Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/6926384E600811EE9A27C365C4F9AE02.roa
File: 6926384E600811EE9A27C365C4F9AE02.roa (raw, json)
Hash identifier: Os5U0HRI3Rggzlmvpmxx/vhA41VfDOlRaBLOvlzwTD8=
Subject key identifier: BA:B1:FC:29:4D:CE:07:1E:EF:34:B5:F6:9F:AB:55:92:17:B4:3A:BC
Certificate issuer: /CN=A914C7F8/serialNumber=E50963D70468727356B78B7FC4380974429B64E1
Certificate serial: 40
Authority key identifier: E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/6926384E600811EE9A27C365C4F9AE02.roa
Signing time: Sun 01 Oct 2023 03:12:53 +0000
ROA not before: Sun 01 Oct 2023 03:12:53 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 151066
IP address blocks: 103.254.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Oct 2023 04:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C7F8/serialNumber=E50963D70468727356B78B7FC4380974429B64E1
Validity
Not Before: Oct 1 03:12:53 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=6518e3b5-e74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:6e:f0:e6:c7:04:d9:7f:93:90:0e:42:d3:
8b:d9:71:13:81:8c:2b:68:af:b1:ae:6f:f4:58:77:
34:0e:f8:6e:38:84:f7:b2:c5:00:07:9c:64:3f:90:
55:e7:60:cf:b2:02:7d:c6:96:d1:e4:05:6a:eb:af:
a8:d1:38:f0:77:e7:10:6d:d3:69:48:c2:55:87:f1:
3c:0b:4f:b1:eb:a6:04:6d:80:db:3d:43:1c:a0:e5:
1d:56:fa:48:b7:86:ef:6c:c9:30:04:f8:a3:b0:48:
fb:b2:55:66:cd:bd:b2:2d:61:d9:56:eb:2a:bc:44:
b2:fe:87:f2:34:8f:71:99:06:fc:ce:df:a1:ac:26:
82:3a:6e:a7:1c:92:dd:92:2f:97:6b:c8:5f:e9:8c:
2c:51:1d:b5:a0:c1:ff:88:11:2b:f5:8e:d5:57:27:
8d:3d:f8:87:60:b0:ba:3b:36:b3:c9:6b:dc:5c:68:
88:74:9e:21:11:42:64:e1:83:02:a8:a4:f3:78:33:
56:c4:f2:ea:fa:c0:79:ba:9e:3c:44:c1:36:41:38:
d5:48:3e:69:93:da:d8:06:64:32:03:ce:96:9b:55:
33:ae:dd:cf:31:11:29:37:aa:5e:95:07:9c:c9:5c:
f1:16:82:ce:e8:da:63:e4:c8:5d:63:0e:11:2c:74:
6c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B1:FC:29:4D:CE:07:1E:EF:34:B5:F6:9F:AB:55:92:17:B4:3A:BC
X509v3 Authority Key Identifier:
keyid:E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/6926384E600811EE9A27C365C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.254.214.0/24
Signature Algorithm: sha256WithRSAEncryption
39:1e:7b:bd:d5:6b:4c:03:5e:c7:37:fc:ee:6a:be:ae:14:f2:
03:dd:51:81:cb:dd:56:e0:cb:2c:4c:59:30:2d:79:58:3b:25:
5b:f8:87:5c:19:0f:2b:a3:3d:ea:04:a8:20:93:dd:c1:c3:9e:
bb:4a:d2:c5:ef:f2:63:87:31:9b:3e:10:e0:a6:3e:c7:df:ab:
e0:c8:cd:3f:88:81:ee:92:60:20:ff:8c:c7:c5:76:84:49:2c:
f3:9c:be:91:c5:f3:f4:73:3d:61:d5:7f:37:b3:e9:91:ec:12:
29:96:b1:2d:b6:23:32:9d:b3:b7:02:63:93:6b:34:c4:b0:50:
6a:15:1f:d6:44:65:91:87:17:76:82:05:dd:f1:40:29:57:91:
96:c3:28:a7:25:df:22:2b:e9:fe:d4:f8:82:2b:51:bc:cb:12:
2b:ff:95:b4:5e:06:3a:55:98:b7:60:3b:69:a5:fc:71:fd:37:
f8:47:89:25:3a:8d:2f:88:bf:79:1a:ed:55:65:a6:46:56:ad:
06:c2:73:02:7e:cb:15:ed:4c:c5:f1:59:ea:34:90:56:59:a1:
49:03:32:e5:3c:a3:a8:6c:ac:27:b2:1d:20:ed:b2:84:e0:cf:
c7:a8:89:15:19:4f:f5:a8:e7:1e:4c:f1:2b:51:e7:fa:1a:18:
f3:db:42:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-ams.rpki-client.org