Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/65A29910B41E11EDA8B83068C4F9AE02.roa
File: 65A29910B41E11EDA8B83068C4F9AE02.roa (raw, json)
Hash identifier: RnMVrA3dnNPoefpvcO9qMX3Smsc/KhBsuEKTYiv8iD0=
Subject key identifier: 55:8F:12:46:75:06:08:2E:70:D3:9F:9D:13:E9:17:35:1B:6A:25:E0
Certificate issuer: /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9
Certificate serial: 02
Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/65A29910B41E11EDA8B83068C4F9AE02.roa
Signing time: Fri 24 Feb 2023 08:36:57 +0000
ROA not before: Fri 24 Feb 2023 08:36:57 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 150734
IP address blocks: 103.151.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Apr 2024 05:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9
Validity
Not Before: Feb 24 08:36:57 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=63f87728-11cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:24:7c:83:7a:fc:2b:f0:41:2f:03:c2:d4:
77:73:82:50:e4:41:49:d1:3b:78:fd:28:c4:42:ea:
1a:69:f8:f7:82:33:ce:c3:f4:83:aa:df:92:0e:f4:
23:9e:8e:58:91:b1:ca:e5:58:c3:0c:e6:ee:1b:cc:
50:07:2f:c9:91:48:37:96:9c:18:ad:36:b2:f6:df:
0a:14:9e:4a:78:7e:1b:c6:aa:be:08:b6:40:85:5b:
ef:01:05:15:73:58:2f:61:7a:fc:bb:88:76:29:ad:
a2:13:57:91:15:d0:5c:b1:b5:2c:90:07:12:00:16:
af:f0:83:ad:8f:98:95:9c:27:4c:78:fc:7d:c3:1d:
7d:83:87:fd:bd:82:b1:fc:44:18:80:3a:18:fa:24:
0d:45:4d:2f:15:aa:05:7e:c5:5b:42:50:95:07:62:
b4:6c:39:09:79:9c:c2:8b:dc:7d:94:3f:2c:72:b2:
30:89:58:cb:b4:92:99:47:af:15:e7:4f:e3:df:49:
44:a4:5b:ff:40:68:28:2c:26:7d:42:a9:68:97:a3:
c4:7b:3b:b4:06:10:7c:5b:0d:11:12:e1:ef:61:4d:
12:9b:07:a7:a3:39:eb:c9:f2:77:a7:21:d8:37:85:
02:87:44:8f:ae:4f:42:5d:71:d5:86:d4:e0:75:9c:
55:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8F:12:46:75:06:08:2E:70:D3:9F:9D:13:E9:17:35:1B:6A:25:E0
X509v3 Authority Key Identifier:
keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/65A29910B41E11EDA8B83068C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.12.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:a6:24:02:be:50:39:f4:ec:2a:1e:f3:e9:40:f1:30:29:fb:
85:3f:33:26:45:97:9a:b8:12:06:84:44:7a:35:6a:c2:bc:dd:
7c:90:b5:8a:fb:bc:b2:c3:16:79:40:b0:ab:00:f5:5b:47:2e:
90:91:49:71:a4:02:fa:50:3d:01:5a:a4:9f:73:17:f7:a7:48:
c3:30:97:70:72:9b:0b:3f:d6:b5:fd:81:ab:0e:22:e7:ce:87:
ae:09:3b:d5:5c:f8:10:71:e3:c1:06:f0:c5:df:57:d5:cc:26:
9d:aa:ef:b9:37:3d:64:fa:96:54:49:30:d4:fe:fc:ec:b6:b2:
7c:68:fb:1f:47:3e:4d:a3:58:6f:3f:35:dd:31:ba:eb:c8:d2:
83:78:61:21:cc:f9:90:7e:8a:32:14:50:fe:30:f1:88:67:e0:
c1:b3:75:f0:65:9a:88:26:46:5d:0a:c4:36:ca:02:17:e3:07:
dc:c7:4b:6c:71:8a:5b:45:2c:86:4d:7d:9f:d9:af:2d:05:2d:
f5:88:24:06:3f:3e:92:6a:b9:a8:1f:ba:db:70:74:87:21:cc:
2d:e5:e6:a7:36:24:a0:f2:12:39:ac:39:cd:00:03:02:be:39:
fd:2f:61:5a:93:c7:ca:e8:58:6e:a9:2e:40:89:ae:c8:67:7f:
f2:93:e3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 08:21:38 2024 by rpki-client on console-fra.rpki-client.org