Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/E39BD5801A9711EFB8A15B1FC4F9AE02.roa
File: E39BD5801A9711EFB8A15B1FC4F9AE02.roa (raw, json)
Hash identifier: PLU2saOAAmSq3daaDFn9i9CYtNnH9uyUF4uwNy1dUAQ=
Subject key identifier: B1:62:22:C1:C3:09:C2:D0:3C:2E:3A:90:7A:A1:BF:FB:B5:5D:67:77
Certificate issuer: /CN=A91476F2/serialNumber=64B686B05DCBE8BEA92807532DE29A77905156F5
Certificate serial: 0521
Authority key identifier: 64:B6:86:B0:5D:CB:E8:BE:A9:28:07:53:2D:E2:9A:77:90:51:56:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLaGsF3L6L6pKAdTLeKad5BRVvU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/E39BD5801A9711EFB8A15B1FC4F9AE02.roa
Signing time: Fri 05 Jul 2024 00:42:04 +0000
ROA not before: Fri 05 Jul 2024 00:42:04 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 55020
IP address blocks: 103.66.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jul 2024 11:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1313 (0x521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91476F2/serialNumber=64B686B05DCBE8BEA92807532DE29A77905156F5
Validity
Not Before: Jul 5 00:42:04 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6687415c-6528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e8:76:9b:1f:5d:bb:0b:27:df:c2:f5:83:dd:
ae:12:28:ae:0e:a1:58:af:a9:4f:57:d5:6c:62:31:
99:4a:fe:e4:02:22:c9:08:73:4d:84:5c:35:fa:e8:
e9:a9:a3:cb:c3:e2:cb:ad:e0:67:d0:e3:66:63:9a:
f7:46:59:30:37:52:09:73:f1:41:d4:7d:76:af:c1:
2b:ba:57:b3:cc:51:16:e4:37:84:44:b8:24:92:97:
2a:de:c2:c1:ca:c2:c2:0d:1a:04:4e:9e:d7:8e:b5:
88:e2:bd:d3:a7:31:0e:b8:09:38:e6:66:21:4b:90:
89:5c:ab:bb:7f:c9:8e:b0:e3:92:b8:38:88:7f:9a:
41:ff:b1:72:5e:9c:60:ea:95:8a:e2:1d:d9:f8:d1:
4c:b3:26:fb:1f:5e:e1:a8:2e:b3:4c:db:89:63:ad:
3c:49:31:14:2f:23:15:a9:d1:99:f9:24:4e:07:08:
ad:6d:dd:a0:12:37:c0:d7:88:27:0c:05:2c:98:62:
69:2b:be:90:e8:8c:f2:34:6c:af:3b:97:e2:59:3a:
bc:54:e1:11:e2:56:a9:c6:65:b9:ee:02:93:38:54:
88:51:9f:2e:22:a0:c3:14:e0:61:df:e5:f2:9e:e9:
54:3c:c7:91:d2:ee:7c:ab:9c:d4:92:41:67:c9:f6:
63:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:62:22:C1:C3:09:C2:D0:3C:2E:3A:90:7A:A1:BF:FB:B5:5D:67:77
X509v3 Authority Key Identifier:
keyid:64:B6:86:B0:5D:CB:E8:BE:A9:28:07:53:2D:E2:9A:77:90:51:56:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/ZLaGsF3L6L6pKAdTLeKad5BRVvU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLaGsF3L6L6pKAdTLeKad5BRVvU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476F2/2BE43DA0CB2C11EBBC35C440C4F9AE02/E39BD5801A9711EFB8A15B1FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.66.56.0/22
Signature Algorithm: sha256WithRSAEncryption
42:22:77:f5:af:7c:bb:99:18:39:f1:22:99:a7:ca:cb:1b:d3:
46:f9:7e:1e:f8:c6:05:3e:c6:50:8d:ed:c8:f8:13:8f:e0:6f:
72:1e:b8:63:6d:49:2b:5f:f3:c7:70:07:63:a3:95:87:26:3a:
e2:24:bb:e2:33:d4:a1:6e:71:d5:50:85:e5:bd:9a:cb:c3:d5:
7e:59:c6:93:96:37:4e:79:1d:c8:f8:bd:d9:e0:7d:be:cf:15:
9a:4e:1e:96:a0:2c:b5:0b:2d:fb:ed:1e:e6:fa:d0:6f:c6:ca:
c4:d2:3c:3b:a6:b5:d4:aa:2c:d1:91:31:2a:60:b8:79:56:68:
d8:2c:cf:15:d5:7a:e3:31:0f:0b:ad:d4:af:7f:c6:2e:cb:81:
1a:61:ba:5d:dc:40:f1:10:b2:17:e1:7b:f0:42:d1:bc:3e:80:
1e:52:8a:30:c0:e7:b2:9e:b4:0b:e5:ad:7b:e2:0e:1f:77:2f:
6a:47:08:0c:da:e1:33:2b:14:7c:28:cd:97:be:99:37:69:a6:
fe:ab:bc:c2:94:86:86:c7:5c:b2:a0:03:df:ef:97:7e:7b:34:
01:76:19:b9:39:24:0c:ef:a7:bd:74:97:c6:d9:9f:54:66:7f:
a0:5b:46:c5:ef:57:ce:ff:46:00:15:bf:4c:e4:ac:67:66:48:
ac:99:76:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 14:04:15 2024 by rpki-client on console-ams.rpki-client.org