Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EE01/9A51E8A82BB811E8822E8566C4F9AE02/14E62B642BBA11E89C762E6AC4F9AE02.roa
File: 14E62B642BBA11E89C762E6AC4F9AE02.roa (raw, json)
Hash identifier: 0mKATKZsFaqW5iiF6jf7Ce63xNBoVIS5znQ0fqExcBk=
Subject key identifier: 0F:11:C4:46:8C:14:14:EA:8C:F2:9A:0B:7E:23:7D:28:88:56:AA:6D
Certificate issuer: /CN=A917EE01/serialNumber=AC6C660C8FEADABDBCC3BEF5E3C42BE77DE5D51B
Certificate serial: 14D5
Authority key identifier: AC:6C:66:0C:8F:EA:DA:BD:BC:C3:BE:F5:E3:C4:2B:E7:7D:E5:D5:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGxmDI_q2r28w77148Qr533l1Rs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EE01/9A51E8A82BB811E8822E8566C4F9AE02/14E62B642BBA11E89C762E6AC4F9AE02.roa
Signing time: Sat 30 Mar 2024 17:25:24 +0000
ROA not before: Sat 30 Mar 2024 17:25:24 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 24183
IP address blocks: 103.111.76.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 04 Jun 2024 05:14:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5333 (0x14d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EE01/serialNumber=AC6C660C8FEADABDBCC3BEF5E3C42BE77DE5D51B
Validity
Not Before: Mar 30 17:25:24 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66084b04-8d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:61:b4:c3:de:12:20:8e:23:e4:5e:df:38:2d:
96:d1:9e:15:c7:5b:e0:34:3d:fb:17:cd:be:72:f1:
ab:6e:9e:89:7e:72:7f:48:f6:b4:44:4d:22:a9:08:
dc:67:64:06:a6:22:3a:e9:83:f1:ba:b0:da:6a:77:
35:b0:86:1a:da:d7:55:fe:ce:64:a9:cb:cd:b2:92:
dd:88:68:8b:ca:84:c6:b2:74:1a:4b:8c:9b:7b:9f:
57:fb:95:50:0a:9b:65:d0:df:83:ee:15:51:44:66:
98:57:34:1b:1a:aa:94:ec:a3:16:75:f6:e4:53:91:
fe:9a:0a:94:0a:0e:c7:96:d6:e1:0e:78:c7:bb:36:
92:f0:8b:65:91:70:9c:17:d6:61:ca:dc:47:bc:df:
3b:13:48:14:04:17:d6:65:f6:07:dc:7b:67:4b:1e:
9a:b7:9a:47:1e:77:5f:93:08:ce:f1:64:b0:9d:7d:
50:2f:9b:b6:a1:2b:b2:e6:12:fb:bd:5e:2d:4f:7d:
34:04:ec:a2:0a:2c:f1:4e:fb:17:cd:60:bc:4a:45:
38:f0:aa:e0:8c:ea:19:f7:e6:1f:49:81:a9:ef:d6:
8d:15:8e:b6:02:3f:b4:d4:8f:4f:34:8a:28:8f:70:
8b:52:4b:ae:31:7f:75:6f:6f:98:d8:0b:c4:db:67:
ef:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:11:C4:46:8C:14:14:EA:8C:F2:9A:0B:7E:23:7D:28:88:56:AA:6D
X509v3 Authority Key Identifier:
keyid:AC:6C:66:0C:8F:EA:DA:BD:BC:C3:BE:F5:E3:C4:2B:E7:7D:E5:D5:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EE01/9A51E8A82BB811E8822E8566C4F9AE02/rGxmDI_q2r28w77148Qr533l1Rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGxmDI_q2r28w77148Qr533l1Rs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EE01/9A51E8A82BB811E8822E8566C4F9AE02/14E62B642BBA11E89C762E6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.76.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:c7:d2:db:38:6b:d4:a7:a3:86:02:34:42:97:e0:49:a6:f2:
29:7e:12:b7:99:4e:72:88:53:af:d2:fe:5c:17:f2:90:3a:a3:
8f:0a:a4:d2:0b:3a:b0:78:39:81:82:26:38:25:a6:c9:0f:50:
6a:15:0d:75:20:88:63:b5:03:5c:72:12:af:dd:02:72:f1:3b:
47:d5:e8:a1:eb:d2:f1:22:92:b9:bb:90:5e:ff:b6:48:cf:d2:
c9:ca:1c:fa:04:ac:79:cf:cc:e8:c0:e5:5a:65:36:ba:d9:a6:
8f:a9:d6:3f:4a:23:4e:51:0b:b9:58:8c:8e:50:d8:15:fe:f9:
62:7b:9d:94:f3:21:d7:21:8f:91:60:1f:1f:19:d1:1a:f4:79:
91:61:92:07:bc:71:0b:ac:13:7e:bb:48:09:37:82:a4:95:78:
5d:7c:18:67:05:4d:af:25:a9:61:49:31:e3:8b:eb:19:20:d2:
53:5d:f0:dc:60:3f:6c:5d:aa:14:d7:ad:54:85:f6:9a:59:3d:
c2:d3:cc:73:b2:a5:d6:85:4e:73:09:6d:99:4d:f0:7a:8a:00:
7e:1c:2a:54:ce:0f:af:d0:43:ce:2a:a8:8c:0f:cb:a2:1b:06:
30:d7:df:9d:6a:6b:2e:88:82:74:6a:75:86:aa:0d:8d:ed:8c:
91:ee:62:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:13 2024 by rpki-client on console-fra.rpki-client.org