Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/C4AC9E70A08511EE88B7A85CC4F9AE02.roa
File: C4AC9E70A08511EE88B7A85CC4F9AE02.roa (raw, json)
Hash identifier: 7jHQRrziazy4NYacUschmngVPFEVZ8W1di9ch7hI9B8=
Subject key identifier: 95:FC:A1:01:8D:4D:CB:BF:93:CC:B5:60:AE:BA:E4:04:A7:1C:39:C2
Certificate issuer: /CN=A912DB99/serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810
Certificate serial: 51
Authority key identifier: E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/C4AC9E70A08511EE88B7A85CC4F9AE02.roa
Signing time: Fri 22 Dec 2023 04:51:29 +0000
ROA not before: Fri 22 Dec 2023 04:51:29 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 136895
IP address blocks: 103.246.64.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 24 Dec 2023 07:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DB99/serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810
Validity
Not Before: Dec 22 04:51:29 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=658515d0-dd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b7:b8:c8:08:fe:c0:50:31:14:50:d8:9c:0b:
38:6d:75:bf:34:d4:cd:b3:ef:ee:ee:72:94:c4:76:
65:a6:36:7f:31:24:a0:7f:38:21:57:c5:e4:de:19:
43:0a:01:cb:ea:65:a9:b5:64:e7:9b:3b:08:04:4b:
c5:e8:5e:27:d9:20:45:cc:ff:d9:f6:c7:a7:87:85:
a3:65:7c:dd:b5:4b:dc:7b:2a:80:00:4c:74:11:a6:
a5:4d:cf:f3:0a:7a:f8:58:8b:5b:1c:e2:9b:02:0e:
1e:75:99:45:c5:21:a1:f8:c4:23:90:92:24:7d:34:
fe:8b:e3:b8:5d:09:60:c6:5c:77:57:2c:bf:35:1d:
29:a3:80:66:41:3b:88:98:15:d5:a1:ff:36:ea:2e:
71:7c:f2:30:88:d9:49:c6:56:54:21:d6:b1:e0:e9:
d2:0a:dd:fa:18:f5:99:0d:3c:9e:c7:73:6b:11:20:
c5:ca:9d:c5:03:4b:0d:6e:1c:59:bf:4f:57:e5:ff:
d9:fe:45:58:00:4b:2b:86:48:9d:3c:20:3c:2f:d2:
24:ff:39:22:49:71:2d:df:18:85:18:f1:ea:b8:15:
ef:f1:8c:9c:fc:77:b7:73:b8:a2:1e:18:bd:dd:c2:
4b:63:51:3f:02:84:4c:5f:29:d5:61:92:b9:9f:2c:
8f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FC:A1:01:8D:4D:CB:BF:93:CC:B5:60:AE:BA:E4:04:A7:1C:39:C2
X509v3 Authority Key Identifier:
keyid:E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/C4AC9E70A08511EE88B7A85CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.246.64.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:28:fc:93:d1:eb:e0:47:5a:73:3a:04:2d:be:2f:15:0a:5f:
ae:a7:18:56:83:6c:7f:ea:c9:fc:67:21:68:05:86:29:b2:6c:
aa:31:a8:2d:4e:72:28:c1:22:56:2b:77:06:ad:0b:e8:eb:51:
8b:3a:71:c7:82:ce:d1:97:4c:31:5a:94:63:b6:29:f8:c4:0f:
5b:13:42:06:84:1e:df:75:71:db:69:82:85:31:12:1d:84:8a:
a8:62:e5:d6:96:3e:f8:af:8d:ca:6b:20:f9:c2:7f:c5:21:49:
0b:85:95:09:ea:b2:21:da:89:1f:c3:6f:3b:a8:99:48:fa:93:
b4:fa:5c:9f:d1:94:28:36:cc:d7:1a:20:1a:18:e0:fe:2b:0b:
a6:1d:57:b6:88:68:7b:b7:15:61:b5:b5:16:35:df:ea:9b:56:
e6:e9:eb:5a:8e:5f:fb:ae:c7:c7:02:2c:e1:e8:bc:e7:24:d6:
59:b1:7e:e7:3e:c0:51:09:d2:4f:2f:9d:9b:f1:35:fa:7b:61:
81:54:bb:90:8b:2c:0c:d5:3f:c4:c2:3a:f6:30:0c:ef:90:3c:
c5:4b:25:3c:d3:f7:25:f2:13:c9:5f:9f:a9:e8:3a:3d:e0:8c:
e7:f5:db:37:fd:f3:ca:a9:9c:42:23:fe:80:3f:c5:05:60:e8:
c6:ca:81:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-ams.rpki-client.org