Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/9C0D2588DC8611EEAA27EA55C4F9AE02.roa
File: 9C0D2588DC8611EEAA27EA55C4F9AE02.roa (raw, json)
Hash identifier: zSUhmJnorSnohITeWISP7AS+whtfcBo10UZK78vM5CQ=
Subject key identifier: 77:62:46:D5:B6:63:A8:3E:5C:38:7E:EE:C4:1A:09:33:FA:9B:33:01
Certificate issuer: /CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Certificate serial: 98
Authority key identifier: E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/9C0D2588DC8611EEAA27EA55C4F9AE02.roa
Signing time: Thu 07 Mar 2024 13:28:40 +0000
ROA not before: Thu 07 Mar 2024 13:28:40 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 16589
IP address blocks: 103.237.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 06:59:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Validity
Not Before: Mar 7 13:28:40 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=65e9c107-6a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2b:11:a7:3f:ac:64:4a:db:00:79:15:22:66:
3b:33:84:83:02:c1:88:4c:11:63:93:2e:60:cb:ee:
1a:4e:ac:90:7d:4d:d6:ca:05:84:29:46:5c:bf:73:
15:83:66:e3:e5:5c:cc:39:23:c0:e7:93:35:95:c0:
52:be:25:df:82:a2:c9:29:a5:6f:b5:12:b1:ed:f1:
cb:d2:fd:24:2b:48:cd:da:79:90:09:c2:10:75:96:
8e:18:8a:09:6a:e0:12:20:c7:bc:40:d1:71:12:8f:
3d:4b:d2:11:2a:e0:81:d3:a5:aa:31:4c:87:16:50:
d6:a9:35:35:64:aa:a7:01:16:19:59:a8:05:49:50:
5c:38:8e:07:f7:2a:cd:1e:ba:61:9a:12:ff:9e:71:
bf:8f:7d:f0:22:d6:5e:97:33:93:ab:67:dd:eb:c3:
e7:9a:29:95:88:05:5c:43:9b:02:30:d2:09:f0:67:
40:86:4f:bf:fc:95:4c:2d:3f:cf:9f:1d:76:1b:74:
23:97:c1:93:7f:06:29:91:e4:f3:46:df:95:e2:fa:
20:e7:9c:73:43:73:ed:6f:df:ab:d9:0f:4b:7d:4a:
4c:59:ea:f6:20:de:d3:70:1e:fc:87:63:55:4c:31:
73:5e:48:5b:48:0c:a5:68:cd:ae:ef:68:57:0b:9c:
ca:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:62:46:D5:B6:63:A8:3E:5C:38:7E:EE:C4:1A:09:33:FA:9B:33:01
X509v3 Authority Key Identifier:
keyid:E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/9C0D2588DC8611EEAA27EA55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.237.113.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:46:c7:c6:b6:83:3f:c6:ff:83:cc:5e:1c:03:3d:d7:da:be:
fb:b9:5c:97:d9:6d:14:0a:d4:28:da:37:14:b9:9c:00:4d:81:
70:d0:f6:3c:5a:a9:0f:b6:e5:3c:8e:79:87:13:91:a9:72:25:
70:1d:37:c4:48:72:7d:0f:e2:5e:e9:9e:31:ff:2b:27:a1:10:
a5:cf:87:56:a0:d4:22:e1:2e:a2:a3:44:ba:dc:5d:12:51:7b:
21:79:92:dc:13:34:a9:c7:45:f1:97:b2:bd:83:d5:b4:c9:03:
57:81:f9:71:35:c1:a7:b9:61:cf:37:0d:00:aa:46:dd:72:73:
3f:d6:1b:d5:21:08:fc:70:e4:95:c3:88:08:39:7d:31:30:c4:
60:89:12:b6:db:40:c9:3f:8b:7b:7a:61:0d:dc:44:89:6e:77:
d9:0c:6e:24:3e:8c:c5:50:25:37:6f:32:39:70:b8:62:dd:47:
e0:87:8f:b4:cd:52:92:48:cf:4b:6d:38:22:6d:24:f0:a3:d1:
24:28:31:a5:0c:bc:56:79:69:c5:0b:76:af:5d:86:66:e2:40:
b8:71:b4:09:77:4d:73:69:53:dc:20:20:9b:ec:8a:ca:cd:d7:
84:35:e4:b8:e0:23:7d:f1:31:9a:d3:7f:46:09:cd:af:3a:90:
f8:e3:13:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 08:31:54 2024 by rpki-client on console-fra.rpki-client.org