Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/5D536AE00E2A11ED9EB89413C4F9AE02.roa
File: 5D536AE00E2A11ED9EB89413C4F9AE02.roa (raw, json)
Hash identifier: ok8NHXUeODJGVIIRbhjYduYq2V1hYXydImoWju4Lnuc=
Subject key identifier: 2F:9B:31:E5:3E:33:71:7E:EE:C9:DF:14:06:54:7B:D2:46:0A:B5:54
Certificate issuer: /CN=A91427AF/serialNumber=D80FA9FA841255D5BDA72E52EC04FDFED7FE2D5B
Certificate serial: 1343
Authority key identifier: D8:0F:A9:FA:84:12:55:D5:BD:A7:2E:52:EC:04:FD:FE:D7:FE:2D:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/5D536AE00E2A11ED9EB89413C4F9AE02.roa
Signing time: Tue 06 Jun 2023 18:27:06 +0000
ROA not before: Tue 06 Jun 2023 18:27:06 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 131477
IP address blocks: 103.116.74.0/23 maxlen: 23
103.116.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Oct 2023 06:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4931 (0x1343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91427AF/serialNumber=D80FA9FA841255D5BDA72E52EC04FDFED7FE2D5B
Validity
Not Before: Jun 6 18:27:06 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=647f7a79-c28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:bc:8c:74:d4:85:fa:34:e0:0b:16:7b:0f:
3a:3e:23:9a:2c:1e:aa:a8:e9:23:67:8b:91:7f:3b:
b2:ea:47:63:99:be:74:3a:92:af:10:4a:b4:1f:d1:
17:4f:84:ca:f8:f2:60:e5:cf:27:16:3b:6b:d3:27:
ad:ef:7b:c5:38:91:7d:3a:b2:79:3e:98:e4:de:cb:
00:2d:9c:ac:94:35:71:99:fe:93:6f:0d:80:b1:4f:
a7:2d:c9:64:15:c3:e9:9a:fd:79:5c:45:b7:60:7f:
b4:88:13:da:93:20:40:32:cd:cb:ee:57:e0:59:6f:
e5:f2:97:80:4b:d7:fe:28:c6:59:90:7a:39:2e:1c:
f8:4a:6f:1a:65:d8:a8:58:5d:f8:bd:2b:30:67:36:
73:c8:7b:08:e1:69:ce:18:ec:ae:45:44:0c:e6:b3:
a5:8e:86:a7:15:a8:f2:b2:ca:e7:d6:3f:0c:bc:86:
95:66:e2:da:09:b1:cc:a6:66:c6:b6:19:7b:30:7d:
fb:30:f4:d9:f0:77:3d:9d:5b:a5:0a:1a:f8:07:9c:
a2:37:8d:58:36:a0:59:72:ef:2d:5e:e3:ac:64:fd:
71:c5:be:ad:d5:5a:2a:11:94:2d:ac:14:77:ba:49:
97:a0:9b:ea:c5:7b:57:68:9e:c5:0f:a2:d7:65:cc:
b1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9B:31:E5:3E:33:71:7E:EE:C9:DF:14:06:54:7B:D2:46:0A:B5:54
X509v3 Authority Key Identifier:
keyid:D8:0F:A9:FA:84:12:55:D5:BD:A7:2E:52:EC:04:FD:FE:D7:FE:2D:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/5D536AE00E2A11ED9EB89413C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.74.0/23
Signature Algorithm: sha256WithRSAEncryption
84:db:63:07:71:c2:e7:a0:f2:2b:bb:42:05:97:6a:c9:3a:1f:
0a:5a:3c:de:9d:fc:1e:4a:77:2f:54:af:28:31:49:b2:27:7a:
cc:61:8f:f3:f9:bf:57:44:24:ec:ca:82:a6:58:a9:53:95:7e:
c7:40:d9:f6:16:f9:e9:71:f8:11:22:ab:d3:f6:f8:c0:db:67:
e8:fd:84:af:5d:7c:95:93:15:05:67:b9:63:06:fe:57:79:52:
93:2c:7e:9d:85:d4:77:b8:39:af:75:31:54:e5:18:b7:a0:32:
13:6c:a1:be:28:a1:b3:3a:0f:32:a7:61:f4:58:be:33:8f:48:
0c:e6:56:f1:d2:d8:42:9e:d6:96:00:3c:29:0c:ed:d8:b6:09:
c6:f4:6a:38:48:29:5e:fd:e9:62:5e:e8:66:79:02:e5:a3:65:
d9:89:35:1b:5b:62:c8:03:98:2b:0a:fd:02:f9:96:8a:88:39:
21:af:8d:19:11:a9:76:ef:1b:7e:8b:24:fc:cf:8c:94:f5:42:
d4:4b:75:2f:6e:05:55:be:16:b4:c8:6c:ea:cb:d0:4e:9d:09:
54:ef:db:23:ee:6c:44:ab:70:d2:9b:37:cc:0b:92:3f:31:05:
2a:15:76:32:d9:9c:52:ab:23:fd:53:ba:c3:7b:8d:a8:ad:bc:
d2:e6:5f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-ams.rpki-client.org