c4:63:39:8b:b0:bd:54:a7:7b:f6:
13:d7:40:01:80:6d:b8:cf:7c:89:a1:0c:c6:f9:fc:
60:84:92:bd:7d:f1:8d:21:d5:44:68:dc:7b:98:0b:
fc:fe:1e:b0:bd:09:2f:23:2c:43:e9:83:a3:3e:8f:
20:29:9f:ec:91:03:aa:1a:42:84:5e:2d:7f:87:f2:
a1:09:ca:b0:d7:b0:ed:79:01:c8:5a:fb:9d:42:82:
78:79:8e:50:30:b2:51:1a:d2:d2:1e:d0:a4:88:e8:
28:20:69:52:1e:e0:60:ca:04:10:5c:95:1a:6b:30:
dc:1c:b1:57:ec:24:c5:a1:ed:ff:46:70:e3:f1:74:
fd:7f:1d:c5:63:3b:38:1d:1b:78:b6:ba:7a:99:8d:
ba:a8:7a:ba:e1:4f:54:0c:e7:8c:65:bc:53:9c:ab:
9b:49:ee:af:19:eb:ad:4b:78:4f:0a:a7:7c:82:48:
56:c4:d0:72:b3:51:2f:b5:1d:bd:de:b2:d3:29:9d:
2f:a4:84:d8:6a:22:ed:1d:20:16:fd:60:bc:95:0e:
d8:e4:19:17:c7:0b:9c:d8:4f:63:da:a7:0b:d8:42:
00:c2:b8:72:1d:0b:9f:15:a0:02:0d:37:11:9a:6d:
9c:09:29:27:30:3f:b7:d9:41:d6:d1:47:15:c6:fe:
93:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EA:96:6C:26:F0:D8:51:AD:81:45:19:F7:FF:C4:77:7C:A2:03:9D
X509v3 Authority Key Identifier:
keyid:D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/C6C7987C1CD111EF93030913C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.6.160.0/23
Signature Algorithm: sha256WithRSAEncryption
64:f7:fb:59:73:9d:2f:f5:b2:01:37:17:92:15:9c:c9:ca:8e:
ce:74:e7:b3:6d:2e:2d:a0:74:83:58:51:7e:b4:42:bc:42:df:
5c:49:e1:a4:11:67:77:62:21:cc:21:8e:f6:cd:59:0c:fe:3f:
d7:e0:12:b4:db:6c:84:b7:d7:e1:01:2c:58:43:36:bd:e5:9e:
89:7f:28:73:41:04:ee:f6:a1:c8:93:de:35:37:c1:6b:83:a0:
19:48:f1:38:d0:f1:35:5f:52:2a:00:6d:4e:72:ba:61:12:41:
87:77:6c:76:c5:76:fc:1a:dd:0f:20:10:c1:ce:ff:25:a1:6b:
d0:df:ce:0f:8b:b4:b0:93:69:1b:9d:11:92:31:73:22:0b:0c:
f5:a7:52:be:01:65:6e:0f:5c:8a:90:3e:e3:e1:c7:17:8a:a2:
29:a4:c1:c4:5e:60:56:ab:c7:50:9b:38:e7:f5:83:a1:2c:4c:
45:24:b8:dc:90:97:38:2f:3e:9d:0b:5e:36:08:2e:c1:c8:dc:
9b:1b:f7:64:52:53:76:df:f9:c5:2c:68:cc:5d:66:21:9e:96:
5c:5a:22:17:ef:7c:be:00:09:60:f1:5a:b5:f5:e4:43:17:30:
bb:18:84:81:91:2a:3e:fa:56:17:ad:9e:42:a6:17:92:c2:84:
cf:f4:d5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 02:37:43 2024 by rpki-client on console-ams.rpki-client.org