Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/6EF7FFF0987511EE86939C5DC4F9AE02.roa
File: 6EF7FFF0987511EE86939C5DC4F9AE02.roa (raw, json)
Hash identifier: s72f8DPSggXwbbC9fhYKVTYW+PK9kkrW9Ap3KcqlMUs=
Subject key identifier: E5:AD:0B:AC:F9:A0:AF:F1:17:DD:B3:93:F9:83:A7:74:4B:9F:5A:E5
Certificate issuer: /CN=A91B43EE/serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684
Certificate serial: 90
Authority key identifier: 02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/6EF7FFF0987511EE86939C5DC4F9AE02.roa
Signing time: Mon 11 Dec 2023 22:34:24 +0000
ROA not before: Mon 11 Dec 2023 22:34:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138474
IP address blocks: 103.224.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 07:25:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B43EE/serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684
Validity
Not Before: Dec 11 22:34:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65778e6f-3bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:dc:98:73:72:cb:fb:5f:d1:70:c4:0e:a0:
96:55:8d:5e:47:0f:27:7d:f5:b8:31:67:d0:fa:cd:
b2:de:c0:2b:5d:0a:da:fe:a1:a9:61:06:33:76:bb:
2f:a5:67:1e:9c:d6:3c:13:de:04:42:db:dd:5e:57:
94:14:f4:ef:27:e5:b3:80:8f:cb:64:1f:83:ee:52:
00:82:42:5e:37:8a:fe:7b:08:a2:75:5e:07:67:7a:
2b:a6:d7:75:1b:33:9e:61:73:6d:0d:38:09:5b:1e:
5a:9a:c7:72:40:e4:9a:cf:0a:1b:29:f8:b1:42:4e:
14:d6:86:b3:50:ae:c3:36:7b:55:57:1f:16:c3:67:
31:48:4c:b4:c2:70:5e:0e:29:f1:10:b8:8d:d5:3c:
d0:79:6d:7f:bb:9f:7f:d3:d8:f8:88:03:ee:96:fa:
2a:47:b5:39:6c:ed:c5:80:8f:1d:7d:8f:40:90:1e:
cf:d1:4f:30:9c:4c:ef:9b:90:50:62:48:6f:1c:62:
43:12:3e:71:5d:4b:51:28:26:ed:14:46:e8:d9:b2:
57:cc:a3:8d:93:8a:13:12:2b:1a:f1:e3:52:95:11:
04:9d:1d:05:df:5d:eb:15:0b:b3:d5:69:46:7f:74:
88:2e:e2:61:2c:b1:17:35:59:56:ff:fa:7a:7a:2b:
10:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AD:0B:AC:F9:A0:AF:F1:17:DD:B3:93:F9:83:A7:74:4B:9F:5A:E5
X509v3 Authority Key Identifier:
keyid:02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/6EF7FFF0987511EE86939C5DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.55.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:09:34:02:b7:d9:35:94:ec:9e:bf:f3:5e:e4:d3:c8:01:62:
9f:63:1e:b8:d5:44:f6:53:2f:a4:db:35:94:40:6c:92:3d:3a:
78:42:de:b9:33:2c:21:e1:3e:97:3a:2f:0c:e0:15:58:08:b0:
93:a0:25:c5:dc:1d:f6:74:a4:f2:58:a7:72:11:7d:42:b2:c9:
3d:82:6e:97:05:64:10:ff:23:5c:99:81:69:7d:73:cc:f7:91:
01:be:11:73:e4:c2:c6:b1:62:b6:81:9e:57:af:9b:83:16:ca:
19:64:75:bf:12:82:4c:9c:3e:43:d7:da:60:75:57:2d:ea:b6:
f7:e1:da:1b:96:c5:2d:7a:2b:99:06:7a:27:be:d2:8e:ed:97:
a1:c3:f6:2f:33:24:76:1a:2a:26:f9:e3:ca:54:7e:0c:99:0b:
fa:bd:f0:0a:4a:4d:72:80:77:7b:5d:43:01:d7:11:e1:82:c1:
5a:38:fd:21:96:f9:1a:5b:ec:9a:bd:ac:92:20:73:d6:6d:f6:
d5:3f:42:37:4d:c2:ca:6a:44:41:99:b3:93:b4:b1:2e:15:70:
bd:bc:69:ff:90:e1:a1:cd:e7:7c:6b:a5:79:2b:e7:35:98:88:
45:26:5a:e5:90:d7:e3:b6:3f:ca:4f:a0:bc:5b:03:3f:cc:0f:
9f:78:6f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 11:26:08 2024 by rpki-client on console-ams.rpki-client.org