Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/AADA155C06E911EFA9A17C3CC4F9AE02.roa
File: AADA155C06E911EFA9A17C3CC4F9AE02.roa (raw, json)
Hash identifier: 4EnQka4t8Z8kRN32dKnqdUAQ7OSGC21Z7WabZAVAiQk=
Subject key identifier: 45:CC:BA:FF:E8:D3:31:8F:03:ED:DB:30:E4:89:2B:2C:09:E2:33:1A
Certificate issuer: /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
Certificate serial: 05
Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/AADA155C06E911EFA9A17C3CC4F9AE02.roa
Signing time: Tue 30 Apr 2024 12:03:33 +0000
ROA not before: Tue 30 Apr 2024 12:03:33 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 917
IP address blocks: 103.23.172.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 May 2024 02:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
Validity
Not Before: Apr 30 12:03:33 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6630de15-7a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:e0:1b:c0:9a:22:95:71:8c:3f:fc:ed:65:
26:d6:56:26:02:33:21:25:52:c4:3e:3c:88:32:de:
af:4f:58:3d:e7:7a:cd:42:5c:c7:bc:38:a9:fb:8c:
89:27:ad:22:78:5e:89:7a:f7:e5:3a:07:76:31:f2:
94:d0:ae:5c:6d:b2:62:cb:22:46:ac:e1:7f:95:fe:
57:01:49:d4:46:d3:1e:b4:03:4b:e7:9a:b5:8a:0d:
1b:99:56:42:5e:06:d0:91:68:a0:19:67:8e:59:fb:
3d:7d:10:e3:dd:09:c2:fe:43:fe:c3:42:ee:b9:6b:
ce:fa:ed:4f:4d:83:3e:f0:cd:32:3e:7a:a5:5e:fc:
fa:c6:bc:73:dd:da:25:0a:69:63:b0:07:15:c7:38:
3c:8f:aa:56:ee:25:94:b4:c9:3c:06:23:82:43:20:
a7:c7:80:27:bd:5e:f9:f0:8b:8d:a5:97:6d:e5:78:
9e:5e:db:6a:47:bb:1b:f0:01:7c:e2:8d:a3:fa:c8:
21:4e:62:1d:a0:48:5d:c1:eb:af:55:48:e4:09:07:
fd:14:48:88:67:4c:9a:9d:5c:c0:2e:02:aa:ac:d1:
0a:2b:1a:69:54:1d:d8:c4:36:9b:7b:aa:a7:f0:31:
df:7c:fc:f3:83:ac:47:69:3c:9f:d2:a8:6b:b4:ff:
cd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CC:BA:FF:E8:D3:31:8F:03:ED:DB:30:E4:89:2B:2C:09:E2:33:1A
X509v3 Authority Key Identifier:
keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/AADA155C06E911EFA9A17C3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.23.172.0/23
Signature Algorithm: sha256WithRSAEncryption
86:1d:0c:89:60:91:7b:64:9c:c0:8d:63:20:43:b6:eb:c9:64:
5c:fd:4a:bd:ec:97:46:9d:f4:69:56:16:d6:8d:2b:0b:1e:87:
00:76:40:9e:10:86:31:98:89:bc:75:93:f0:fb:ae:3b:4f:08:
f5:2f:29:97:e6:51:2a:24:3c:63:17:07:89:de:63:81:ba:53:
d2:5d:42:85:8b:31:d6:ad:3d:0e:15:60:6d:a7:55:6e:3a:10:
59:b0:b5:f6:02:1c:3c:bc:68:5c:cf:63:65:98:e8:71:7c:af:
45:f6:15:0a:fb:9a:17:00:6d:35:cd:fd:1d:31:c8:da:7d:24:
08:b2:7f:a8:53:ad:09:7d:e6:16:e1:54:84:68:99:47:a6:05:
f1:40:fc:08:f4:1b:b5:ac:3a:44:a4:35:cc:84:80:cb:6c:1a:
c1:2e:8e:e7:fa:0d:0e:de:51:c3:a6:0d:26:5f:9f:c6:b8:8e:
36:a5:55:43:15:65:1f:e4:22:b9:2b:e4:e5:d6:9c:71:5a:a8:
aa:00:0e:06:57:6b:ed:23:44:a3:35:7b:7d:26:94:e4:4e:25:
e0:16:51:17:25:fe:19:e8:22:79:21:8f:14:17:93:80:8e:3f:
a5:3a:96:d7:77:b9:22:3f:2d:71:f9:81:97:e2:25:85:7a:2d:
f9:98:7a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:53 2024 by rpki-client on console-ams.rpki-client.org