Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/BEC610926B5D11EF84E04577C4F9AE02.roa
File: BEC610926B5D11EF84E04577C4F9AE02.roa (raw, json)
Hash identifier: ZTjF9S5HrjYvK+Vtfp/FzqnwxNiKNW2xX7uce3fA1Bk=
Subject key identifier: D3:5E:5C:63:14:32:87:83:8C:92:6B:4B:2C:8F:37:25:72:5D:FC:FE
Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial: 08C3
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/BEC610926B5D11EF84E04577C4F9AE02.roa
Signing time: Thu 05 Sep 2024 08:06:25 +0000
ROA not before: Thu 05 Sep 2024 08:06:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.112.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 11:05:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2243 (0x8c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Validity
Not Before: Sep 5 08:06:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66d96681-7553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:7a:5c:d4:c1:e4:22:01:e2:2d:9a:21:9e:
e3:aa:27:46:92:76:25:b8:2d:05:0d:b3:36:1f:cc:
59:b6:70:34:f7:90:fc:78:01:19:de:58:05:33:f8:
e8:46:d7:50:ae:79:8a:c7:b7:d5:00:8a:a4:65:8c:
ea:4a:f7:55:f6:c7:c1:4b:17:14:13:06:66:28:01:
8b:09:54:0b:ad:49:90:fa:12:25:44:59:99:42:67:
71:db:bc:32:b7:a8:e7:0b:cd:82:b7:cb:0c:d6:1a:
98:c5:21:ba:24:32:86:7f:5b:8a:c1:75:d2:b9:62:
26:38:6e:de:5e:5d:4d:bc:f2:38:bb:43:84:eb:71:
67:eb:0d:21:22:f3:8a:f0:24:ce:f1:c9:29:a5:7e:
53:c6:e9:24:f5:bd:0e:aa:b8:84:90:82:4e:d7:b9:
84:7c:75:c4:fe:8f:35:c9:d9:b8:2a:35:dd:93:35:
7b:c2:5e:1d:3a:9e:52:97:0d:66:f1:f4:04:39:25:
54:f1:e8:98:5b:29:2f:73:70:b2:9b:e1:dc:82:33:
1e:97:05:e4:51:82:34:b8:2b:a8:13:ea:a4:7f:19:
ef:65:5f:9a:ef:4f:49:a7:32:ac:a4:a6:35:a5:a9:
6a:ea:21:46:66:a7:a7:b5:c1:e5:23:8d:8a:10:db:
05:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5E:5C:63:14:32:87:83:8C:92:6B:4B:2C:8F:37:25:72:5D:FC:FE
X509v3 Authority Key Identifier:
keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/BEC610926B5D11EF84E04577C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:2c:cd:1c:ad:d0:bc:e4:56:86:66:99:09:b9:5b:fa:2b:6a:
33:46:52:f8:4e:b1:a0:49:01:0c:df:9c:ab:73:6a:3e:52:89:
4a:87:45:d9:ef:da:8c:3d:89:2f:ae:75:b6:ea:52:11:f6:3f:
28:b9:7e:38:1f:3b:d2:cb:91:32:8c:bc:72:ee:86:2a:82:e5:
5d:72:b1:7f:49:3d:fd:a9:58:51:b4:cb:2f:27:36:d0:97:50:
4f:5e:8a:99:57:f1:3f:86:80:73:d0:92:08:80:e9:c7:2d:ff:
87:ee:6c:1d:a5:e2:47:a0:12:cd:4f:58:a6:27:cb:f8:1f:4c:
9a:db:b4:16:40:99:39:88:41:7e:6c:d5:e5:5b:ca:3c:42:35:
84:cd:7f:28:28:c0:92:4a:56:09:bf:af:ea:dd:f9:2f:cc:8d:
ea:dc:f2:28:d9:c6:2e:0b:af:20:60:76:27:0c:56:3e:c1:8e:
65:b4:dc:ef:12:41:2a:d2:cb:5f:c6:dd:66:e1:a6:39:49:21:
5d:ec:02:22:d2:5e:da:4c:04:c9:c3:56:4a:49:35:21:de:28:
3c:47:0d:42:62:cd:46:1b:92:70:c0:db:fd:48:9b:18:e5:03:
68:07:b2:b7:30:43:07:14:b1:94:72:7b:f6:9b:c7:b2:78:47:
94:25:d2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 14:04:23 2024 by rpki-client on console-ams.rpki-client.org