Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/57EC500865F311EF8AD91F75C4F9AE02.roa
File: 57EC500865F311EF8AD91F75C4F9AE02.roa (raw, json)
Hash identifier: 6cWGZper0LEoTW+x6DwKQwMobZe3u5PkY6wNuH+oAFo=
Subject key identifier: 7D:7B:DA:CF:DD:B3:C5:1B:E5:AB:34:66:8E:42:63:F5:3A:E5:11:DF
Certificate issuer: /CN=A91EAE25/serialNumber=287BB0CD66FBD7E5B7A88BA66789124C0B04C578
Certificate serial: 0AE2
Authority key identifier: 28:7B:B0:CD:66:FB:D7:E5:B7:A8:8B:A6:67:89:12:4C:0B:04:C5:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHuwzWb71-W3qIumZ4kSTAsExXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/57EC500865F311EF8AD91F75C4F9AE02.roa
Signing time: Thu 29 Aug 2024 10:42:10 +0000
ROA not before: Thu 29 Aug 2024 10:42:10 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 137029
IP address blocks: 103.140.212.0/24 maxlen: 24
103.140.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Aug 2024 12:18:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2786 (0xae2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE25/serialNumber=287BB0CD66FBD7E5B7A88BA66789124C0B04C578
Validity
Not Before: Aug 29 10:42:10 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66d05082-259f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:cd:ae:06:bc:da:17:67:e2:59:f4:c2:6f:
a2:83:da:67:c0:cb:d5:0d:02:3a:f9:d3:00:24:a8:
18:2b:78:6b:65:56:e5:7b:49:d2:f9:27:3f:9c:2e:
23:44:70:5b:8c:e3:7a:b7:6f:b6:58:d2:69:fc:01:
21:6f:82:cd:ff:79:4f:99:8f:6d:cd:47:2a:b7:93:
4e:cf:d4:84:b0:d0:f3:bc:b0:c7:07:11:35:4a:4b:
d6:87:6e:13:04:82:b6:fa:72:ae:d0:83:9c:6c:8b:
fb:34:60:33:6a:bb:d2:4b:d1:ed:c6:0b:89:48:0a:
45:3e:54:2d:ad:d1:b4:55:27:63:f8:76:34:d4:34:
67:20:95:e1:16:40:19:d0:22:44:b2:dc:78:89:41:
50:34:d3:10:01:59:95:1a:41:cc:77:72:a0:99:02:
b8:d3:08:59:4d:1f:6b:46:c6:f8:de:d9:6a:e0:54:
1d:b9:b4:b1:f4:13:fb:35:9b:3a:d5:70:27:5b:bf:
31:62:a7:37:a3:d2:d8:49:a9:61:c1:f9:12:3e:4b:
c5:a3:ac:ad:2e:cf:30:32:eb:ef:50:3b:8c:d6:ce:
df:52:b6:6a:33:11:12:64:ff:88:33:36:c5:0b:e2:
b6:2b:c6:b5:bd:89:48:01:b3:5d:eb:07:1f:b3:8e:
49:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7B:DA:CF:DD:B3:C5:1B:E5:AB:34:66:8E:42:63:F5:3A:E5:11:DF
X509v3 Authority Key Identifier:
keyid:28:7B:B0:CD:66:FB:D7:E5:B7:A8:8B:A6:67:89:12:4C:0B:04:C5:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHuwzWb71-W3qIumZ4kSTAsExXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/57EC500865F311EF8AD91F75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.212.0/23
Signature Algorithm: sha256WithRSAEncryption
94:75:90:4c:db:d9:c1:23:7a:73:42:91:db:30:15:30:da:f0:
cc:e4:26:dd:f1:4c:76:d5:7b:64:ec:71:5d:49:4b:7e:f1:6a:
78:cb:d5:8f:6b:1a:73:be:03:b6:17:12:fa:4b:b5:3b:b8:f2:
f1:72:a1:57:1b:69:b0:fd:37:f8:96:f0:0a:6e:73:87:93:ed:
9c:8c:af:35:69:07:a0:66:ec:56:d7:d0:70:16:bf:aa:ed:91:
13:e6:81:02:b5:aa:58:f8:c9:20:53:ce:fa:ee:8f:80:99:14:
5f:fe:f9:54:07:0d:e1:b7:d8:d3:dc:f1:84:e5:bc:62:8b:ec:
a9:4f:ad:9f:5c:23:90:4f:04:38:f5:34:33:f0:90:b1:f4:3b:
a2:c7:a0:95:0f:25:63:4a:f5:16:e3:55:50:3a:3d:5e:5f:61:
1e:a7:92:01:43:81:aa:8f:e2:da:1e:1b:c0:02:b4:cf:65:2c:
6e:21:5d:8d:7f:32:3d:f9:e0:fa:98:25:80:77:98:3a:15:c3:
4d:8b:2e:8e:b0:c5:90:f1:70:3a:88:8d:84:32:3f:5d:29:a5:
c4:24:ca:61:1d:b6:b0:45:df:69:76:09:de:80:97:4e:19:e1:
a3:0b:10:4b:31:80:a9:8f:7d:de:e3:de:10:98:b4:86:09:26:
38:25:2a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 14:27:37 2024 by rpki-client on console-ams.rpki-client.org