Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/435878DECD7311EDB3CDC65DC4F9AE02.roa
File: 435878DECD7311EDB3CDC65DC4F9AE02.roa (raw, json)
Hash identifier: 6KkHzM84O434DpjtlQpDdnP8Pj+03LBillHw0JAVBtk=
Subject key identifier: 2A:94:C0:3D:A2:9B:B6:43:84:0E:22:10:D9:F0:D3:DE:22:59:57:6B
Certificate issuer: /CN=A91B43EE/serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684
Certificate serial: 02
Authority key identifier: 02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/435878DECD7311EDB3CDC65DC4F9AE02.roa
Signing time: Tue 28 Mar 2023 14:17:26 +0000
ROA not before: Tue 28 Mar 2023 14:17:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 151044
IP address blocks: 103.224.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 10:26:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B43EE/serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684
Validity
Not Before: Mar 28 14:17:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6422f6f5-eaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:ee:5c:64:4c:b5:55:be:02:82:76:c1:92:
20:dc:c4:bd:e5:45:7b:7f:8e:91:ad:47:13:7a:ca:
d9:e3:3b:98:5c:ac:29:4f:b5:22:ec:db:bf:66:64:
d9:b8:4a:15:72:d0:a4:52:3f:f4:eb:28:7b:56:91:
4f:59:b4:12:89:ce:2e:01:10:ed:63:25:1b:be:59:
cc:31:c9:53:36:2a:2e:22:72:9f:d9:f4:ad:47:98:
23:aa:f2:96:d4:1c:f4:13:ee:69:07:6a:4c:fa:1c:
ee:4d:a9:69:ee:64:35:18:ee:d5:06:84:f3:b6:90:
2e:8f:d1:ad:87:7a:48:85:57:0e:64:7a:e8:b4:a9:
1a:54:98:1c:a3:f7:73:51:f2:08:aa:c4:ef:81:88:
c6:45:1b:b2:59:d8:f2:3f:45:19:82:10:c5:81:1b:
42:88:e0:77:52:e8:b4:08:98:e8:35:83:2f:11:55:
8b:ed:e3:e6:d3:4e:37:1d:9f:6f:61:32:8e:83:46:
be:0c:39:0e:e6:70:4a:2a:72:cf:ce:48:05:ce:5f:
5f:ca:c6:c6:75:1a:b8:cf:b6:10:23:31:55:7f:0b:
c9:e5:34:6e:4f:b1:38:d2:15:2c:02:4b:2a:c9:51:
37:90:3b:33:e2:ed:57:cb:0a:38:ec:db:06:fb:f7:
6b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:94:C0:3D:A2:9B:B6:43:84:0E:22:10:D9:F0:D3:DE:22:59:57:6B
X509v3 Authority Key Identifier:
keyid:02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/435878DECD7311EDB3CDC65DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.55.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:80:53:ec:ff:3c:83:e7:f0:fb:64:96:c2:4c:67:0c:ad:c8:
4d:5e:94:85:d2:82:2f:b0:19:55:76:12:76:3c:dc:ce:6a:ad:
ee:4f:2b:66:b8:b8:20:61:a8:ae:d6:9f:08:fc:fb:1f:fe:aa:
6c:d6:d2:14:b5:93:32:70:c4:89:bf:7e:1a:98:79:9e:54:b7:
dd:65:71:1e:7e:26:83:e5:b6:11:17:b1:d8:d9:28:f2:19:6a:
8f:f0:09:ad:39:c7:10:7a:9e:d5:a7:e4:c2:04:35:34:40:f1:
1a:8c:72:aa:f6:fe:00:99:fb:0d:b9:fc:c5:7d:b8:61:3d:a5:
de:e1:24:78:10:d8:95:79:9e:90:58:77:1a:92:a9:01:b2:69:
95:17:7e:06:2d:34:ca:33:fb:2a:e7:c5:89:12:dd:45:c1:de:
3e:d2:4c:a2:a2:c7:9f:b1:11:59:f8:d3:5a:f0:94:aa:dc:c0:
5b:66:4d:4b:55:74:5d:87:53:a5:26:41:63:22:49:88:d1:8c:
b8:f2:61:f5:f6:7a:8c:b1:76:10:f2:f7:2e:2e:1a:a2:08:9c:
78:97:d7:d1:9f:ab:85:66:fa:47:3b:68:2a:2a:98:ce:59:c3:
31:fb:d7:7b:73:b0:6b:fb:8a:f1:d3:e6:f2:78:16:ec:43:74:
1c:4d:90:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:56 2024 by rpki-client on console-ams.rpki-client.org