Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/06DAC0A45A4211EE81F5B053C4F9AE02.roa
File: 06DAC0A45A4211EE81F5B053C4F9AE02.roa (raw, json)
Hash identifier: nVFZAEUJy1Kcx2fSISi9KsfKblCxbm3z05/nfmoVpEw=
Subject key identifier: 1A:BF:7C:7C:4E:35:E7:81:23:B8:5C:7E:C1:E0:0A:FE:A7:A3:17:2D
Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8
Certificate serial: 8D
Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/06DAC0A45A4211EE81F5B053C4F9AE02.roa
Signing time: Fri 03 Nov 2023 23:59:50 +0000
ROA not before: Fri 03 Nov 2023 23:59:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139351
IP address blocks: 103.121.6.0/23 maxlen: 23
103.121.6.0/24 maxlen: 24
103.121.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 00:56:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8
Validity
Not Before: Nov 3 23:59:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65458976-ae52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:67:85:db:58:cf:98:a7:a0:de:86:b3:50:ce:
0f:c6:29:04:fe:ed:33:55:7b:61:86:65:05:54:d2:
e3:d8:dc:4c:36:d5:a8:99:e0:ca:50:eb:73:d1:11:
96:5e:d3:f3:18:81:64:10:79:94:fa:b9:14:a5:00:
8b:b4:6a:88:32:43:aa:b5:38:28:29:12:8b:4d:96:
5f:2a:43:79:2e:85:bf:62:e9:78:09:57:3c:b4:c1:
9e:6c:24:87:97:20:7c:8f:36:5d:9e:29:ec:98:9d:
f3:00:1a:9d:b3:a7:19:28:b1:9b:5e:75:ac:e1:12:
84:c4:6d:9d:5f:4f:11:15:ae:a2:c2:8b:47:71:27:
a5:09:5e:1f:fc:a3:2f:d9:b8:e2:64:ee:94:97:5b:
9b:b7:d3:e7:c3:50:75:2c:51:01:96:cd:b0:9a:d8:
60:a3:99:58:2c:07:dd:06:9c:5c:13:00:25:1d:1a:
1e:ff:7d:ed:9e:d2:3e:2e:2c:bc:8f:b3:71:c4:1a:
09:63:59:67:cc:7b:84:3c:97:bb:6b:c8:da:cd:ce:
60:97:0a:d3:24:f8:30:1c:9c:ad:d4:54:bc:4b:9d:
cb:92:f7:35:57:c7:70:10:85:45:c2:a1:b6:ef:dd:
d8:dc:fc:26:d8:27:ce:53:dd:f7:57:35:ed:7d:b4:
83:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BF:7C:7C:4E:35:E7:81:23:B8:5C:7E:C1:E0:0A:FE:A7:A3:17:2D
X509v3 Authority Key Identifier:
keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/06DAC0A45A4211EE81F5B053C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.6.0/23
Signature Algorithm: sha256WithRSAEncryption
16:bc:6b:4b:51:83:f5:d6:01:95:90:ca:53:b1:a4:ea:8d:61:
c5:30:94:07:cf:c8:1c:6b:f1:09:fc:2a:2b:38:0e:56:e4:93:
ed:cc:41:35:db:8c:87:da:e4:5e:88:a1:72:c2:18:13:dd:41:
4c:b1:b7:04:a9:48:8a:c9:67:2f:87:3b:22:cb:ec:8a:b0:c8:
69:e6:3e:13:b0:92:21:cf:d2:a5:0e:48:a0:c6:8c:bb:c8:e9:
9e:82:5a:97:81:98:45:71:fd:12:72:cf:be:25:3f:a6:9a:07:
da:2d:6e:83:ed:1b:f1:66:d2:8a:82:a8:53:6e:d1:a9:d8:10:
ba:1f:1c:ed:b6:22:00:c7:53:93:4e:41:74:93:d3:4b:bf:c3:
9f:ca:b0:5d:38:90:8a:a6:39:61:fe:6b:a8:d4:5a:06:04:26:
2b:c2:34:03:0b:28:1e:92:7c:2f:cc:40:fd:4f:5b:ce:70:99:
bb:2a:b4:7a:c5:fd:3c:53:f4:1d:bd:ed:96:18:68:67:57:5a:
63:90:4a:12:a4:9e:30:d8:62:dc:83:37:e8:90:bb:5b:9f:0b:
77:f1:af:fe:ef:12:37:e3:e0:37:9b:8d:4a:5f:c9:09:c0:a5:
19:25:67:d0:87:74:d3:85:d9:31:49:90:c5:42:75:30:24:e4:
b6:a8:58:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:47 2024 by rpki-client on console-fra.rpki-client.org