Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/469531FA66AB11EEB122CE7FC4F9AE02.roa
File: 469531FA66AB11EEB122CE7FC4F9AE02.roa (raw, json)
Hash identifier: DmOyvP5n8XevGznJycWN5HqOzUY5VAlzadMek/HVv5s=
Subject key identifier: F6:1B:9F:CF:8B:82:F1:54:EB:46:74:7C:43:30:23:12:04:39:6C:D3
Certificate issuer: /CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199
Certificate serial: 45
Authority key identifier: F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/469531FA66AB11EEB122CE7FC4F9AE02.roa
Signing time: Mon 09 Oct 2023 13:53:50 +0000
ROA not before: Mon 09 Oct 2023 13:53:50 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 149457
IP address blocks: 103.197.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 07:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199
Validity
Not Before: Oct 9 13:53:50 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=652405ee-6bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d5:4f:72:be:14:df:ab:28:38:e0:26:04:55:
93:bb:39:fa:a8:4d:93:68:54:ae:1c:e5:eb:5b:c0:
c8:82:a3:5c:35:bd:9d:53:30:ea:b1:d2:4c:a1:8b:
28:4c:c1:d0:d3:ee:50:ec:02:ca:00:02:4b:7b:80:
3b:15:d7:8c:c8:41:ed:cb:9c:83:d9:df:ad:bb:07:
02:ec:c7:98:a2:6a:a9:6f:5d:f7:80:4d:bd:43:43:
b9:70:3e:17:6b:4c:8d:7b:a6:1c:e2:c4:c3:bb:ff:
92:85:5e:ff:63:27:88:3c:c8:83:c3:17:f9:72:2d:
9c:cb:bf:ea:c8:f7:e1:66:6f:52:d8:4a:fc:21:6d:
8e:88:fe:f4:20:54:43:ab:af:95:2f:eb:0c:c7:2a:
cf:06:63:ec:e5:f9:ce:be:8a:e4:c8:78:d9:9f:87:
53:5b:95:37:0c:5c:5a:8f:b0:99:8c:42:d6:b1:88:
ed:d2:fe:ab:de:db:fd:ad:0a:eb:16:46:12:43:e7:
09:20:70:79:8f:e6:2b:17:57:a4:b1:53:bd:fc:b6:
e6:11:5d:ef:9d:f1:41:a3:e0:1d:e8:09:45:f7:0c:
f9:3c:97:87:ce:59:92:0f:b9:df:38:bc:cb:b4:a2:
37:34:07:80:e8:22:d1:6e:e7:e7:de:9f:b2:2e:3e:
3b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1B:9F:CF:8B:82:F1:54:EB:46:74:7C:43:30:23:12:04:39:6C:D3
X509v3 Authority Key Identifier:
keyid:F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/469531FA66AB11EEB122CE7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.197.86.0/24
Signature Algorithm: sha256WithRSAEncryption
85:35:d7:9d:b3:b8:75:bd:51:92:46:a8:c4:ff:ac:2a:99:cb:
9e:cd:80:b0:f9:a0:ff:a2:42:9c:a3:24:92:38:85:8e:ab:73:
f8:0c:2c:ea:fc:9d:c7:a1:f1:5e:bb:f4:fc:b7:0f:60:1c:48:
cb:fc:da:35:f5:c4:41:aa:82:6f:a9:07:30:3a:90:62:d3:9e:
f2:03:c7:62:04:2d:1c:45:52:58:68:dd:6e:fd:2b:c4:c3:0e:
e8:f5:e6:cb:a1:e0:6b:d9:3f:7c:f8:3e:5d:04:1b:46:55:90:
2c:59:97:8b:af:37:08:2b:d8:f3:52:53:2f:07:b4:0a:20:ac:
71:dc:75:69:63:fa:bd:52:f6:7b:91:a2:96:7f:fb:46:0b:e7:
f8:58:d7:b6:9a:d4:54:43:d5:b2:16:41:8d:72:3a:cf:cb:02:
a1:9e:7d:23:db:f8:ef:2f:a7:4f:6f:9d:89:64:41:18:d3:06:
00:ff:5c:ee:b5:d5:61:56:f7:c3:6e:57:cc:23:db:c8:78:e1:
a7:ad:1f:28:40:ab:c6:94:c1:0d:ed:57:94:b7:53:06:80:e0:
85:f1:35:f9:bb:f0:a4:c6:c1:e8:45:6e:17:f1:d6:7c:b6:6a:
92:1e:b8:67:30:39:1e:8d:f4:6c:40:f2:96:16:8b:85:a7:b2:
3c:94:7c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:05 2024 by rpki-client on console-fra.rpki-client.org