Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/48D2FC82A04211EF8E9F8B60C4F9AE02.roa
File: 48D2FC82A04211EF8E9F8B60C4F9AE02.roa (raw, json)
Hash identifier: GfAq00xvx5IyyiiWq3UA0gQYcivmwZngvBZgmgQVvYg=
Subject key identifier: 01:30:69:FD:20:84:41:9F:8F:3B:34:14:94:6B:7A:E9:83:A8:46:BC
Certificate issuer: /CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
Certificate serial: 047F
Authority key identifier: 98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/48D2FC82A04211EF8E9F8B60C4F9AE02.roa
Signing time: Mon 11 Nov 2024 15:33:34 +0000
ROA not before: Mon 11 Nov 2024 15:33:34 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 9232
IP address blocks: 103.174.96.0/24 maxlen: 24
103.174.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 19:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1151 (0x47f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91623B9/serialNumber=98E1ECBD45D7879F9BC9439F4C6C2F2714AD36F5
Validity
Not Before: Nov 11 15:33:34 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=673223cd-e57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c4:ee:a0:ed:fb:86:bb:e5:8a:3f:dc:2a:34:
2f:38:a3:2c:3c:28:ac:e0:b9:1c:37:af:85:ee:c5:
cc:ea:71:02:50:22:20:c5:5b:a3:b0:b8:41:7a:85:
7f:72:57:89:9c:6e:fb:9f:e4:12:10:be:21:b4:6c:
69:98:73:dd:12:87:a1:79:bd:8a:3a:2b:37:cc:89:
9c:67:c2:33:d5:77:72:3a:3b:70:c9:05:09:2c:91:
f1:9d:0a:98:c4:f0:73:99:a6:46:5c:81:15:43:99:
d5:0c:33:20:cd:5a:e1:5c:d7:d0:17:17:1c:75:ad:
0d:78:2f:8d:eb:cb:44:e1:79:6c:68:2d:7f:d3:63:
23:51:9c:ca:ca:6d:56:d5:f3:f8:bd:36:9a:08:8f:
bf:da:72:76:98:4e:e1:3a:95:2e:db:35:37:78:c6:
b6:7e:75:6b:1d:b6:9d:01:b1:fd:31:14:38:c4:53:
48:50:cd:67:bf:a0:9b:6f:29:59:c9:6c:74:6d:2d:
85:ff:62:98:11:a9:15:71:73:57:52:13:8f:f6:76:
b5:a3:31:08:0f:d0:35:0a:5a:6e:5e:d3:31:a3:75:
b0:44:86:82:1a:d8:6f:61:0f:aa:be:ad:be:48:0f:
d0:5b:cc:52:8c:4c:aa:df:77:d7:a5:d3:c5:da:f7:
8b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:30:69:FD:20:84:41:9F:8F:3B:34:14:94:6B:7A:E9:83:A8:46:BC
X509v3 Authority Key Identifier:
keyid:98:E1:EC:BD:45:D7:87:9F:9B:C9:43:9F:4C:6C:2F:27:14:AD:36:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/mOHsvUXXh5-byUOfTGwvJxStNvU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mOHsvUXXh5-byUOfTGwvJxStNvU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91623B9/78CEACBC2B3611ECAD595B7CC4F9AE02/48D2FC82A04211EF8E9F8B60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.96.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:48:ee:90:d4:7b:c3:dd:c0:6a:28:40:41:a3:a0:89:10:77:
e4:5b:04:40:a6:19:76:fc:18:90:e0:0c:2d:36:3b:59:8b:fd:
b7:8f:1d:46:0a:85:36:b3:78:48:c3:cd:c2:8f:38:71:7b:bd:
64:fd:08:20:6a:14:58:39:df:08:5a:d8:a5:6b:bc:1a:98:2b:
c6:87:58:c1:bf:31:05:92:c6:e8:74:39:9d:a0:4e:6b:31:b2:
ba:bf:43:38:27:8e:56:71:a6:2f:80:2a:20:18:f6:f8:4e:66:
06:fb:bd:3c:2a:2f:07:00:df:0e:9f:b0:f1:25:cb:9e:39:61:
e7:1e:8a:79:e7:45:2a:0e:80:e8:58:14:c3:99:a0:d1:de:15:
44:df:29:5c:9c:c6:5a:10:4c:0f:a2:92:d1:ce:36:21:c1:12:
87:49:21:b0:39:2f:e4:ca:69:18:1e:a6:4e:6c:5f:b4:3e:44:
66:65:0f:74:ca:aa:5c:9a:e5:b1:b8:76:27:05:39:da:02:a0:
27:55:e8:91:2c:64:94:4f:38:c0:49:66:d1:98:65:09:76:d9:
31:82:58:87:11:26:ae:3d:36:b9:81:51:39:cf:05:66:c5:ac:
fa:f0:62:8d:42:69:65:63:d5:2a:c5:9a:14:30:79:74:b5:74:
d6:77:e3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 21:17:14 2024 by rpki-client on console-ams.rpki-client.org