Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/FD324818068911EDA290EA17C4F9AE02.roa
File: FD324818068911EDA290EA17C4F9AE02.roa (raw, json)
Hash identifier: ADbc53sJsfF3UzlUT9D/MkTrinU4H4KNjzyMV7VCUsA=
Subject key identifier: 44:65:F9:F0:00:4C:07:B9:37:00:AE:55:CC:4D:39:9E:87:70:F6:20
Certificate issuer: /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial: 09A5
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/FD324818068911EDA290EA17C4F9AE02.roa
Signing time: Tue 02 May 2023 21:38:23 +0000
ROA not before: Tue 02 May 2023 21:38:23 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 132372
IP address blocks: 103.55.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Nov 2023 12:54:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2469 (0x9a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Validity
Not Before: May 2 21:38:23 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=645182ce-cbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c9:90:f3:bf:e7:73:2a:fd:02:6b:9d:92:cb:
34:2c:05:b8:77:37:84:35:0f:79:5f:b3:53:49:db:
5a:c1:db:41:e0:35:e3:f6:3f:b1:0f:04:b3:32:a9:
9f:63:d4:88:b3:76:11:db:98:96:c4:2e:aa:28:c6:
e2:eb:e3:0e:86:8e:4d:3a:cf:89:22:4b:ed:27:4f:
82:4a:90:48:17:03:bd:16:f8:7f:31:39:c7:fe:7c:
63:fa:de:22:83:c2:5b:55:71:ee:7e:07:f7:a6:7c:
3a:df:7a:af:d3:e4:e8:40:f7:ec:f5:e0:b4:e9:44:
96:c2:54:2e:59:6f:46:19:1a:d6:98:81:3b:10:c6:
1a:e3:ac:91:bf:4d:62:b3:be:e3:fa:27:32:93:a7:
43:d8:b5:bd:60:1e:84:ca:70:7f:c4:26:14:47:dd:
5b:97:b6:c4:bd:b5:ad:db:90:59:aa:c5:e6:0f:15:
02:3f:2d:0a:ca:a7:a2:18:01:8f:bc:03:57:81:bb:
c7:6c:b3:03:b2:ec:64:74:5a:a2:61:26:d2:6b:7f:
0c:73:e1:d0:04:54:c5:13:57:26:45:e7:e8:b3:81:
1a:04:46:38:63:96:b0:25:74:f6:48:ff:d7:ce:ba:
94:d3:05:fb:01:ac:b2:f5:63:98:bb:ec:84:ac:33:
fd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:65:F9:F0:00:4C:07:B9:37:00:AE:55:CC:4D:39:9E:87:70:F6:20
X509v3 Authority Key Identifier:
keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/FD324818068911EDA290EA17C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.55.10.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:33:7a:7c:e3:1a:76:56:9f:74:9c:ab:61:34:1a:b5:bb:a4:
87:5a:22:9d:75:5c:f9:2f:35:9e:a3:60:0b:60:14:32:05:e4:
06:59:38:c9:51:76:4d:4b:97:1e:fa:a0:a4:05:22:f3:73:47:
8d:07:c4:94:7c:b9:05:b6:73:c2:bc:e6:f4:62:63:e9:fd:5a:
de:4e:63:51:ec:2e:41:91:1a:d6:5c:c9:7d:65:e7:92:97:c0:
e4:e3:70:2f:e8:0c:e7:ce:96:b5:78:0d:53:04:96:c2:01:2f:
a0:d1:2f:28:cd:1f:28:bb:be:66:84:94:58:31:e8:8a:27:f5:
0f:b4:5c:9d:3a:64:15:71:54:11:82:3b:f7:8a:ce:e2:d7:a9:
3a:e4:7c:a0:66:df:30:ce:12:98:03:99:9f:a7:96:ae:01:b3:
a5:00:e5:14:29:60:9d:d6:18:11:06:cb:d1:86:fa:33:a3:06:
fc:ff:46:cf:03:da:12:fc:c3:0b:ce:ef:78:e6:f5:d3:be:bf:
73:c8:b0:27:67:a0:82:b1:7d:d8:53:e2:62:85:93:e1:fd:e6:
16:35:ad:78:db:19:96:c9:c1:59:92:5b:d4:a9:df:29:c3:c6:
b1:88:9f:d2:b4:5f:50:69:a5:69:ec:8b:33:4e:b7:03:ef:bd:
75:4b:34:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org