Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/4DDAB08A799711EE84360C3AC4F9AE02.roa
File: 4DDAB08A799711EE84360C3AC4F9AE02.roa (raw, json)
Hash identifier: C7WcmyauK8h+ptUxhis7SUg8h5fHId9KXBqxNEabGDA=
Subject key identifier: C5:2D:3B:A7:46:FB:18:80:82:5C:E4:60:0A:B7:AB:98:8C:96:67:8C
Certificate issuer: /CN=A915C449/serialNumber=484EBF33750B21CAF028D0CE219B9461D1FBAA66
Certificate serial: 0511
Authority key identifier: 48:4E:BF:33:75:0B:21:CA:F0:28:D0:CE:21:9B:94:61:D1:FB:AA:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SE6_M3ULIcrwKNDOIZuUYdH7qmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/4DDAB08A799711EE84360C3AC4F9AE02.roa
Signing time: Thu 02 Nov 2023 15:48:45 +0000
ROA not before: Thu 02 Nov 2023 15:48:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216085
IP address blocks: 103.165.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1297 (0x511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C449/serialNumber=484EBF33750B21CAF028D0CE219B9461D1FBAA66
Validity
Not Before: Nov 2 15:48:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6543c4dd-ae18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d0:5b:e5:ae:63:38:0a:a0:f8:60:ed:84:8f:
bf:ff:86:af:81:e4:47:1c:5a:4d:cb:66:9c:38:29:
6e:71:5d:f3:35:a9:be:dc:3d:cc:c3:20:d5:a8:24:
1c:0b:71:c6:d2:0c:6b:70:7e:6e:42:6b:c3:28:9e:
bc:45:4e:6c:f1:b8:40:00:a5:9a:33:10:3c:1a:a5:
61:2f:44:75:b2:b2:c7:20:33:ed:64:dd:be:68:a4:
2c:9b:20:91:fa:ed:15:21:63:c4:0f:66:44:90:08:
5d:2d:1b:54:5a:5a:6a:54:fc:cd:a0:12:8e:3c:23:
c1:c4:2b:6b:84:19:7a:b7:58:e2:ee:fc:e3:ca:d3:
15:5a:13:86:95:9c:95:fa:21:98:7b:78:58:38:16:
f7:6d:f8:b1:0b:1c:10:74:17:cb:3d:2b:23:76:e1:
3a:fc:16:fd:e6:33:10:8b:a4:84:5f:ed:71:56:0a:
17:74:a1:74:4a:9d:21:03:1d:a0:04:0e:b1:7e:bf:
1b:51:a6:e4:4c:a5:a2:52:3a:01:fd:10:7a:15:ea:
4c:77:61:51:1e:b1:b1:e2:ed:72:6b:c5:34:30:68:
4e:d7:10:a2:03:05:b3:5c:f3:6a:91:ef:a3:89:96:
2c:7f:a7:88:23:a8:18:e9:4c:60:79:d6:31:29:65:
c7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2D:3B:A7:46:FB:18:80:82:5C:E4:60:0A:B7:AB:98:8C:96:67:8C
X509v3 Authority Key Identifier:
keyid:48:4E:BF:33:75:0B:21:CA:F0:28:D0:CE:21:9B:94:61:D1:FB:AA:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/SE6_M3ULIcrwKNDOIZuUYdH7qmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SE6_M3ULIcrwKNDOIZuUYdH7qmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/4DDAB08A799711EE84360C3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.165.85.0/24
Signature Algorithm: sha256WithRSAEncryption
86:57:cc:81:32:56:1f:81:41:d3:a4:13:0d:b5:a2:91:a4:e4:
ca:59:24:18:bc:d7:7a:e7:09:93:3e:7b:7c:d0:9c:43:d2:16:
08:6f:fe:15:3b:45:4f:5b:a9:62:b1:e3:87:ac:11:7b:bc:c4:
03:c6:67:30:02:fc:fa:df:bf:29:09:b3:bb:cf:f8:fc:72:10:
a7:78:8e:fe:7c:ba:49:a4:28:85:f4:19:c9:2e:db:09:b3:cd:
18:8f:c2:69:73:4b:a3:11:a3:e4:28:3e:90:66:17:a6:d5:bd:
53:1c:54:f3:5e:cb:34:ce:91:d7:fd:c1:e6:04:18:dc:16:04:
70:1d:df:b2:f5:fc:e4:c8:87:4b:bb:74:34:58:0e:d3:b2:7a:
1b:c3:2d:e8:c5:63:66:29:48:bf:b5:ee:b0:49:b1:13:ae:d3:
67:65:d6:25:29:a6:bd:b0:c0:21:69:fa:d1:eb:aa:92:40:6c:
e9:ed:2b:03:e1:ed:3c:c3:75:07:9d:e5:b9:d8:ec:0e:78:1e:
9c:7d:1a:20:c0:f6:0f:e3:78:8d:d3:ed:1b:6d:af:69:ce:6a:
c3:56:f5:c1:45:d3:eb:00:d1:dd:25:72:98:c9:dd:7a:dc:04:
47:c2:79:cc:88:6a:19:e2:fa:59:12:3a:b8:ca:2d:a0:0f:f6:
70:ea:b6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 12 09:01:23 2023 by rpki-client on console-ams.rpki-client.org