Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/5B8FA5A88C5811EFA7264959C4F9AE02.roa
File: 5B8FA5A88C5811EFA7264959C4F9AE02.roa (raw, json)
Hash identifier: cTGFMG3ECEzUl0s4p6Zs5CbJs23XscO+ZSaWZm2UBgY=
Subject key identifier: BF:3E:68:AA:3F:0F:3C:B9:BA:92:DD:F3:57:97:24:A3:66:B1:D2:03
Certificate issuer: /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial: 026D
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/5B8FA5A88C5811EFA7264959C4F9AE02.roa
Signing time: Thu 17 Oct 2024 07:20:59 +0000
ROA not before: Thu 17 Oct 2024 07:20:59 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 15731
IP address blocks: 103.189.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 10:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 621 (0x26d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Validity
Not Before: Oct 17 07:20:59 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6710badb-b488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d5:39:5c:88:0b:76:d0:18:7b:c8:6e:5d:6e:
9a:22:d4:07:8a:6d:dd:bd:7a:8f:49:45:87:ea:25:
4a:c2:21:c3:bb:00:60:2a:b5:55:4c:f2:76:86:4e:
84:30:3c:2a:cf:3b:0d:65:42:23:27:c8:d1:4e:a9:
76:7a:17:ee:52:2d:57:79:00:ff:53:c9:96:6d:5e:
a8:23:75:15:4e:93:2b:2c:4d:66:d5:9f:72:5a:3d:
dc:05:d0:0e:4e:49:ae:2a:f6:9f:2b:8e:58:00:15:
ff:1a:12:a1:d6:ba:cf:34:52:7a:dd:14:8b:1a:8e:
3f:89:23:9f:8e:6e:0d:cc:86:34:90:32:7b:4d:56:
e8:f3:83:01:04:3b:99:3e:db:1d:18:d4:66:02:50:
be:cf:74:d5:d9:f3:7c:3c:ba:35:5f:f6:d7:47:53:
aa:4f:f4:94:ea:e2:a2:f7:b8:fe:85:16:12:45:5d:
ad:55:7b:1b:54:d3:8e:09:7b:df:48:2f:f0:7b:bf:
d8:11:5c:6b:13:ab:8b:b1:2c:a8:79:e8:da:5a:56:
f4:9e:70:80:c7:fd:1d:4a:fe:ff:05:11:8f:19:a4:
13:de:63:aa:63:99:f0:b4:1d:a5:c6:5b:97:21:d4:
78:c6:d0:af:f4:77:53:7b:7a:2c:46:a2:27:b5:60:
65:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3E:68:AA:3F:0F:3C:B9:BA:92:DD:F3:57:97:24:A3:66:B1:D2:03
X509v3 Authority Key Identifier:
keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/5B8FA5A88C5811EFA7264959C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.190.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a9:72:46:13:8b:90:64:4e:31:b0:ed:c8:5b:28:73:27:95:
96:55:33:f1:e3:d8:9f:e1:b9:bc:33:80:67:db:e8:07:f2:43:
9d:20:c1:c4:7a:3e:c3:6b:c2:5c:6d:a3:45:78:d1:db:0c:ca:
6f:9f:6c:40:bb:75:9d:b6:97:ad:fd:9a:cd:e1:94:7a:73:53:
ae:ba:17:21:5f:20:9b:ae:e8:83:b2:9a:2c:8f:e2:2d:92:84:
77:fd:1b:ce:a7:54:f4:29:38:97:52:87:f8:76:1e:fd:4f:dd:
2f:2a:04:42:60:21:0d:70:b1:f1:4a:38:da:2b:25:cc:c6:51:
32:d1:4d:52:75:d8:14:48:73:bc:b3:d1:ac:f5:3e:60:d8:82:
68:8f:38:06:22:52:ac:52:47:83:86:da:6b:79:47:56:db:63:
6c:ca:93:ed:45:61:49:ae:4e:b4:5e:f0:c3:d5:a5:3c:b0:b4:
9b:74:70:52:e4:a3:53:85:fc:8a:f8:ac:4d:20:76:92:46:2e:
d1:c9:8c:b1:5a:07:e7:d0:8e:f6:a5:e5:4a:39:ec:79:8d:1b:
4e:d2:0e:13:c1:d5:ae:30:b1:24:c0:e5:a3:89:2e:28:ea:eb:
00:d2:00:1d:2f:88:b5:21:81:be:a7:d3:14:98:f1:2b:0e:bc:
b8:71:f8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 12:50:57 2024 by rpki-client on console-fra.rpki-client.org