Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/B4A978F0127F11EBA218CA3DC4F9AE02.roa
File: B4A978F0127F11EBA218CA3DC4F9AE02.roa (raw, json)
Hash identifier: /G0XnBuLK7UiUOO5YKRpoyCeq4rjkuvylJXHC/r/ubA=
Subject key identifier: FD:5E:24:D0:31:5D:8B:6F:9B:70:B2:23:48:EB:83:B0:80:FE:D9:F5
Certificate issuer: /CN=A9192210/serialNumber=781F95B0C8AB2EF7FD73CF8FC10D2FA86ECCDC4A
Certificate serial: 06EB
Authority key identifier: 78:1F:95:B0:C8:AB:2E:F7:FD:73:CF:8F:C1:0D:2F:A8:6E:CC:DC:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/B4A978F0127F11EBA218CA3DC4F9AE02.roa
Signing time: Wed 26 Jun 2024 22:27:47 +0000
ROA not before: Wed 26 Jun 2024 22:27:47 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 56203
IP address blocks: 103.29.76.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 02 Oct 2024 05:23:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1771 (0x6eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192210/serialNumber=781F95B0C8AB2EF7FD73CF8FC10D2FA86ECCDC4A
Validity
Not Before: Jun 26 22:27:47 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=667c95e3-8325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d9:ca:e5:5e:0e:74:a0:22:67:9c:ae:b9:bb:
d2:59:e1:6b:02:1b:39:2c:73:b9:e3:97:23:91:c1:
28:19:7f:c5:66:62:d8:b8:e7:43:96:69:5d:d0:95:
5a:fb:13:99:80:e6:69:5f:44:5c:ea:2f:d4:af:44:
0f:af:67:48:b2:ec:4e:c3:31:11:3e:97:01:00:32:
e7:1c:a4:51:f7:3b:08:bc:82:65:22:63:e6:c5:b3:
fd:bd:2a:d7:de:c4:3d:bd:58:f0:89:27:fb:59:47:
47:40:b1:c9:69:c9:33:d9:18:10:18:e3:bd:cb:a2:
0d:1e:f3:bf:ba:9a:ed:67:b0:51:94:0b:c1:a7:22:
fd:07:bf:86:9d:a2:4d:2f:c1:69:f0:47:fb:34:d9:
43:67:23:d1:f2:0f:ae:f6:4a:80:ad:7d:4d:98:59:
b8:b5:5a:73:eb:47:53:4e:f4:ef:c8:32:f4:72:9f:
3b:91:86:f0:ee:71:4f:c3:87:a9:b1:15:33:22:6e:
cc:bc:bb:2e:f0:82:c0:4a:5c:c6:d6:d9:76:cb:c1:
f8:8d:61:32:bb:fc:8d:66:40:70:0b:58:9a:61:9f:
ba:a9:01:d8:55:77:27:8a:06:cf:47:c0:52:02:4e:
8e:9e:79:75:a5:79:5e:0b:86:d5:ac:46:ab:1e:b4:
72:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5E:24:D0:31:5D:8B:6F:9B:70:B2:23:48:EB:83:B0:80:FE:D9:F5
X509v3 Authority Key Identifier:
keyid:78:1F:95:B0:C8:AB:2E:F7:FD:73:CF:8F:C1:0D:2F:A8:6E:CC:DC:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB-VsMirLvf9c8-PwQ0vqG7M3Eo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192210/5CA373D8127811EBA8592412C4F9AE02/B4A978F0127F11EBA218CA3DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.29.76.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:9e:8c:8e:57:81:00:28:c4:62:c7:83:b8:54:01:95:a3:e1:
44:50:a8:e8:90:45:7a:b1:11:b3:33:16:3d:e9:90:8a:fe:63:
9f:37:17:a2:5a:96:28:10:67:ef:c7:3b:e2:8f:ef:2d:9e:b1:
e9:df:a0:2f:db:88:a5:8d:5b:26:cc:2f:ca:ec:12:7c:ab:38:
ad:8c:05:54:98:2a:03:ec:f1:1c:20:b0:cc:f9:9c:2d:e1:8e:
6c:18:92:d3:18:66:59:69:e0:a5:a1:72:79:96:be:6c:5c:b4:
d1:b0:e2:18:3e:40:09:8e:1b:55:63:90:da:a8:44:f0:d4:51:
79:af:99:ba:b7:0d:1b:5b:2b:69:74:75:84:1e:30:c0:35:45:
6e:d5:bc:f6:14:88:56:c2:12:c8:90:f0:59:27:4f:d6:14:ee:
50:da:1f:f3:ff:e5:b5:eb:67:18:a5:86:a4:27:8d:35:68:78:
7e:f2:86:44:60:61:6d:7c:74:83:b1:45:47:5a:04:43:6f:65:
db:bb:eb:88:83:e0:15:51:e3:f4:03:5a:c9:0a:49:66:58:b4:
ba:89:51:02:f0:fb:b3:86:14:e7:da:e9:00:75:19:a6:d5:a9:
b4:5d:d5:99:23:75:04:a2:cd:be:e1:87:48:72:71:2f:1d:01:
0e:da:34:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 08:41:20 2024 by rpki-client on console-ams.rpki-client.org