Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/977B2C9A850B11EE8A762D78C4F9AE02.roa
File: 977B2C9A850B11EE8A762D78C4F9AE02.roa (raw, json)
Hash identifier: TCo8jlquq2cymWtHOsoaJVBIXkt/XkyR+HpUJy8s7Y0=
Subject key identifier: 78:4C:BF:0D:86:E8:DB:75:48:6A:91:5D:41:29:C3:24:19:9D:78:3E
Certificate issuer: /CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Certificate serial: 46
Authority key identifier: E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/977B2C9A850B11EE8A762D78C4F9AE02.roa
Signing time: Fri 17 Nov 2023 05:38:53 +0000
ROA not before: Fri 17 Nov 2023 05:38:53 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 139493
IP address blocks: 103.237.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Dec 2023 04:47:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B59E5/serialNumber=E47BF70254532697D20D0D3110F625370D65FA83
Validity
Not Before: Nov 17 05:38:53 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=6556fc6d-d912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:e1:c3:a6:df:fc:7f:09:f9:67:77:5b:00:
9d:f7:ae:c0:69:57:ea:11:39:33:94:16:c5:69:a7:
72:9d:15:75:11:61:22:b8:ad:64:37:df:c3:6d:78:
ca:1d:a0:92:fa:f7:18:97:10:ae:78:50:9c:08:07:
e5:cd:35:fc:25:c8:3e:2c:39:da:55:06:53:dd:ac:
a1:c1:db:0e:b8:40:b3:96:8c:aa:d7:15:11:5d:dc:
d9:47:54:9d:79:b0:19:e6:8a:3d:e5:f2:d8:55:cb:
b0:30:a3:dd:02:80:10:84:af:57:b6:97:df:00:57:
ce:bc:c2:2f:ff:19:ad:52:a6:1d:a5:d2:30:49:5c:
14:55:61:90:c5:de:ce:46:c3:6c:e6:da:40:7f:ff:
a9:81:58:ba:6c:04:63:b0:05:1f:bf:74:ee:1d:1d:
c4:ef:66:e7:02:0e:07:7a:d4:e0:7f:74:22:bb:d9:
b1:36:b0:6c:ca:79:42:8e:48:ea:a8:d4:b0:21:c7:
84:8a:11:03:19:b5:11:25:80:53:d3:71:07:05:c1:
39:00:fc:b1:3b:67:80:12:a7:f8:bc:26:25:ab:b4:
9f:3b:55:e2:a0:1a:17:2e:62:b3:47:2e:0e:8a:17:
37:31:34:fe:29:9e:d9:ba:e6:70:fc:c2:f8:9e:54:
10:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4C:BF:0D:86:E8:DB:75:48:6A:91:5D:41:29:C3:24:19:9D:78:3E
X509v3 Authority Key Identifier:
keyid:E4:7B:F7:02:54:53:26:97:D2:0D:0D:31:10:F6:25:37:0D:65:FA:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Hv3AlRTJpfSDQ0xEPYlNw1l-oM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B59E5/DD9F1F7C3C0111EE91CBE157C4F9AE02/977B2C9A850B11EE8A762D78C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.237.115.0/24
Signature Algorithm: sha256WithRSAEncryption
23:dc:d5:44:1c:08:d3:a5:7f:f1:cd:f1:9b:63:85:e3:e1:c3:
2f:fd:ca:00:2c:32:a1:9c:ab:39:03:37:a2:04:ef:d4:0d:f8:
62:e1:30:f5:65:9f:fe:34:0c:50:c3:d3:1a:a8:56:90:35:70:
ff:1a:9a:35:6a:db:35:1b:83:ce:72:b4:0f:37:42:19:bd:fb:
47:95:9d:85:65:2c:2b:ac:29:f9:59:d3:4f:28:66:9a:1d:74:
02:5c:1f:09:b8:78:c6:d0:6c:c7:1e:cd:6c:5b:ef:36:f6:9d:
2a:7e:c9:e2:66:a2:01:6a:1c:13:b6:ed:6d:e3:81:c1:aa:8c:
75:5e:90:75:37:c6:b3:c7:fa:15:8e:65:fe:f3:2d:04:da:1d:
56:a4:75:14:46:10:4e:59:9b:82:a5:df:4e:83:2f:c5:b2:a5:
7f:8d:aa:41:f5:14:24:a7:46:c4:1e:e6:3c:f8:dd:2b:b6:24:
f1:20:12:02:02:de:30:b5:20:df:65:60:03:f5:9f:f6:1a:69:
4b:e0:bc:a0:aa:f6:1b:8e:8b:42:2f:d0:bf:11:be:d5:fa:90:
0d:e7:20:56:ef:1f:43:6a:52:8a:42:99:63:c4:19:c0:99:91:
b9:c6:d2:e5:b9:e4:e5:ec:95:94:9a:36:2f:ea:b3:1d:c4:29:
c6:e1:fc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org