Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/86121A66F93A11ED9A23733BC4F9AE02.roa
File: 86121A66F93A11ED9A23733BC4F9AE02.roa (raw, json)
Hash identifier: n00HPF6c9cIidlEmgY/ToQOom1/ytTt6ZBshxDD2r3E=
Subject key identifier: 58:82:79:21:C5:13:12:F0:B7:88:FB:CF:47:B4:86:16:FB:65:6B:EF
Certificate issuer: /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
Certificate serial: 179E
Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/86121A66F93A11ED9A23733BC4F9AE02.roa
Signing time: Fri 22 Sep 2023 16:54:08 +0000
ROA not before: Fri 22 Sep 2023 16:54:08 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 150178
IP address blocks: 103.99.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 11:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6046 (0x179e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
Validity
Not Before: Sep 22 16:54:08 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=650dc6b0-0b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:44:fb:85:ce:bf:db:6f:99:d9:bf:69:34:5b:
38:3c:61:23:69:c4:30:1f:fb:dd:15:63:51:43:0f:
30:20:20:49:fb:4f:da:1d:d1:20:77:47:f7:20:0d:
01:7d:98:44:9d:a1:f1:09:30:c6:99:ae:bb:5e:ee:
ad:5e:ec:f3:b0:3b:dd:89:c7:09:8c:b4:fe:b4:32:
b7:de:37:4c:29:bc:a8:a7:38:62:2c:41:d2:80:70:
95:6e:c1:fe:75:fa:be:3d:36:8b:d8:42:3d:e7:4b:
d1:36:88:31:ca:5a:68:bd:d1:a7:c7:12:6c:29:55:
a3:51:50:d9:59:76:b0:ae:e4:fc:c1:f3:80:19:98:
e4:6f:03:cc:c5:2f:c3:72:01:35:15:2b:93:95:b2:
c1:8c:54:8c:db:c3:00:30:60:d7:fd:11:ed:70:9f:
38:4b:90:7e:a0:b1:9e:c6:07:91:e1:e5:46:33:37:
b8:71:b2:c9:97:85:c7:1f:3c:17:7b:55:52:1b:6d:
93:cc:46:9b:d5:7f:74:10:54:4d:0c:41:28:b9:75:
2d:d9:17:80:4f:9f:68:c8:47:7b:c9:d4:ab:a9:5b:
9f:60:da:4c:18:5e:5a:57:f8:3c:9e:ad:75:2f:0c:
1c:da:a3:6c:38:0c:f9:18:60:23:25:f9:eb:1c:b6:
a0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:82:79:21:C5:13:12:F0:B7:88:FB:CF:47:B4:86:16:FB:65:6B:EF
X509v3 Authority Key Identifier:
keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/86121A66F93A11ED9A23733BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.248.0/24
Signature Algorithm: sha256WithRSAEncryption
33:af:39:de:98:f2:83:91:db:00:dd:f2:44:24:cb:fa:7c:06:
be:dd:65:84:a4:08:2a:b7:34:74:b3:20:9f:73:0b:3a:99:c6:
63:32:b2:d4:ca:c3:53:9a:66:b9:c9:40:ba:af:f6:0d:aa:e3:
59:00:31:63:59:01:ce:b5:f9:9c:aa:3e:66:8a:58:32:d9:b1:
db:0e:e2:57:4b:26:22:11:94:24:f5:0b:41:bd:29:ae:4e:56:
8d:6f:ed:77:01:3c:5d:31:63:51:0f:4d:2a:f5:66:e2:4d:89:
10:3b:57:df:ca:c4:a6:b2:25:f6:e9:58:f8:20:ff:61:ef:27:
0e:ce:96:4a:89:30:02:fb:6d:26:39:6e:09:3a:3e:0c:9f:cf:
11:60:35:ea:a1:0e:3a:d7:72:4e:b5:94:d3:52:78:b3:d7:35:
19:e2:ae:6d:55:be:7e:43:96:f2:37:35:f5:f1:29:b7:94:e6:
d7:3d:1c:f5:dc:1a:e4:89:9a:86:f6:e1:28:05:10:e5:cd:e7:
e0:d8:4f:0d:ec:3c:b4:e5:6f:97:e4:5e:18:a3:b3:9c:63:1a:
46:ab:71:ed:92:66:81:41:7c:00:36:1c:ac:91:6a:9c:63:92:
55:62:39:64:6f:19:c7:97:96:15:d1:a2:58:84:2d:eb:d4:17:
fc:1e:87:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 14:29:22 2024 by rpki-client on console-fra.rpki-client.org