Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/7416EBE6E66C11EEAB3ABE5FC4F9AE02.roa
File: 7416EBE6E66C11EEAB3ABE5FC4F9AE02.roa (raw, json)
Hash identifier: +AHqKol8nLLYuuy339mQN6X0Kj4dEDzm3j+4rlwo3kE=
Subject key identifier: B7:E8:45:54:08:DD:F9:5D:D0:28:26:AE:72:A5:5C:46:DB:EB:A2:66
Certificate issuer: /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial: B5
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/7416EBE6E66C11EEAB3ABE5FC4F9AE02.roa
Signing time: Wed 20 Mar 2024 03:46:38 +0000
ROA not before: Wed 20 Mar 2024 03:46:38 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 46573
IP address blocks: 103.92.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 00:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Validity
Not Before: Mar 20 03:46:38 2024 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=65fa5c1d-0aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d3:f9:ca:20:34:1a:6e:1d:c2:57:80:87:a8:
a6:0b:3c:30:88:8a:d7:31:d6:72:83:58:65:73:33:
05:04:c1:f2:52:0e:dc:84:5c:c3:0c:8d:b3:48:06:
21:51:aa:c3:f1:8d:a6:9f:f2:20:5c:64:41:b5:38:
e9:95:44:c4:b5:bf:d3:6a:ad:a6:2d:39:24:d2:8b:
40:26:2a:c3:75:17:e2:0c:fc:03:53:93:4b:85:23:
5c:51:04:b5:fe:23:d2:b3:22:13:27:ba:5e:55:3a:
8c:55:30:d8:01:7f:41:a8:97:ea:ee:fc:a2:b3:d1:
af:d4:2c:03:83:f5:1a:4b:de:3a:79:97:ce:40:45:
6b:d9:1a:d0:b5:6c:d3:f4:b1:23:a5:9e:5c:b6:b7:
e8:84:3d:f4:f4:73:3a:3e:8c:c0:b3:6e:82:af:71:
78:32:2d:f3:7f:22:25:37:60:6e:2e:5d:9d:05:86:
0f:39:f2:38:a7:10:38:68:6d:dc:9c:87:cc:bd:df:
f6:0f:75:6c:1d:01:27:ff:35:23:29:0c:e8:1e:21:
d5:95:85:0e:be:cb:9c:ed:ef:f4:c2:9c:86:47:e2:
0f:60:f7:0a:27:11:c5:68:ae:2d:d6:66:0e:c1:ad:
ad:cf:cf:f3:9f:e2:d2:c6:10:20:c6:a1:9e:8f:69:
20:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E8:45:54:08:DD:F9:5D:D0:28:26:AE:72:A5:5C:46:DB:EB:A2:66
X509v3 Authority Key Identifier:
keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/7416EBE6E66C11EEAB3ABE5FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.92.145.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:bc:44:02:a3:dc:aa:26:14:9c:17:78:8a:fd:09:00:9b:42:
af:f7:cc:f6:bc:a2:0e:62:cc:82:fe:9a:4e:c9:9e:77:5b:c5:
de:03:f8:d2:aa:b9:44:41:20:1c:e1:8e:05:a2:a3:de:30:15:
f7:a0:79:7f:b7:4c:59:5e:90:5b:c2:38:22:f6:c4:af:3a:a6:
1e:14:05:c8:9f:dd:81:4a:87:81:dd:fe:5d:46:62:fa:5f:34:
d8:72:e2:6b:2c:1e:e5:c7:a2:35:77:00:13:cd:35:e2:af:87:
3e:62:88:01:21:34:7f:d1:4e:fb:52:95:d0:66:f8:fa:f0:03:
27:e1:00:41:59:1e:72:9c:3f:97:e8:61:3d:66:d4:33:7b:ac:
4e:51:9c:d8:9e:55:b9:54:2b:64:9b:19:8f:6a:bd:03:db:0b:
25:c8:9c:dd:49:9a:3e:68:fc:67:64:60:3d:aa:c1:10:a6:c0:
8e:3a:77:4b:7a:08:6a:9e:98:97:46:b5:90:4b:3e:94:d2:4a:
c7:31:89:0c:bb:fa:d0:6f:40:e0:8b:03:3f:2a:ef:fa:cd:32:
41:b3:02:ec:a5:1a:13:76:a9:a2:18:8c:4b:3f:29:2e:12:07:
2e:00:81:ca:6a:58:ea:03:84:bd:fa:fb:97:74:93:cf:36:9f:
55:e1:db:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:07 2024 by rpki-client on console-fra.rpki-client.org