Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B59/E0B4C3C6C07711EC95DB4268C4F9AE02/D2EDB972E4D911EE98F9C92BC4F9AE02.roa
File: D2EDB972E4D911EE98F9C92BC4F9AE02.roa (raw, json)
Hash identifier: hRQQwoZviyRBisiWaIKaZea01PChHMVM0XA0ujFp7+Y=
Subject key identifier: 02:5D:86:C9:DB:A7:01:0D:67:70:51:38:DE:99:A3:E2:D6:8C:59:25
Certificate issuer: /CN=A91F3B59/serialNumber=27507DC7AADF8D091EF577BAF1F00D834788F750
Certificate serial: 0266
Authority key identifier: 27:50:7D:C7:AA:DF:8D:09:1E:F5:77:BA:F1:F0:0D:83:47:88:F7:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1B9x6rfjQke9Xe68fANg0eI91A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B59/E0B4C3C6C07711EC95DB4268C4F9AE02/D2EDB972E4D911EE98F9C92BC4F9AE02.roa
Signing time: Mon 18 Mar 2024 03:44:29 +0000
ROA not before: Mon 18 Mar 2024 03:44:29 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 328608
IP address blocks: 103.101.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 06:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 614 (0x266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B59/serialNumber=27507DC7AADF8D091EF577BAF1F00D834788F750
Validity
Not Before: Mar 18 03:44:29 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65f7b89d-c017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c4:38:2a:77:0a:08:db:b0:2e:ac:66:08:60:
a1:30:35:a8:bb:10:88:f8:40:47:c2:42:3f:55:aa:
b2:b9:4c:2c:71:83:19:11:9d:12:44:9b:a2:2a:29:
20:6e:49:7b:0e:e6:af:4c:51:ff:47:03:10:d1:03:
fb:b1:9c:0c:15:90:b7:ce:95:83:71:49:94:00:7e:
ba:15:3a:ee:37:55:af:4d:f5:cd:58:54:d7:35:57:
78:32:6e:2a:8c:e9:c6:8b:fe:61:e0:9b:2d:a2:3b:
40:c6:9c:e1:5e:89:72:2a:58:78:ed:4e:ed:a8:33:
29:25:94:4f:e9:2a:fd:61:35:40:a3:5b:12:7a:71:
13:22:cc:e7:d9:21:0c:96:b6:8f:51:82:8d:4b:60:
86:44:5f:dc:cd:19:2e:3e:ae:63:43:30:41:1d:3b:
e8:cf:6a:ce:43:4c:34:63:44:9d:3e:69:dd:69:9c:
e0:21:82:64:a4:cc:ed:e6:8e:23:08:99:6d:ee:50:
3c:01:7c:5f:e8:a3:36:4d:f3:5c:a4:9b:06:94:cf:
54:df:81:e7:b1:ca:ca:8f:20:ed:46:5a:d8:15:62:
0e:a1:e3:0b:b5:54:90:f5:38:6b:5d:5c:9c:9d:c3:
6d:6c:67:b0:c9:aa:1c:8e:c9:42:a2:35:e5:a6:80:
3e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5D:86:C9:DB:A7:01:0D:67:70:51:38:DE:99:A3:E2:D6:8C:59:25
X509v3 Authority Key Identifier:
keyid:27:50:7D:C7:AA:DF:8D:09:1E:F5:77:BA:F1:F0:0D:83:47:88:F7:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B59/E0B4C3C6C07711EC95DB4268C4F9AE02/J1B9x6rfjQke9Xe68fANg0eI91A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1B9x6rfjQke9Xe68fANg0eI91A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B59/E0B4C3C6C07711EC95DB4268C4F9AE02/D2EDB972E4D911EE98F9C92BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.28.0/22
Signature Algorithm: sha256WithRSAEncryption
54:6b:1b:e4:e7:26:45:a5:e8:6d:36:3a:37:70:e3:76:34:af:
bc:c9:06:6b:22:2d:ea:d8:ea:e3:6f:d1:3d:16:93:8e:65:06:
e7:a9:95:4c:e6:04:a3:a7:55:0c:a9:fc:9d:d9:b0:f2:fd:6b:
ca:80:e1:ff:f0:6c:69:34:45:ff:f2:ec:db:f9:97:ef:a5:7b:
db:96:78:29:b7:b3:4f:31:72:ed:d8:e1:d9:4f:c9:9f:9f:29:
a8:e9:9e:1a:6a:03:85:e1:60:b3:6d:cb:7f:f1:79:2b:98:13:
ea:3d:45:41:ee:07:8e:e0:17:00:42:e5:aa:cf:de:86:50:81:
a5:32:21:03:94:35:22:7b:b2:d9:86:03:87:4c:47:3d:22:e0:
d8:56:df:5b:71:0a:da:3e:9c:2d:34:dc:10:9f:31:d9:e4:4d:
3c:c9:83:85:eb:21:f8:c8:8a:65:8e:bb:9c:4c:95:b4:7a:78:
1c:70:43:54:e5:5b:04:d5:e7:73:a8:12:a0:cc:ac:91:c0:dd:
26:87:65:a0:58:aa:d6:91:92:45:c3:9d:7f:9b:c1:f8:0d:38:
d2:3a:2a:8d:a0:24:90:5b:f3:12:74:2f:7b:05:b3:34:4c:e7:
ed:bd:d1:6c:01:e1:54:46:1d:c8:f8:7e:13:fa:18:5f:44:b0:
5b:c8:9b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 19 07:00:02 2024 by rpki-client on console-ams.rpki-client.org