Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/B155E3FCCD1111ECB9E78B50C4F9AE02.roa
File: B155E3FCCD1111ECB9E78B50C4F9AE02.roa (raw, json)
Hash identifier: VYQuo+vqYxr8s1pZ0T1sq6GvvQScMYd976g6/+oTTUA=
Subject key identifier: AD:45:F1:87:35:A2:88:AC:7D:9C:8E:F1:32:03:89:87:27:FE:32:4D
Certificate issuer: /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial: 01AE
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/B155E3FCCD1111ECB9E78B50C4F9AE02.roa
Signing time: Sun 07 May 2023 05:45:27 +0000
ROA not before: Sun 07 May 2023 05:45:27 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 64021
IP address blocks: 103.215.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Aug 2023 13:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Validity
Not Before: May 7 05:45:27 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64573af6-23eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:be:ae:b4:2c:13:b3:ff:e6:cb:72:3e:da:
4e:58:5f:20:82:f3:78:f7:3a:17:59:26:c5:02:23:
43:50:97:2c:d0:c4:5a:d6:e0:68:b1:d3:c5:e4:b7:
02:ca:d9:5c:c2:0f:c4:ec:05:fc:77:1f:ff:80:7f:
30:b2:c2:a4:d3:45:e8:8a:35:45:1c:62:f4:bf:81:
82:d1:05:f0:f0:ba:42:43:30:ee:32:c7:61:fc:f1:
24:81:06:7b:56:01:e8:45:48:97:04:48:20:fb:95:
77:76:5a:19:19:00:22:ae:d5:b7:12:9e:c8:d6:c6:
a8:e0:c4:6a:7f:cb:e0:b7:d6:b8:ff:56:1d:73:fe:
dc:99:a8:d0:5c:63:37:4c:49:b3:aa:17:e1:75:f0:
96:11:40:f3:30:0f:b9:ec:db:e0:e3:44:9c:21:b7:
2e:a8:52:0f:ee:f0:10:99:48:15:a7:08:08:9f:cc:
bb:1e:21:ff:a2:e4:df:bd:ae:58:1e:d1:31:dc:61:
da:36:ef:0b:b1:c4:4b:f7:1f:20:92:78:f7:85:1e:
88:49:a1:47:20:38:51:bb:f7:e6:ec:60:c6:b4:b9:
90:88:b4:e2:d7:56:11:51:b0:68:2c:1c:19:10:ce:
56:84:b8:4a:be:e2:76:ac:60:dd:d1:97:d2:63:2f:
e2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:45:F1:87:35:A2:88:AC:7D:9C:8E:F1:32:03:89:87:27:FE:32:4D
X509v3 Authority Key Identifier:
keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/B155E3FCCD1111ECB9E78B50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.215.127.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:88:d7:f7:9b:fb:39:5c:63:b3:7c:87:bf:49:cc:46:d0:2f:
87:3e:12:c3:44:d0:7f:b7:44:c8:83:04:16:ef:36:bb:a6:68:
58:84:97:3f:bb:75:6e:5b:6e:3e:c5:d2:25:57:e3:f1:66:ac:
71:20:ef:46:cf:46:5f:ff:45:22:ba:ff:be:ab:d4:d3:4f:e0:
95:2a:b6:5e:42:fc:9d:f0:b2:5c:46:3d:ca:fc:37:39:82:18:
6e:38:41:a9:f9:f6:b5:1f:e0:61:79:13:ca:1f:32:7b:ba:b6:
8e:09:fa:47:fb:fb:a2:79:bc:40:8a:77:0e:72:3f:7e:cf:4e:
01:8d:81:3c:70:b4:c2:24:b2:8a:37:26:a6:07:95:03:ea:9d:
59:6f:3c:ec:a4:da:64:65:9c:68:95:d2:62:22:39:d8:b9:a3:
53:3d:c1:c0:d3:65:fc:fc:ed:9a:0f:13:c6:2a:b5:ef:f7:77:
81:c8:4c:fa:a8:cc:e3:2a:94:72:5b:ac:81:18:2f:05:1b:1f:
2d:18:48:d0:22:f2:92:5f:bd:2d:b9:13:01:68:ec:49:a3:8f:
1a:8f:c7:bc:61:f6:3d:bd:3f:ee:ba:18:99:1f:26:c7:4d:d5:
ab:6f:c7:67:67:cf:b9:74:55:34:c9:3c:65:a7:5e:ec:99:ba:
bf:42:39:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-ams.rpki-client.org