Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/F52F9836ABC411EA8316AD7AC4F9AE02.roa
File: F52F9836ABC411EA8316AD7AC4F9AE02.roa (raw, json)
Hash identifier: Z86DCScz9omyeTzRfcRxwCex/RY+4CwCV5htS9EvKxE=
Subject key identifier: 01:82:0F:DA:3E:A1:3F:CF:EB:D6:78:1E:34:D4:BC:F1:E8:16:94:48
Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
Certificate serial: 21F6
Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/F52F9836ABC411EA8316AD7AC4F9AE02.roa
Signing time: Sat 02 Dec 2023 16:23:08 +0000
ROA not before: Sat 02 Dec 2023 16:23:08 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 7489
IP address blocks: 103.27.76.0/22 maxlen: 24
2403:5680::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 30 Jan 2024 17:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8694 (0x21f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
Validity
Not Before: Dec 2 16:23:08 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=656b59ec-e7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:7e:1f:df:97:0d:77:d0:69:1d:45:13:42:
34:68:f9:fd:03:ad:fd:d3:e3:41:d5:c5:95:c5:a4:
b2:8c:ea:f0:28:cb:33:21:75:c3:d6:59:55:65:01:
2d:7b:09:8d:06:03:95:ed:8c:90:98:98:8f:94:f0:
b8:67:a0:16:89:f4:e3:28:ad:e5:f2:8a:91:7a:d2:
82:a1:fb:7d:bb:82:4b:8a:f1:55:1a:6e:f4:50:c4:
45:af:fc:2d:14:2d:61:41:04:f6:49:55:2d:09:d0:
ab:4a:70:9d:06:57:d2:ff:2f:7c:50:e7:5b:b8:2f:
a7:4b:75:a4:5a:b4:dd:13:34:31:1b:cc:af:e0:bc:
30:55:6d:0d:c6:ed:a6:76:ae:43:1a:c2:9d:90:2c:
41:bf:a3:4a:73:7f:31:73:9e:38:07:a7:3e:08:31:
24:68:20:56:1a:5b:ce:6d:05:a2:23:b9:91:49:5b:
a1:bf:e6:7d:8e:99:a7:9b:8c:d8:52:a3:15:e2:48:
bb:f0:48:9f:b6:08:5b:e8:ba:8c:55:ba:68:2d:72:
28:d2:93:b6:9d:a5:6f:6c:23:55:80:50:a9:fa:f1:
dc:c9:c4:5c:6a:c4:dd:8d:f0:2c:9f:86:78:b1:13:
4e:07:80:ed:a8:8b:1e:dc:8a:18:cc:2e:62:85:d7:
eb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:82:0F:DA:3E:A1:3F:CF:EB:D6:78:1E:34:D4:BC:F1:E8:16:94:48
X509v3 Authority Key Identifier:
keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/F52F9836ABC411EA8316AD7AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.27.76.0/22
IPv6:
2403:5680::/48
Signature Algorithm: sha256WithRSAEncryption
98:aa:6c:e7:0b:8e:06:a2:59:7e:9f:d5:37:c5:d5:8f:bc:02:
92:72:56:91:d7:b4:0f:9e:8e:e1:87:e4:9d:41:2e:8f:e4:e0:
a4:a7:d3:6e:da:37:24:e6:a9:45:f0:8d:86:7e:da:6b:57:1c:
4d:19:26:8c:bd:fb:75:1b:48:75:6a:ae:ab:11:30:af:05:05:
da:19:c0:32:60:a4:c3:09:74:af:fa:2a:24:c4:43:85:cb:ed:
78:ca:9c:5a:33:db:c4:ae:1d:84:56:2f:ba:20:99:fc:ce:c7:
be:d2:79:e0:5f:e6:ae:ea:8f:dc:de:b8:00:22:81:1b:e8:5b:
72:5b:ea:93:07:fd:f4:cc:28:a2:a1:2d:00:72:54:df:d7:c1:
13:6c:97:48:74:4a:fc:e9:10:fb:32:70:65:9e:8a:38:45:9c:
22:b9:33:62:08:b8:00:53:7f:c3:8c:7c:26:29:6c:fe:ec:6b:
6a:cc:24:53:7f:bd:66:3e:73:fd:1e:7e:67:92:f9:5d:24:a5:
4a:15:bd:cc:f4:cd:1d:e3:0b:e2:7d:b4:03:52:8e:66:6c:df:
f5:2c:b0:f5:53:08:a0:0b:cb:e7:18:03:6e:26:f6:b8:14:bb:
4b:a7:1b:9b:db:12:98:9b:42:18:ef:6d:e7:28:fe:18:1d:fc:
b8:09:bb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 21:19:52 2024 by rpki-client on console-ams.rpki-client.org