Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/05F7C8C0453A11EEB3C4E279C4F9AE02.roa
File: 05F7C8C0453A11EEB3C4E279C4F9AE02.roa (raw, json)
Hash identifier: 683rcP7KZOrHN0+KxLIT0ThDx5us79O2D5BU3zO0C1M=
Subject key identifier: D3:44:85:F2:1B:34:93:9F:FF:A9:59:BD:53:2E:E8:BF:6A:91:16:86
Certificate issuer: /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial: 37
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/05F7C8C0453A11EEB3C4E279C4F9AE02.roa
Signing time: Mon 28 Aug 2023 00:30:01 +0000
ROA not before: Mon 28 Aug 2023 00:30:01 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 15731
IP address blocks: 103.92.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Oct 2023 00:42:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Validity
Not Before: Aug 28 00:30:01 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64ebea88-84b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:9a:73:b7:fe:ab:94:fa:e2:49:37:ce:ff:
63:14:9b:13:14:4b:db:17:04:c0:8b:ad:42:79:43:
8f:69:b0:f6:30:b6:92:26:d7:c1:03:f3:7d:93:cf:
ab:f0:2d:e1:44:66:d7:63:f6:2c:76:a2:16:d2:b2:
6c:6c:46:33:48:bf:2e:d0:e5:e3:77:44:e6:ff:82:
6a:23:b6:15:f3:a7:3b:63:a2:7c:2a:8f:1e:7c:31:
d4:e5:8b:18:5b:27:52:73:bd:66:2c:ea:37:60:aa:
7d:8b:57:6a:cd:33:33:7c:7a:f2:7f:b2:3c:65:05:
93:e1:19:8c:cc:05:be:b1:f8:79:6c:ba:cd:54:9b:
27:13:3c:95:98:52:1c:92:1d:d6:70:c8:60:a7:2e:
e2:64:21:91:84:39:91:6a:63:64:d1:da:b1:56:4c:
09:e8:96:e9:44:53:24:9e:c0:ad:13:2b:c5:7f:59:
40:a5:13:ad:2c:79:ad:9c:f1:04:49:a7:a5:87:7b:
27:50:95:8c:93:80:1a:d0:ad:56:95:d0:c9:a9:3e:
57:96:ca:ab:9f:41:ea:0a:63:c0:1f:c9:49:53:69:
c1:9d:df:c3:52:fc:62:b0:d3:0e:c9:45:3b:88:44:
8e:62:3f:03:07:66:75:65:f8:60:a5:77:32:bb:75:
99:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:44:85:F2:1B:34:93:9F:FF:A9:59:BD:53:2E:E8:BF:6A:91:16:86
X509v3 Authority Key Identifier:
keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/05F7C8C0453A11EEB3C4E279C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.92.144.0/24
Signature Algorithm: sha256WithRSAEncryption
51:cf:3e:20:68:22:2e:a2:8e:b5:17:bb:c4:67:0a:f0:9c:14:
21:f3:3c:97:76:29:68:2c:8d:69:3f:78:10:5c:68:61:26:54:
cb:0a:b2:99:48:1f:a2:ab:3f:9e:53:5e:f0:ca:29:e3:67:df:
17:15:1d:0d:12:c6:74:41:ce:6c:c3:96:b0:4e:e9:11:f4:bc:
d8:bf:a1:58:55:fc:76:87:4c:b9:90:17:67:fe:81:2c:00:08:
25:30:06:45:7e:67:f7:17:ea:70:3e:92:c7:b8:5f:de:e1:53:
79:77:b1:ee:ef:18:f6:5d:ae:8a:9e:52:d2:6b:6d:ad:db:6c:
1c:76:68:49:6a:1a:8d:6a:b5:e6:e2:4a:3f:2a:11:3e:2f:c6:
59:04:d9:2a:8a:1a:91:10:7f:e1:e1:8e:92:62:b2:d2:2f:25:
d6:3f:74:cc:78:20:68:59:5d:4b:64:29:fe:a1:bd:83:7e:01:
d2:8f:c1:60:44:f1:c7:09:70:ca:64:3e:3a:4f:9f:e0:a5:40:
40:52:2b:3e:d9:f8:8f:7b:d6:15:5d:21:6b:c1:e0:7e:ad:55:
df:73:50:30:80:64:29:ee:bc:29:03:05:aa:11:05:4d:b4:1a:
68:34:43:a2:1d:ab:2e:cd:0f:7e:68:ca:88:f5:37:9f:f4:93:
72:e3:64:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:07 2024 by rpki-client on console-fra.rpki-client.org