Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/B5AE4CBAB4E111EDABDE6465C4F9AE02.roa
File: B5AE4CBAB4E111EDABDE6465C4F9AE02.roa (raw, json)
Hash identifier: oIRC/aQgJAallAP6T7346kNwrc54H/9fYzZwh6vtxAk=
Subject key identifier: 19:09:06:F8:71:E3:EC:F2:DA:9E:EE:52:81:16:45:71:5E:B7:DB:C7
Certificate issuer: /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540
Certificate serial: E1
Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/B5AE4CBAB4E111EDABDE6465C4F9AE02.roa
Signing time: Fri 19 Jan 2024 05:05:57 +0000
ROA not before: Fri 19 Jan 2024 05:05:57 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 150742
IP address blocks: 103.42.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 10:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540
Validity
Not Before: Jan 19 05:05:57 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65aa0335-5cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:98:ae:85:11:2d:48:53:6b:ed:5e:4d:9c:97:
80:e1:98:e1:24:0d:b1:64:d0:1b:0d:7c:63:2f:1f:
ed:48:fa:86:5b:95:63:d6:84:b2:56:80:27:a7:33:
7c:78:71:86:02:ef:91:69:5c:ce:96:40:f6:65:e6:
93:b6:ef:75:eb:31:56:c5:99:27:80:eb:2d:d1:39:
47:c6:2e:e6:33:51:30:9a:a0:13:2e:cd:c4:ba:e3:
01:96:22:c4:23:cc:1f:8a:ab:36:b1:6c:79:25:03:
4b:46:a9:16:fb:53:24:d8:2c:13:80:0b:16:da:b0:
ef:ee:08:b1:52:e4:44:86:da:68:22:ca:b3:bf:de:
da:f6:be:20:f8:f4:ee:8a:4d:36:16:13:ba:fb:b5:
46:21:21:f4:3e:b9:50:b6:15:d6:e3:32:a7:84:50:
55:32:8d:4f:11:b8:38:c5:73:72:dd:59:69:fb:64:
39:e9:c2:55:30:ce:9e:6f:f8:bd:8f:90:3b:ec:1b:
16:11:80:eb:69:73:e0:a0:8d:59:85:15:32:29:f6:
8f:52:82:ef:34:d1:50:55:0f:a4:c4:4e:af:fe:01:
ec:bd:07:25:d8:46:42:05:0a:af:e4:26:99:cb:bd:
27:58:1d:96:de:fe:79:51:ac:e7:95:75:cf:c0:f1:
2a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:09:06:F8:71:E3:EC:F2:DA:9E:EE:52:81:16:45:71:5E:B7:DB:C7
X509v3 Authority Key Identifier:
keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/B5AE4CBAB4E111EDABDE6465C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.229.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:66:de:ba:1a:ba:5b:60:0d:b9:97:2e:4d:ce:f7:e0:c2:fd:
9e:c7:b9:1d:78:a0:2d:9a:33:5d:db:e0:d9:09:eb:fb:f4:a9:
87:26:26:2c:21:06:e2:d7:d0:ff:fe:2e:24:11:e7:5d:60:e8:
ae:80:ce:63:83:06:fa:ce:26:b5:ce:c1:32:2c:0b:c6:a7:3f:
75:a1:32:a5:d4:80:00:b7:fe:81:4f:4b:5f:aa:da:72:8d:63:
d4:29:e3:dd:e9:ac:20:76:51:a6:c4:ed:f0:3a:46:27:be:1e:
78:0b:2a:96:9f:fd:96:22:6e:12:a5:f1:f2:bb:6f:24:a4:e1:
99:5f:e1:6a:41:25:d7:46:3b:0b:94:1a:a6:14:46:49:69:55:
ba:b6:40:e9:07:f4:90:0c:e2:30:f8:91:23:4c:8a:c8:9f:e6:
13:a8:10:a7:7f:62:e1:8d:28:33:da:45:bf:9b:d7:24:16:b7:
5e:b5:d6:7e:17:15:78:22:38:ec:70:a3:57:3b:b1:41:ea:ed:
53:fe:8a:47:5f:36:a1:a7:41:ea:94:96:ac:3f:c7:2f:2d:ee:
68:ab:1f:26:1e:64:2d:42:72:db:76:a5:cc:91:44:a3:0a:f1:
5d:3e:04:8f:3f:1f:9d:41:47:ef:78:b9:c1:b2:db:39:1c:68:
5a:0e:79:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:36 2024 by rpki-client on console-fra.rpki-client.org