Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/CA5673F0321B11EF9081FB81C4F9AE02.roa
File: CA5673F0321B11EF9081FB81C4F9AE02.roa (raw, json)
Hash identifier: Gte0DPWe83QTf2agtg0bDqIGZh9nikBYbvBqSvkdB/0=
Subject key identifier: 1F:66:78:9A:E7:CF:90:72:59:36:84:B4:4F:58:6F:FF:48:FA:01:F5
Certificate issuer: /CN=A91476F2/serialNumber=64B686B05DCBE8BEA92807532DE29A77905156F5
Certificate serial: 0516
Authority key identifier: 64:B6:86:B0:5D:CB:E8:BE:A9:28:07:53:2D:E2:9A:77:90:51:56:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLaGsF3L6L6pKAdTLeKad5BRVvU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/CA5673F0321B11EF9081FB81C4F9AE02.roa
Signing time: Mon 24 Jun 2024 11:20:41 +0000
ROA not before: Mon 24 Jun 2024 11:20:41 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 400619
IP address blocks: 103.66.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jul 2024 12:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1302 (0x516)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91476F2/serialNumber=64B686B05DCBE8BEA92807532DE29A77905156F5
Validity
Not Before: Jun 24 11:20:41 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=66795689-8e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:03:df:67:56:6b:10:43:e0:b1:6b:36:ea:ac:
99:65:e1:d5:5f:d1:63:f7:42:f4:1e:14:1a:0a:38:
9c:72:69:71:05:08:38:16:27:26:f8:30:44:90:bd:
cd:c6:c7:a2:9e:c9:2f:d7:73:b1:44:bf:07:2e:6f:
23:40:8d:48:36:83:fe:99:85:c7:19:a3:90:77:6f:
75:44:3a:b0:2f:a6:a5:73:fe:0d:9a:9b:7e:b3:7e:
35:8d:ee:35:c1:67:bc:b0:63:a5:22:d0:a1:0b:76:
22:b8:c2:a9:ac:71:b2:43:1c:33:11:d7:62:a5:f7:
6b:e5:9b:88:d6:25:33:86:09:57:8e:10:2b:bd:55:
94:bf:16:02:2f:95:c9:bb:b0:42:8e:39:1c:6e:52:
21:5f:3f:4c:f4:d0:c7:45:e0:95:98:32:28:06:39:
d6:8c:ff:50:ce:be:12:16:d1:35:2b:1a:4f:cd:b2:
2c:01:c8:0f:9c:eb:16:b0:33:2d:8c:ea:73:c7:1b:
24:fc:61:23:5a:45:a1:93:99:63:76:55:5f:b4:ce:
62:cf:cc:34:f9:b3:7d:63:86:60:5d:6b:19:7a:e7:
be:a7:3f:9b:13:64:fb:4a:3d:6c:c4:5a:bf:8f:d5:
39:41:5b:ce:12:b5:c1:60:95:fd:4d:73:5b:b5:c4:
4d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:66:78:9A:E7:CF:90:72:59:36:84:B4:4F:58:6F:FF:48:FA:01:F5
X509v3 Authority Key Identifier:
keyid:64:B6:86:B0:5D:CB:E8:BE:A9:28:07:53:2D:E2:9A:77:90:51:56:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/ZLaGsF3L6L6pKAdTLeKad5BRVvU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLaGsF3L6L6pKAdTLeKad5BRVvU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/CA5673F0321B11EF9081FB81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.66.56.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:c1:0f:15:9d:2b:3d:34:18:ed:18:48:7c:fa:50:b1:31:77:
ae:d2:ba:4f:aa:28:bd:3a:ca:c8:97:e3:a0:64:aa:33:92:77:
6d:21:be:e6:67:72:0e:46:bd:9f:8d:ec:95:04:a7:e8:e4:3e:
82:43:a0:03:72:1d:24:40:a7:7c:3f:48:5c:17:3b:4b:d9:e8:
9a:94:1a:5d:5f:4b:08:54:79:5d:1c:b5:5a:b1:23:77:cd:0f:
e5:a5:5d:34:24:b4:62:13:41:a7:99:d0:b9:9d:2b:73:28:88:
ec:e1:e2:73:02:26:82:32:ed:6d:08:44:ea:60:c9:ad:22:f5:
b6:ca:42:0e:68:10:8d:96:bc:9d:a0:93:aa:20:b5:e1:ea:cd:
72:0f:5d:1c:89:13:7b:dd:1d:e3:c8:d6:be:c8:de:18:b1:59:
d6:ae:e8:bc:97:b8:5e:ca:72:7d:8f:cc:9d:01:0a:20:5b:0d:
68:2e:66:04:62:0e:1f:bd:e0:61:68:2f:9f:02:d9:d4:a8:b6:
92:64:3e:7f:ee:b2:6a:c6:90:e4:28:e2:38:4d:19:80:ef:53:
c0:3e:7d:ef:23:f5:ba:f8:52:d9:d3:0a:e1:d7:ec:b7:6c:1c:
8a:2c:81:7e:52:46:be:07:01:29:c7:b2:c3:24:30:38:23:d3:
0b:99:46:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 14:37:24 2024 by rpki-client on console-fra.rpki-client.org