Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/192CF04612B211EF9AE11338C4F9AE02.roa
File: 192CF04612B211EF9AE11338C4F9AE02.roa (raw, json)
Hash identifier: CsYjBBAZX4dbkilRAKMS06dHkTktXWP3jT9HeijCXAM=
Subject key identifier: 33:31:8F:E5:BF:91:DF:9C:87:81:09:10:12:6C:2E:04:15:8E:15:B3
Certificate issuer: /CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
Certificate serial: 0BFE
Authority key identifier: 54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/192CF04612B211EF9AE11338C4F9AE02.roa
Signing time: Thu 16 May 2024 12:28:26 +0000
ROA not before: Thu 16 May 2024 12:28:26 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 43260
IP address blocks: 59.152.60.0/22 maxlen: 22
103.205.180.0/22 maxlen: 22
103.205.180.0/24 maxlen: 24
103.205.181.0/24 maxlen: 24
103.205.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 May 2024 10:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3070 (0xbfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
Validity
Not Before: May 16 12:28:26 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6645fbea-e8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:a1:d2:e5:2c:67:d1:26:f7:7b:60:a4:08:ab:
89:43:b6:25:08:ea:bf:d4:01:ca:1c:79:99:fc:00:
9e:86:1c:55:1e:70:03:e8:d7:4b:74:8f:b9:99:e2:
d3:d9:ab:9b:67:b6:45:53:6d:3a:90:f0:ff:d9:27:
68:f9:59:5d:17:64:16:5a:2a:90:7b:af:84:30:00:
d2:3f:16:b8:03:c1:72:19:3d:45:7f:78:4d:81:52:
46:75:7c:5c:fc:32:98:44:2e:3f:4c:4b:32:e1:14:
52:25:8b:22:4c:88:38:8d:a9:8d:01:35:3f:9c:1d:
6c:55:7b:a6:80:8c:31:ec:5d:d5:ec:98:bc:f0:75:
e0:e5:02:5c:f1:7d:60:bc:3a:4d:c3:6d:44:3e:96:
bd:c9:90:0f:e4:5b:85:3c:be:d3:fe:e3:99:c0:cb:
ab:71:a2:ee:10:48:aa:42:e4:9a:3a:ea:40:98:8a:
9b:7c:63:3a:87:c9:3b:35:6f:79:0f:d6:85:52:e3:
be:8e:ea:46:86:b5:e0:e3:4c:8d:1e:bf:9c:e1:2f:
4d:c9:5a:ea:eb:4e:df:2c:e4:a8:99:2e:a5:5a:27:
46:07:d4:08:31:7b:47:87:c1:b7:ad:df:93:72:a4:
8a:04:e4:b4:ed:cb:12:76:63:a2:ba:1b:9b:3c:2f:
0c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:31:8F:E5:BF:91:DF:9C:87:81:09:10:12:6C:2E:04:15:8E:15:B3
X509v3 Authority Key Identifier:
keyid:54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/192CF04612B211EF9AE11338C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.152.60.0/22
103.205.180.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:f1:74:64:ce:ca:31:8e:8a:02:c6:41:14:ff:f4:ea:31:06:
d0:d6:d2:d6:ae:b0:1b:20:41:d5:70:e0:c5:ce:36:85:d8:c8:
0f:d0:6b:fe:b6:5a:d4:d6:37:6c:1e:f9:db:8e:98:e0:83:b9:
d4:cd:cf:b8:f3:d4:07:fc:9d:2f:bb:ab:44:ea:d1:60:47:52:
45:6d:b4:b7:b7:53:0b:f9:3a:7b:c7:bb:02:33:17:27:14:56:
11:64:1a:12:d9:ae:d0:a7:85:8a:49:56:6d:8c:f2:d0:ff:89:
40:1f:3b:66:46:51:81:75:d2:4b:82:d0:e1:d5:a5:ac:a8:51:
49:f8:08:f1:1d:7d:bd:7b:36:51:53:c0:00:42:31:a0:df:9b:
d1:e9:d4:3c:dd:46:48:ae:27:42:79:bd:84:0e:d8:e9:10:c6:
65:f4:3d:fa:c0:96:99:ec:40:13:34:00:a7:28:f5:e3:60:2c:
aa:a4:bc:fc:57:48:c9:06:2a:74:f0:6d:84:95:d4:6f:cf:ac:
dd:2e:46:24:26:a8:fe:17:4f:4a:d9:ff:16:19:d2:c7:88:1a:
16:17:e2:7b:5a:2b:09:6e:69:09:b2:f4:16:f7:84:7e:7a:3e:
f3:d7:6b:58:35:8d:1d:f9:38:7f:0d:fd:97:25:a1:a4:18:11:
91:0e:d7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 11:42:27 2024 by rpki-client on console-ams.rpki-client.org