Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/AB5A3D6050B711EE80742A2BC4F9AE02.roa
File: AB5A3D6050B711EE80742A2BC4F9AE02.roa (raw, json)
Hash identifier: SkVi+rs9ELj3XJgviMeoHzxWsxaeRFMefmXpZqNzy0A=
Subject key identifier: 43:DF:CC:B6:88:C6:8C:8D:7C:11:F7:5E:66:4B:0A:71:8C:4E:7C:2B
Certificate issuer: /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial: 06
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/AB5A3D6050B711EE80742A2BC4F9AE02.roa
Signing time: Mon 11 Sep 2023 15:27:08 +0000
ROA not before: Mon 11 Sep 2023 15:27:08 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 21082
IP address blocks: 103.115.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Oct 2023 01:50:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Validity
Not Before: Sep 11 15:27:08 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64ff31cc-6c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f8:66:d0:22:df:fc:6c:12:65:4c:f2:62:10:
29:58:42:1f:79:c2:b7:9b:e3:64:95:f7:d6:86:ed:
87:e5:15:90:9c:51:b3:40:4b:61:8f:1e:54:1d:46:
2e:00:2c:20:ea:0b:a4:b0:ab:17:62:a3:0d:91:89:
69:48:7f:9a:5d:25:8b:42:be:88:de:d8:8c:bc:5f:
07:b7:32:6c:ea:3e:ba:b3:78:48:e0:ff:99:f0:ff:
c1:49:7a:74:61:cd:9d:c4:1c:53:68:14:07:19:f9:
21:43:e3:ec:30:25:eb:a2:2f:77:72:08:a0:f9:39:
5b:e3:c6:b0:e1:4f:04:7f:a9:01:fb:16:ae:93:61:
32:95:24:e6:f2:40:86:52:c0:44:cc:4a:12:8c:60:
c1:ed:bb:33:a7:ae:19:cb:9f:b8:8b:c8:f8:78:df:
92:8d:e2:96:96:3f:77:fc:a7:74:5e:58:c9:b5:a7:
fc:47:32:40:1f:5a:b5:07:a7:72:7b:2b:be:aa:04:
dc:eb:ac:15:26:ac:82:21:1e:00:1f:9d:94:b2:3b:
37:27:f8:21:00:37:de:f8:c4:b3:33:9f:92:a3:94:
b8:4b:7d:57:98:a7:07:19:ff:c1:e7:2e:dd:18:d5:
bc:6c:6c:96:31:e1:d4:4f:e8:e0:94:b7:c5:44:ff:
98:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DF:CC:B6:88:C6:8C:8D:7C:11:F7:5E:66:4B:0A:71:8C:4E:7C:2B
X509v3 Authority Key Identifier:
keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/AB5A3D6050B711EE80742A2BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.17.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:74:97:e1:c3:06:f5:5a:7f:44:fd:c9:d5:83:07:2e:eb:98:
d6:a7:bc:c6:ba:e2:14:82:be:a3:03:bf:4f:08:06:dd:d1:c8:
6c:4d:cf:40:ac:4b:4e:ac:af:55:83:f1:39:3a:dd:ec:c2:22:
08:b4:b7:31:d6:65:36:88:18:bb:a4:a5:40:46:48:21:ae:c3:
14:02:4d:c5:95:20:21:e2:b9:4b:b9:b1:be:80:e4:7f:35:a0:
b3:39:61:f4:fc:2c:ee:83:3b:fd:b1:c1:70:53:fd:18:b5:95:
55:61:46:d9:40:03:ae:9b:55:7c:c2:99:10:fe:98:82:d4:4b:
d4:a5:70:a4:e5:9e:31:e8:39:34:20:07:f0:1a:c1:4b:fd:e4:
e2:26:0e:86:6a:73:77:aa:1f:f1:a2:78:57:aa:74:29:df:bf:
7e:21:56:3a:ea:57:9c:0d:0b:fd:01:f3:e8:b6:7e:a1:c6:ca:
b0:4b:2d:75:28:fb:4e:ad:dd:05:f9:f0:b1:db:65:55:15:b0:
5e:9b:23:2e:8e:c6:bd:88:e4:0a:35:30:49:55:1a:d0:7b:1c:
a4:10:15:1f:06:6e:48:0a:86:94:ba:51:7e:d4:7d:51:e2:22:
b8:e6:ab:b3:85:c3:32:9e:50:3a:30:8c:8d:f0:3a:92:eb:84:
97:3b:03:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:25 2024 by rpki-client on console-ams.rpki-client.org