Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/E5373ACAE8B111EC89E9AC5DC4F9AE02.roa
File: E5373ACAE8B111EC89E9AC5DC4F9AE02.roa (raw, json)
Hash identifier: Vv7IK3dq6aP6lhXHNi/tY7vFqKsElZks9ZR9tHdQ6nw=
Subject key identifier: 9A:33:48:44:83:3A:D2:83:7E:04:BA:C6:87:53:9E:9C:0A:D4:F7:F4
Certificate issuer: /CN=A91FDFB7/serialNumber=EA51CE20A59E42B8C71D26AA6B886690CD152984
Certificate serial: 06EF
Authority key identifier: EA:51:CE:20:A5:9E:42:B8:C7:1D:26:AA:6B:88:66:90:CD:15:29:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/E5373ACAE8B111EC89E9AC5DC4F9AE02.roa
Signing time: Fri 31 May 2024 00:02:08 +0000
ROA not before: Fri 31 May 2024 00:02:08 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 4764
IP address blocks: 103.94.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 05:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1775 (0x6ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDFB7/serialNumber=EA51CE20A59E42B8C71D26AA6B886690CD152984
Validity
Not Before: May 31 00:02:08 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66591380-9a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c6:4d:f6:2e:ca:29:70:dd:03:70:76:00:56:
16:0b:c6:1a:5b:0c:19:6a:12:38:f9:0d:97:f3:07:
d1:dd:9f:71:2e:01:44:9b:1c:1b:47:ad:38:cf:aa:
41:c2:d2:0b:ae:ec:c9:64:af:93:ea:8c:3e:55:ca:
18:83:30:25:dc:1c:a1:8e:d2:4d:02:c8:23:30:05:
d6:e0:6f:13:9c:83:5d:e4:e8:85:0f:c6:52:b3:ba:
73:6f:e8:cf:44:aa:cf:c7:fa:59:62:bd:b0:94:59:
4c:cd:d7:e9:d2:c8:30:1d:fa:36:69:02:de:a4:c0:
91:7f:05:99:28:c5:9f:ec:d8:bd:76:c2:ae:76:f2:
79:fd:f3:20:02:89:5f:fc:e8:db:9c:7f:80:f9:42:
6f:5b:64:fc:95:9f:70:9d:b4:03:31:29:b8:f8:a7:
23:fc:6f:69:ff:27:17:db:d4:ee:e2:7f:04:92:d3:
29:65:37:6f:36:5c:71:11:92:d8:55:5d:ae:57:2d:
f2:04:bc:08:2a:dc:b3:c2:db:10:bf:87:42:7b:3d:
08:0a:04:1a:6b:58:09:ee:77:8b:a2:40:78:b8:a8:
36:40:02:b9:4c:f8:8b:9c:30:c3:a6:10:b6:17:18:
1e:0b:8a:bd:c0:98:5d:7f:2b:f9:9f:39:4a:6c:5d:
84:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:33:48:44:83:3A:D2:83:7E:04:BA:C6:87:53:9E:9C:0A:D4:F7:F4
X509v3 Authority Key Identifier:
keyid:EA:51:CE:20:A5:9E:42:B8:C7:1D:26:AA:6B:88:66:90:CD:15:29:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6lHOIKWeQrjHHSaqa4hmkM0VKYQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDFB7/A51EC584140A11EB9636FF22C4F9AE02/E5373ACAE8B111EC89E9AC5DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.94.60.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ca:0e:33:5d:87:56:8e:94:d0:67:97:7f:2b:be:8e:17:a8:
86:32:eb:52:f6:82:55:e2:3c:44:6f:61:28:51:07:8a:8f:30:
36:be:71:5b:55:19:33:58:c5:15:a0:4c:f6:73:54:89:2c:4f:
9a:68:5d:d4:d7:b0:c6:88:be:da:ac:21:cf:43:c4:48:c3:4e:
8a:4f:a8:d1:df:84:0e:f0:dd:d7:fd:f3:42:52:a7:d0:b1:05:
80:a3:5b:76:07:6b:d2:ac:ec:1d:c3:01:a6:d8:ac:22:fb:9e:
6d:33:92:23:0a:7b:a4:2a:cf:6b:6f:3e:b0:cf:9d:a1:53:5f:
c6:34:c4:0d:d1:a2:b7:0c:99:b5:a3:6d:17:a0:d9:4f:6d:3b:
c1:19:a8:f0:5b:f4:c1:da:71:fa:2d:a1:16:54:a5:13:d5:a6:
ae:62:14:37:81:b9:67:e7:91:a2:b0:fd:dc:4a:d7:ed:de:32:
8e:fe:f5:64:72:92:04:87:2e:a7:fa:7d:14:92:49:b8:b0:73:
5f:ff:d2:84:ed:2d:06:27:69:79:ac:ad:a2:87:a2:b3:18:ce:
3c:3a:73:b3:e0:f1:f6:93:bc:37:a0:2d:57:d1:1f:e1:7e:9c:
83:63:4a:70:de:a5:0c:75:3a:40:77:86:96:69:f3:dd:1b:a2:
b4:cd:2a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 07:01:10 2024 by rpki-client on console-ams.rpki-client.org