Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/4D75D58E799711EE84360C3AC4F9AE02.roa
File: 4D75D58E799711EE84360C3AC4F9AE02.roa (raw, json)
Hash identifier: KyJu84ISj17kKAKw80eD1k7LWy/zTQRkTwa1udue0wU=
Subject key identifier: E2:4B:6D:45:82:97:C8:60:BB:4B:D0:0E:36:6E:1E:57:D3:B8:41:02
Certificate issuer: /CN=A915C449/serialNumber=484EBF33750B21CAF028D0CE219B9461D1FBAA66
Certificate serial: 0510
Authority key identifier: 48:4E:BF:33:75:0B:21:CA:F0:28:D0:CE:21:9B:94:61:D1:FB:AA:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SE6_M3ULIcrwKNDOIZuUYdH7qmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/4D75D58E799711EE84360C3AC4F9AE02.roa
Signing time: Thu 02 Nov 2023 15:48:44 +0000
ROA not before: Thu 02 Nov 2023 15:48:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 151338
IP address blocks: 103.165.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 18:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1296 (0x510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C449/serialNumber=484EBF33750B21CAF028D0CE219B9461D1FBAA66
Validity
Not Before: Nov 2 15:48:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6543c4dc-9a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:13:50:cc:e9:6d:5e:7d:e0:3f:1c:dc:85:12:
97:b7:e4:e9:4b:c7:99:2b:ea:77:11:9f:d9:32:e7:
a5:14:61:56:9a:25:55:16:59:c6:dc:9f:c1:8e:3a:
db:99:dc:d3:0d:7d:95:dd:c8:bb:e3:b0:a7:99:35:
3b:8f:82:be:c2:03:db:2f:0a:29:72:03:e7:a3:b3:
a9:91:2b:c7:10:5a:82:7e:a4:a7:97:13:be:86:c2:
89:77:c1:22:78:4f:23:d0:53:f2:98:2b:f4:d2:73:
02:c5:be:14:dc:5f:6f:b5:32:14:d7:68:3a:e0:f1:
f2:23:4a:8b:f5:94:d6:a8:57:3b:da:4e:d5:44:3b:
b0:10:a5:6f:2a:07:09:36:97:e9:be:c7:25:24:96:
db:3c:9e:9f:ad:36:a5:49:23:5d:a2:9b:5b:9e:97:
3b:b1:0d:11:c2:12:91:31:af:89:12:9a:e2:a9:2e:
16:99:35:cc:42:28:87:f0:2a:84:d5:92:fa:0e:1c:
42:d9:1d:aa:bf:6c:ba:77:5d:d0:63:76:f9:9a:ef:
2a:11:dc:d3:94:70:19:75:55:f0:03:e2:b2:2c:3f:
f1:b5:ec:ae:d3:04:43:6d:1a:ff:02:38:a9:18:ed:
18:39:63:2c:d5:4a:13:61:0e:69:4d:7c:ac:6d:a6:
94:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4B:6D:45:82:97:C8:60:BB:4B:D0:0E:36:6E:1E:57:D3:B8:41:02
X509v3 Authority Key Identifier:
keyid:48:4E:BF:33:75:0B:21:CA:F0:28:D0:CE:21:9B:94:61:D1:FB:AA:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/SE6_M3ULIcrwKNDOIZuUYdH7qmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SE6_M3ULIcrwKNDOIZuUYdH7qmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/4D75D58E799711EE84360C3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.165.84.0/24
Signature Algorithm: sha256WithRSAEncryption
83:82:9f:d6:e2:0b:bf:0d:cf:13:b9:aa:8a:42:ad:7c:ac:7d:
df:59:b8:e7:35:8f:6d:cd:22:d4:20:20:01:ea:64:52:b9:b1:
eb:3a:bc:33:98:ad:95:de:c3:6a:b3:3c:29:d5:93:f0:98:83:
58:de:81:32:04:e6:2c:b2:70:56:c3:43:cc:e1:e5:d5:ae:79:
b2:09:d1:5e:91:af:ab:1d:54:42:cb:ad:d3:d0:f4:0d:66:1b:
5f:dd:de:f7:14:86:89:83:01:f9:ab:f0:2d:e7:12:a0:61:02:
fc:e2:0a:9d:21:ce:88:17:ac:27:60:8a:e7:a6:3d:40:f1:30:
dc:3a:4e:80:0d:e6:00:0d:8f:45:06:b4:86:09:19:d1:25:26:
3c:7b:66:5c:11:1a:c9:a4:e1:87:da:50:04:2b:84:1e:01:e9:
91:e0:ef:c5:ad:40:ea:6e:ab:fa:38:b0:c5:41:00:e7:46:38:
2d:e9:32:3b:aa:84:44:b8:f8:b9:f4:c8:02:8a:ad:10:4b:5c:
11:45:68:dc:23:59:1e:2e:f6:78:0b:39:09:3c:ed:73:66:7e:
83:da:da:cf:dd:05:43:d1:c0:1c:59:fa:f5:41:5f:3f:44:56:
f1:34:a1:fa:be:bd:c7:8c:53:7a:ed:5c:a1:63:97:7d:d4:f2:
5c:f4:f1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 21:43:18 2024 by rpki-client on console-fra.rpki-client.org