Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/531C7DEA7BA711EF8ABBA081C4F9AE02.roa
File: 531C7DEA7BA711EF8ABBA081C4F9AE02.roa (raw, json)
Hash identifier: J1/Q70NeZ8govSQiJoParS2fYeSFyyEbYMpOsYEepW4=
Subject key identifier: 81:FD:D8:79:59:96:1D:F0:75:B7:F0:A9:DC:27:E6:5C:5E:09:20:B7
Certificate issuer: /CN=A91A998A/serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65
Certificate serial: 06
Authority key identifier: 9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/531C7DEA7BA711EF8ABBA081C4F9AE02.roa
Signing time: Thu 26 Sep 2024 01:33:26 +0000
ROA not before: Thu 26 Sep 2024 01:33:26 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 59065
IP address blocks: 103.50.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A998A/serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65
Validity
Not Before: Sep 26 01:33:26 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66f4b9e5-0d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:39:25:66:da:b4:de:a0:3c:7f:21:09:66:
3d:b2:ea:dc:ad:be:65:56:87:97:f2:b6:99:4e:f3:
c5:49:6f:f4:fb:e6:9f:fe:6f:91:bd:f8:16:92:c2:
64:1a:7f:07:37:41:6e:f6:40:45:18:15:d4:65:ea:
5b:e0:5a:07:01:46:27:48:78:2a:22:3f:62:dc:fe:
f8:6b:ab:1e:33:35:79:0f:f9:36:29:44:a4:07:73:
f1:7f:15:ec:37:4b:84:be:a9:ce:17:c8:f4:33:b1:
6c:0d:94:f0:2a:c6:f6:2b:31:32:31:b2:86:01:28:
e1:b6:e8:60:b8:d7:b3:96:ac:67:03:42:b9:03:71:
f9:4f:e7:dd:4b:88:d5:ed:63:d2:af:54:6d:3f:6a:
b0:3f:23:93:d9:4e:cd:d4:7b:17:18:86:99:e0:09:
6f:60:52:78:aa:c0:0e:bb:d1:27:e4:cc:48:4e:9f:
b8:87:e4:88:0d:6b:28:33:c1:e2:52:5f:f2:b5:73:
4e:96:91:5f:b8:8e:a3:89:e6:8a:43:7b:87:8e:8e:
2b:8c:ca:39:78:bd:92:dd:50:56:46:6f:a4:cb:0c:
24:70:5f:c9:7e:5e:39:ad:0c:0c:de:51:19:b3:80:
67:21:36:2e:1b:de:e2:82:d9:4a:f7:0f:a3:8c:3f:
01:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FD:D8:79:59:96:1D:F0:75:B7:F0:A9:DC:27:E6:5C:5E:09:20:B7
X509v3 Authority Key Identifier:
keyid:9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/531C7DEA7BA711EF8ABBA081C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.50.2.0/24
Signature Algorithm: sha256WithRSAEncryption
78:41:92:de:df:d8:23:09:99:1a:95:5e:01:df:a0:77:db:19:
7f:ef:63:92:e4:65:92:8d:44:c3:94:29:83:81:02:16:05:1e:
90:9a:63:fe:97:7b:da:7a:e8:8c:ff:cb:43:96:46:e8:9c:d6:
d6:88:89:c0:02:58:cd:57:16:87:22:aa:87:73:cd:29:94:23:
0b:0e:74:25:a4:5a:ce:95:93:73:2a:e0:fb:7f:2b:da:66:f1:
5c:3b:e3:4a:f2:fc:8c:1d:1e:5c:ed:ef:57:86:c2:81:3e:3a:
2f:86:55:27:1f:7d:e1:fc:59:ae:7d:e2:0e:b8:13:2c:54:9b:
4e:65:57:3f:09:ea:9d:8a:13:66:e1:54:3b:a9:91:2e:83:a7:
b4:ef:88:56:93:6e:7c:1b:9e:a0:6f:7e:4d:c8:43:8a:b7:b1:
ea:2d:61:d7:bc:0f:47:e9:75:ef:e3:d5:ee:ac:6b:91:c5:fc:
fb:c5:30:ab:5d:b9:3d:1a:55:17:6b:77:5c:d6:f7:0a:a2:19:
92:cc:83:3c:65:54:54:bd:7e:85:16:c7:48:a7:31:a8:55:eb:
66:49:5e:f3:99:f0:5d:bf:da:3e:62:f7:7b:c3:d3:0b:49:22:
12:b8:2a:7a:6e:ac:1c:91:1a:b0:c0:bd:ad:3c:4b:d0:6c:ed:
b8:c5:11:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 07:01:10 2024 by rpki-client on console-ams.rpki-client.org