Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/C874A7C0058511ECA3212F6DC4F9AE02.roa
File: C874A7C0058511ECA3212F6DC4F9AE02.roa (raw, json)
Hash identifier: ElYbSEk4rRJAjj7lezEHri8iWNpjG/As8ucdEHqyHv8=
Subject key identifier: 58:8E:FC:D5:2C:A6:E2:5A:69:B4:83:AC:42:FF:89:A1:1A:0E:EE:85
Certificate issuer: /CN=A91476F2/serialNumber=64B686B05DCBE8BEA92807532DE29A77905156F5
Certificate serial: 0464
Authority key identifier: 64:B6:86:B0:5D:CB:E8:BE:A9:28:07:53:2D:E2:9A:77:90:51:56:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLaGsF3L6L6pKAdTLeKad5BRVvU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/C874A7C0058511ECA3212F6DC4F9AE02.roa
Signing time: Tue 01 Aug 2023 01:01:54 +0000
ROA not before: Tue 01 Aug 2023 01:01:54 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 399955
IP address blocks: 103.66.56.0/22 maxlen: 24
103.228.168.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 May 2024 13:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1124 (0x464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91476F2/serialNumber=64B686B05DCBE8BEA92807532DE29A77905156F5
Validity
Not Before: Aug 1 01:01:54 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64c85982-bc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:35:df:5b:48:3e:33:01:fa:f5:04:7d:bb:f9:
4a:f9:fa:de:7d:9e:3e:e5:b0:e5:ea:3f:f1:bc:a0:
00:15:36:95:a3:07:4a:77:29:67:2f:19:9b:7c:ef:
7c:c1:c6:65:21:5c:e1:63:52:07:0b:17:ce:41:5c:
20:54:e6:bb:be:be:53:95:95:c4:a6:0c:d6:b6:73:
5c:ca:5c:b4:49:23:78:88:76:bc:5a:c1:b4:b2:b7:
76:c5:1a:61:1b:3e:03:5c:1b:7c:a1:ae:72:78:03:
f9:13:2f:f8:8d:f3:fb:52:0e:54:aa:c6:89:92:21:
ed:f6:49:64:46:d6:a2:92:06:2f:1e:6b:e9:bb:18:
50:fc:87:a1:83:5d:59:b1:60:20:b7:72:30:8d:aa:
02:5c:a8:37:40:35:0c:a7:58:68:62:fa:7e:48:02:
e7:e7:31:81:66:a6:d3:13:4a:f4:ae:6e:c5:25:12:
61:17:c2:75:9e:c9:09:43:6b:c0:3e:28:ec:6b:09:
dd:42:1f:68:90:68:7a:17:b5:94:19:5c:3b:92:13:
78:39:98:b0:46:37:09:63:97:5b:7c:f4:68:c9:ef:
aa:a1:0e:dd:f8:c1:09:2b:22:49:72:db:2a:ff:0b:
33:51:7b:9a:f6:0d:53:f4:83:37:e8:c4:44:13:0c:
bc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8E:FC:D5:2C:A6:E2:5A:69:B4:83:AC:42:FF:89:A1:1A:0E:EE:85
X509v3 Authority Key Identifier:
keyid:64:B6:86:B0:5D:CB:E8:BE:A9:28:07:53:2D:E2:9A:77:90:51:56:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/ZLaGsF3L6L6pKAdTLeKad5BRVvU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLaGsF3L6L6pKAdTLeKad5BRVvU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/C874A7C0058511ECA3212F6DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.66.56.0/22
103.228.168.0/22
Signature Algorithm: sha256WithRSAEncryption
56:09:22:6f:be:dd:56:53:ff:73:db:bd:24:f0:72:03:10:77:
6e:40:96:91:a5:ca:47:29:34:3d:32:bb:4f:fe:c9:c9:97:c5:
37:cd:75:19:d0:3f:02:d8:17:30:a1:65:9b:54:b5:d2:c5:6a:
2b:81:ec:e3:f3:c8:db:60:46:ad:2e:57:38:7b:3e:cb:86:8a:
b6:e9:fc:7d:56:9d:42:5d:66:76:e9:09:18:c3:cd:dc:84:32:
1c:12:15:87:f1:8c:7b:9b:cf:c5:7c:c1:83:28:ce:42:07:2d:
b4:49:92:75:ae:54:b9:2a:e9:7c:af:f0:ca:ed:c9:ec:94:24:
a1:ac:c9:99:72:48:a3:1e:76:e5:16:6b:3d:7f:59:33:7e:6e:
94:ea:c3:4c:8c:f5:38:34:e5:30:0b:5c:08:be:a7:95:e1:9e:
24:80:4a:31:0a:fb:d9:5d:a0:48:60:70:05:ec:b2:fe:2b:a2:
7e:d9:44:7a:0d:52:71:22:cb:90:45:e0:dc:7d:9a:e8:a0:d2:
42:e7:1f:b5:6e:93:bc:b0:f6:cb:a6:51:71:a5:fa:40:f1:a6:
73:94:e5:fb:45:47:53:a6:b9:48:08:0b:f7:c5:a1:4c:81:18:
6f:fb:83:91:6f:3c:cd:a6:ba:30:e1:30:cb:03:55:88:80:e8:
f4:b1:45:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-ams.rpki-client.org