Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/0B13C1F2B0CF11ECBD82BF74C4F9AE02.roa
File: 0B13C1F2B0CF11ECBD82BF74C4F9AE02.roa (raw, json)
Hash identifier: Ak0AiCI0TjqNh37ktlbjMGgoCIM7HeGud2EBMfbc5SA=
Subject key identifier: 45:3B:12:0B:9C:AE:2C:EE:F6:94:5F:61:C3:AE:BE:2B:99:16:93:D3
Certificate issuer: /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9
Certificate serial: 0ABA
Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/0B13C1F2B0CF11ECBD82BF74C4F9AE02.roa
Signing time: Mon 26 Jun 2023 20:20:04 +0000
ROA not before: Mon 26 Jun 2023 20:20:04 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 58715
IP address blocks: 103.92.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 16:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2746 (0xaba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9
Validity
Not Before: Jun 26 20:20:04 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6499f2f3-1bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:39:f1:a6:d7:76:39:2e:cb:25:bd:f6:f0:fd:
7c:6f:cf:f6:d5:93:d3:26:be:7a:cd:20:42:d3:ad:
47:33:a9:59:e4:3a:66:c3:df:b8:e4:e8:8b:0f:bf:
d7:8b:e1:39:8f:ed:9b:74:a1:1c:5b:d5:86:d2:a1:
18:43:9f:85:8d:50:f7:65:39:5c:e1:f3:63:e2:a9:
35:04:a0:a2:f9:eb:31:20:b7:e4:a1:7c:ba:6b:6d:
00:77:6e:13:69:c2:08:98:c2:14:f9:0e:fe:44:c2:
34:09:53:f2:8f:4b:7b:6a:50:42:7f:ea:54:9e:0f:
fd:40:b0:2a:ad:56:a0:ec:6a:b2:94:be:db:31:27:
10:55:ae:9f:15:89:76:35:eb:20:a2:16:45:ab:36:
d2:c0:21:f3:18:49:02:5c:89:42:6f:1a:b4:1c:ca:
c6:0e:2a:82:4c:c8:74:16:c1:f7:2a:f4:64:fd:0e:
3c:7c:e9:cc:20:49:8e:9c:8c:0e:ef:55:70:f7:da:
6f:63:5c:e5:7e:a1:b3:ba:2b:14:25:f8:0d:f3:9d:
b3:fa:bf:ab:79:82:d3:19:37:ea:ce:5d:ea:71:99:
e7:ad:24:8c:49:37:be:49:73:bc:97:9c:3f:0e:4c:
25:54:93:ab:9b:a6:36:9c:ad:36:ae:44:c5:4a:83:
00:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3B:12:0B:9C:AE:2C:EE:F6:94:5F:61:C3:AE:BE:2B:99:16:93:D3
X509v3 Authority Key Identifier:
keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/0B13C1F2B0CF11ECBD82BF74C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.92.152.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ab:89:f2:f3:9e:db:ab:39:1e:a4:c5:0b:f5:d8:ec:d3:14:
d7:5b:98:8b:0d:4e:db:00:ab:1b:03:f6:72:79:dd:7c:32:09:
70:a4:67:e9:a6:5d:15:b3:d8:b9:0d:de:e2:78:cf:0f:fc:d9:
cb:b6:01:6b:74:58:03:f2:91:4a:22:2e:5b:ff:ba:30:77:51:
5a:52:27:85:cc:ee:5c:89:86:e9:f0:8b:1c:32:8a:6c:8c:a1:
e9:98:08:98:52:c7:86:1e:0a:41:37:00:ea:ef:45:85:d4:fb:
5c:36:f6:a1:b4:02:09:75:13:41:d8:f7:46:52:21:e3:d9:d9:
3b:82:4a:19:c9:1f:6f:db:53:1c:e8:4c:cf:9f:29:f0:a1:f9:
f0:e9:ba:5d:85:b7:a1:50:7a:c3:97:ae:cb:11:6f:9a:5c:c1:
d3:4f:a7:2f:3a:bc:25:99:36:5e:c0:75:b9:a7:58:1d:03:b1:
f8:c8:02:ed:41:fb:72:53:91:31:19:b1:86:57:1d:4e:70:57:
d7:c6:17:88:b5:2a:55:41:4f:32:e5:b6:37:df:e6:e8:b6:44:
25:d3:b9:a6:13:49:7b:ad:fc:4d:b7:7a:a0:a4:bf:07:5c:97:
d1:8c:17:33:d6:ac:4e:c6:19:f0:af:77:b5:1a:1d:0d:4f:98:
06:74:fa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:43 2024 by rpki-client on console-fra.rpki-client.org