Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/DE4355F6539411EEBA963949C4F9AE02.roa
File: DE4355F6539411EEBA963949C4F9AE02.roa (raw, json)
Hash identifier: SW08VGeS9/MJT0TOJuMZHSBP9zht15zCHsw1oYslnqM=
Subject key identifier: 7C:67:03:C8:2F:9D:C8:9D:CF:12:D4:5A:E9:7F:5F:8C:AB:CF:35:6A
Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial: 05
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/DE4355F6539411EEBA963949C4F9AE02.roa
Signing time: Fri 15 Sep 2023 06:55:34 +0000
ROA not before: Fri 15 Sep 2023 06:55:34 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 151810
IP address blocks: 103.218.172.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Validity
Not Before: Sep 15 06:55:34 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=6503ffe6-4b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7d:49:c6:ef:69:f0:76:9a:34:67:d5:32:8c:
67:5e:e0:9c:55:45:7e:01:e5:b3:08:99:b3:a0:21:
6f:9a:0b:eb:db:a6:7a:e0:92:fe:94:45:2a:f9:15:
b7:3a:06:21:d7:67:a2:27:03:95:4f:01:12:f6:7a:
32:f2:8d:62:f9:d6:c3:8d:03:ae:5f:ac:fc:81:49:
61:81:43:5d:1e:86:1a:ca:c4:a7:c8:0c:fd:1c:e6:
20:6b:32:96:0d:91:dd:c4:5c:fb:00:48:63:5b:31:
7e:81:78:8c:ce:5a:3e:d2:f3:b5:24:4f:47:2e:89:
6a:00:b6:63:35:13:21:b6:02:0c:7d:12:c8:c7:15:
5f:59:19:1f:2e:f9:a9:a5:f0:62:fb:68:5d:c9:7c:
1f:02:24:eb:18:f3:93:b5:87:dc:89:e1:fe:c1:d7:
6d:04:1e:81:96:ae:ca:18:15:c9:0b:af:65:ce:e0:
54:22:ab:bc:fd:f4:bd:0b:09:73:71:58:c9:65:da:
b1:3b:b8:f6:9c:6f:2c:d6:ba:c3:fe:40:f6:da:ad:
5f:79:8a:a0:c5:5a:d0:0c:f6:01:6f:dd:97:d5:be:
4e:83:b5:27:7d:25:6c:13:82:a6:72:38:e1:79:b5:
52:6c:df:64:5f:ca:d7:54:4f:0b:75:90:2e:ff:bd:
ca:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:67:03:C8:2F:9D:C8:9D:CF:12:D4:5A:E9:7F:5F:8C:AB:CF:35:6A
X509v3 Authority Key Identifier:
keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/DE4355F6539411EEBA963949C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.218.172.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:39:09:5b:61:df:f3:6e:7e:f5:2f:cd:68:d6:af:80:95:35:
40:55:f5:86:83:3a:ec:cd:ad:de:51:f2:f5:80:e3:47:35:1a:
82:1a:2a:5e:e9:ff:47:cd:c8:c1:29:24:49:78:db:05:a2:a9:
39:03:15:04:2e:af:b7:ec:7b:03:7c:8a:c9:a0:fd:3e:56:0f:
95:c1:d5:09:fb:76:5d:a8:72:9d:e6:7f:e9:a1:52:32:c2:9f:
81:42:4a:a3:b0:e3:6f:d1:a0:69:1e:b5:a7:f7:3b:66:63:c3:
a9:91:2c:b7:9e:ef:c5:e9:21:aa:38:ff:7e:e6:3d:ed:83:f2:
4e:7d:22:c3:4a:55:a4:ef:52:20:6a:0d:da:f6:40:2d:66:01:
1f:75:ff:ae:88:b2:56:11:78:a3:18:5a:c2:14:0c:4c:ab:6e:
58:ca:8f:b0:e3:c0:19:2c:a3:ef:5b:d3:97:88:a5:8c:92:9b:
53:dd:88:e7:55:28:cb:79:8d:03:38:f3:6d:13:e3:e8:a5:f3:
d6:95:04:74:d0:15:f3:5d:b2:98:c8:ef:73:ed:95:c8:ea:87:
81:fd:ac:52:d6:cb:e6:a9:67:08:c2:b7:2e:dd:dc:7a:83:ee:
f4:27:3e:a6:d7:ac:fe:51:ba:c0:64:da:04:36:9c:9d:f4:55:
fd:3e:b9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 4 08:52:26 2023 by rpki-client on console-ams.rpki-client.org