Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/29F1B778812011EE9C7C2510C4F9AE02.roa
File: 29F1B778812011EE9C7C2510C4F9AE02.roa (raw, json)
Hash identifier: wOunB2WsGZ2kv1BxLCGulQ3R5IdyC6IK2GDYy7Agsek=
Subject key identifier: 32:A6:4F:81:81:94:EE:0D:C9:59:E9:15:48:95:B6:90:DB:FA:25:55
Certificate issuer: /CN=A9143C5C/serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE
Certificate serial: 0857
Authority key identifier: 72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/29F1B778812011EE9C7C2510C4F9AE02.roa
Signing time: Sun 12 Nov 2023 05:56:04 +0000
ROA not before: Sun 12 Nov 2023 05:56:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137245
IP address blocks: 103.151.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2135 (0x857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143C5C/serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE
Validity
Not Before: Nov 12 05:56:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=655068f4-3bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a4:de:6f:27:29:fc:e4:b1:20:2e:b4:3b:c2:
d2:58:2a:82:87:56:a9:0f:e3:e8:d0:03:08:42:81:
33:7f:62:a4:25:0f:c7:96:44:26:d2:d4:e5:f0:85:
84:61:23:a0:f4:f2:13:78:c3:9a:37:57:4c:ea:88:
65:b3:a8:f2:64:70:e7:47:1e:49:8d:bc:a9:da:e4:
1f:21:2c:bb:28:e0:a8:3d:f0:a8:c4:22:88:3c:ff:
ab:f9:c2:42:25:da:a3:6b:8b:63:3b:80:27:a3:b2:
cd:02:1f:60:df:e8:b1:65:b2:85:72:ac:9c:8d:70:
18:ba:0f:9c:1f:68:40:8e:98:5e:14:d6:a6:0f:d1:
8a:4b:ac:f8:8c:83:a7:f6:c5:37:e0:2f:cc:ea:9b:
30:35:6d:bb:a2:4e:42:7f:97:32:9c:8e:70:f8:bb:
68:ee:23:e6:7a:76:a5:5b:c0:27:fc:65:d3:1f:fe:
69:81:a9:75:a9:26:62:8c:f8:76:70:99:c0:e0:ce:
bf:b9:f1:cf:6e:2c:3a:59:1f:73:84:34:84:9c:26:
c2:8b:1a:0b:4c:ca:61:7b:48:16:69:83:5d:3b:27:
fc:12:3c:79:af:a3:7a:06:fb:ea:16:57:7c:02:bc:
1b:8f:d2:2c:63:48:6f:62:39:af:bd:5d:15:7c:30:
fe:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A6:4F:81:81:94:EE:0D:C9:59:E9:15:48:95:B6:90:DB:FA:25:55
X509v3 Authority Key Identifier:
keyid:72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/29F1B778812011EE9C7C2510C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.59.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:66:01:d3:3c:c1:ae:c9:7f:28:c0:d4:60:5f:2b:6c:1b:73:
9b:73:dc:29:46:a2:d3:4d:45:2a:02:30:8c:0a:d6:73:8f:29:
f5:9c:8c:1f:a0:42:ff:92:85:75:d3:9f:a5:7b:5c:a2:66:4b:
c6:1e:34:21:5c:ab:c6:6e:54:ba:68:8c:44:8e:8d:09:d2:67:
c1:a5:16:99:e1:e7:1f:d4:b2:8f:f9:11:96:77:4b:5b:1b:47:
16:1e:de:37:3d:61:7d:5b:30:77:68:c8:9d:85:e9:ea:22:79:
22:dd:9e:8b:52:ae:87:97:22:be:fb:15:de:d0:82:57:73:6a:
32:f7:93:0a:91:20:67:44:dc:03:47:f2:ce:22:06:b3:4b:10:
be:ee:ee:ae:b2:86:70:f3:90:a9:de:b0:68:d8:75:7c:eb:25:
54:5e:4f:9e:ac:5d:2f:06:c1:70:cb:f9:27:15:f2:9a:37:b8:
8e:4b:08:6c:d0:72:ae:21:3f:f1:0b:3f:10:e4:01:54:5a:ec:
46:cb:22:2d:22:14:25:af:2a:be:b6:ef:b2:c1:08:e7:19:c1:
d0:3a:f7:c0:3b:31:5d:4e:e3:b5:69:70:05:64:4a:5e:42:54:
ed:fe:25:fb:ad:56:1f:5f:0e:b8:4e:2b:6f:0e:f7:50:c0:60:
77:a8:5a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 15:36:20 2023 by rpki-client on console-fra.rpki-client.org