Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/3DB19C724D1111ED874A2D3EC4F9AE02.roa
File: 3DB19C724D1111ED874A2D3EC4F9AE02.roa (raw, json)
Hash identifier: AwqnjbSTemCE3ZbWJI62D3DlzpnEp9X5FFvf9HFjEVA=
Subject key identifier: E9:B4:5E:0F:22:C8:9D:0D:C5:BA:CE:42:77:7B:E1:4E:E8:18:7F:96
Certificate issuer: /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial: 01AD
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/3DB19C724D1111ED874A2D3EC4F9AE02.roa
Signing time: Sun 07 May 2023 05:45:25 +0000
ROA not before: Sun 07 May 2023 05:45:25 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 137451
IP address blocks: 103.215.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Aug 2023 13:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Validity
Not Before: May 7 05:45:25 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64573af5-4a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:53:b4:1e:99:24:8d:25:81:7d:ea:3c:eb:57:
29:28:8f:02:b0:e0:a7:1d:3d:12:f9:a5:35:47:ac:
ea:df:5f:11:61:bb:47:5d:77:b0:63:64:e5:8b:66:
6d:48:a6:d0:45:2b:a6:36:02:f9:d8:e7:a5:99:30:
69:a3:45:ad:91:90:92:2c:25:59:8a:1a:1a:8f:57:
73:d9:b9:bb:fb:a3:c4:b6:b8:09:3d:72:52:27:4d:
cf:ba:23:01:03:6f:de:13:c8:ff:07:01:2c:7c:dd:
fc:26:f7:1f:43:c8:1f:a5:fc:4a:8a:26:a1:64:9c:
ab:6f:9b:56:05:83:41:e9:81:79:a5:4f:04:b8:64:
b1:98:ee:d1:cc:26:7c:da:fa:dc:d3:ed:6e:a9:11:
71:84:78:6b:35:7f:e3:a1:75:d0:4b:a8:1a:12:d4:
19:6f:a3:64:60:95:fb:96:1a:46:ab:2a:56:e3:3d:
a2:69:c2:59:7a:40:68:b3:1a:cc:bb:83:58:27:24:
91:9e:74:7f:ec:93:c0:e4:85:d1:69:6b:41:ab:5d:
c9:ef:a7:60:af:f9:4d:b8:b7:6c:19:30:fa:96:f7:
bf:13:9c:43:fe:af:93:36:93:26:8f:94:4a:da:54:
6e:00:ff:f8:0b:e4:69:23:b6:96:64:71:2e:86:78:
c8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B4:5E:0F:22:C8:9D:0D:C5:BA:CE:42:77:7B:E1:4E:E8:18:7F:96
X509v3 Authority Key Identifier:
keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/3DB19C724D1111ED874A2D3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.215.127.0/24
Signature Algorithm: sha256WithRSAEncryption
54:61:2e:d5:6b:22:99:3b:11:3f:08:b0:f3:cc:34:3a:3f:81:
59:30:11:68:33:02:77:ca:ac:d2:05:a7:c3:a3:4f:c9:35:d2:
fe:25:c4:5c:8f:aa:05:e7:9c:4e:89:ce:0f:30:a6:b2:6c:eb:
fd:9c:ca:3a:6c:d8:4a:d9:2e:2e:3c:26:4b:42:59:54:b0:20:
36:5e:31:98:cb:9f:99:31:84:1b:9e:99:02:d2:1d:20:dc:ff:
ff:0a:e9:eb:f6:c6:ab:3e:42:25:c7:a3:c0:b4:c5:6e:2d:e0:
fe:fd:79:da:da:57:62:39:6b:af:6c:c1:1d:fa:bc:36:6b:2f:
fd:3c:d4:74:68:71:a6:25:c9:f2:21:0b:df:d9:e9:6d:77:dc:
de:78:fc:4d:ac:11:e1:83:fb:13:72:cd:92:e0:ad:fe:a2:0e:
9c:bf:13:bb:d9:bf:12:f7:09:08:d3:33:db:74:4b:7e:32:11:
be:02:5f:fd:12:c0:cd:85:b6:1c:06:a7:a6:a9:fe:40:d8:58:
45:b6:e1:b1:e8:86:98:a1:cc:27:ad:03:0e:c7:74:e3:a5:98:
fa:e9:32:f7:e4:27:d9:64:bd:82:9c:76:5a:96:f3:0e:0e:32:
b8:cd:f6:7e:6f:82:63:8a:e5:7c:46:07:75:87:42:e4:da:ce:
5f:a9:2f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-ams.rpki-client.org