Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/B20A8A3C88F911EE8CFF8A3EC4F9AE02.roa
File: B20A8A3C88F911EE8CFF8A3EC4F9AE02.roa (raw, json)
Hash identifier: u7pUosFeIsU7SIwmnQHKa5wEFfwjUGWbCO9HJaJlNN4=
Subject key identifier: 29:9A:20:A1:0C:FA:36:32:40:A7:DF:60:41:1D:34:99:A5:7F:EB:0B
Certificate issuer: /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial: 72
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/B20A8A3C88F911EE8CFF8A3EC4F9AE02.roa
Signing time: Wed 22 Nov 2023 05:40:51 +0000
ROA not before: Wed 22 Nov 2023 05:40:51 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 197789
IP address blocks: 103.92.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Dec 2023 04:33:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Validity
Not Before: Nov 22 05:40:51 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=655d9463-c8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8d:fe:27:e5:58:f3:79:ba:51:e3:b2:f6:0d:
6a:33:c1:09:be:00:fb:26:96:d0:92:f9:56:a8:ee:
6e:59:5f:2f:24:6c:70:aa:0e:67:0d:16:38:d6:87:
be:b7:7a:b7:b8:39:a4:35:ca:3f:48:68:23:ca:a9:
a0:f0:bf:81:fe:a3:19:ab:a0:0b:6e:db:33:4c:84:
4c:f1:dc:77:89:7e:2d:72:cb:92:99:7d:80:ac:56:
10:00:9d:ae:0a:3e:3b:10:93:d9:93:7e:c7:da:40:
54:66:2a:32:04:25:2e:54:0c:50:fd:b4:24:bf:a1:
4c:73:4d:be:c4:ea:6e:c1:bb:05:ab:23:c8:05:5f:
43:9c:24:26:c1:ff:d9:27:64:bf:aa:92:6e:22:6e:
df:d9:2a:42:df:6d:64:a9:68:01:27:0a:be:a0:a8:
13:62:67:6e:2b:fe:44:3e:e9:45:30:94:56:ff:7c:
16:9f:36:72:8f:47:08:0d:bd:eb:c0:4f:9b:31:87:
29:6c:24:a7:00:b5:e5:82:ab:8f:0d:97:d8:04:45:
77:4b:46:5b:4a:48:8e:8d:aa:4c:94:02:dd:f0:9c:
42:cc:cf:6f:e8:d6:35:59:3e:58:fc:1f:e3:a8:81:
6a:f9:3d:d1:2c:79:e3:d6:69:d3:8e:90:b9:fd:dc:
b9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9A:20:A1:0C:FA:36:32:40:A7:DF:60:41:1D:34:99:A5:7F:EB:0B
X509v3 Authority Key Identifier:
keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/B20A8A3C88F911EE8CFF8A3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.92.146.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:d2:a3:eb:32:99:ad:cb:69:62:94:24:da:08:9a:63:8e:be:
d1:0d:19:97:a7:97:b5:2c:7a:34:92:75:21:06:99:d4:70:83:
fd:95:07:85:75:10:d7:c1:de:46:9f:e9:1c:d1:63:ea:0a:70:
e1:d9:ff:22:55:13:7e:4f:ff:66:9d:5e:79:d9:ab:cf:68:ff:
1c:e3:51:5a:71:16:e8:cd:71:7c:df:66:06:31:0f:39:4a:90:
6c:a8:9b:59:ad:1c:2f:26:cb:92:68:da:e6:fe:67:d6:f9:3f:
bc:31:21:c6:d0:81:8a:9f:65:d3:b4:19:78:d3:ab:50:b8:35:
c1:71:f0:d4:01:ff:1d:18:d1:90:b3:8b:1e:ae:4e:cf:1e:e3:
39:b5:d9:51:89:94:5c:9f:92:8a:e1:43:79:ec:20:bf:46:d1:
7e:18:56:b2:87:7e:4d:b4:ce:19:f4:3c:ed:1a:34:33:70:aa:
ed:f5:be:b3:8b:62:3e:52:44:0c:69:4b:06:87:55:98:ea:2d:
fb:43:06:5a:f8:e0:af:ee:11:e5:46:39:71:c6:18:1c:33:96:
62:2f:df:05:37:c7:e1:58:e3:61:e8:b3:9c:03:c8:e5:b4:86:
db:f9:7b:5f:74:b7:0e:8c:fe:4a:70:bf:d8:15:f0:7d:4a:f6:
59:a7:bc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:07 2024 by rpki-client on console-fra.rpki-client.org