Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/96EA0D3E0ECA11EF871B8941C4F9AE02.roa
File: 96EA0D3E0ECA11EF871B8941C4F9AE02.roa (raw, json)
Hash identifier: o+ARPaR44jzeT9xKDd/OYBdmZXFegYM2bL3EGQeHaSw=
Subject key identifier: 30:EF:FF:97:97:65:0F:AA:CF:B0:3D:CF:57:A1:C6:12:F9:DE:97:60
Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial: 01D2
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/96EA0D3E0ECA11EF871B8941C4F9AE02.roa
Signing time: Fri 10 May 2024 12:41:15 +0000
ROA not before: Fri 10 May 2024 12:41:15 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 203020
IP address blocks: 45.125.245.0/24 maxlen: 24
103.3.224.0/22 maxlen: 22
103.66.178.0/23 maxlen: 23
103.77.255.0/24 maxlen: 24
103.85.228.0/22 maxlen: 22
103.104.128.0/23 maxlen: 24
103.221.232.0/24 maxlen: 24
103.221.233.0/24 maxlen: 24
103.221.234.0/24 maxlen: 24
103.221.235.0/24 maxlen: 24
103.228.132.0/24 maxlen: 24
103.241.52.0/22 maxlen: 22
103.252.108.0/24 maxlen: 24
103.252.111.0/24 maxlen: 24
202.94.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 May 2024 11:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466 (0x1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Validity
Not Before: May 10 12:41:15 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=663e15eb-b74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:cf:9b:31:55:62:3b:dc:e1:a9:e0:9b:9d:
88:c8:b9:0f:e0:56:c0:54:f4:39:43:71:9c:b1:ef:
d0:55:97:a5:01:a0:5c:73:fc:eb:49:47:a3:de:b3:
85:d0:de:b2:1c:7d:d5:97:d6:a6:e9:0b:da:c5:b6:
46:65:9e:52:60:76:c7:b3:de:d5:88:9e:45:ec:e7:
a3:ae:da:d3:19:b1:b6:5c:5e:21:9f:7b:13:19:55:
64:e7:c0:5e:c9:8b:cb:4a:81:60:60:5a:28:c1:0f:
ce:4e:73:4b:1c:1e:a1:94:37:66:0c:31:46:c0:99:
5f:b5:94:a8:ba:33:15:e6:42:a6:a1:9a:a2:b5:e6:
f9:32:c1:bc:22:f4:b8:20:e0:b8:3f:8c:94:d5:fd:
53:40:09:70:10:bc:1e:5b:f6:b6:87:2d:7d:47:8e:
5d:ed:de:84:03:c1:73:cc:53:31:8e:57:58:af:85:
e9:39:21:c2:e4:a2:bc:e7:43:d4:a8:2b:f8:ae:30:
c3:48:04:40:aa:ec:05:c4:9d:17:85:f5:ea:d1:d5:
e1:c0:95:ed:ab:03:dc:28:cd:cb:2e:87:e2:8b:9f:
ed:17:da:d2:d4:a7:f2:88:7c:e9:4d:c5:0d:21:5e:
cc:88:b3:d5:16:2f:e4:7c:11:51:b4:01:69:bf:4e:
5e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EF:FF:97:97:65:0F:AA:CF:B0:3D:CF:57:A1:C6:12:F9:DE:97:60
X509v3 Authority Key Identifier:
keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/96EA0D3E0ECA11EF871B8941C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.245.0/24
103.3.224.0/22
103.66.178.0/23
103.77.255.0/24
103.85.228.0/22
103.104.128.0/23
103.221.232.0/22
103.228.132.0/24
103.241.52.0/22
103.252.108.0/24
103.252.111.0/24
202.94.174.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:4f:2a:aa:01:75:4a:f1:e8:2d:0a:49:f1:9d:51:d6:bc:20:
84:b1:7b:7a:12:41:3b:f8:0e:54:06:3f:7b:44:bb:c6:8a:3b:
72:c4:ba:74:6c:4f:1c:99:9a:95:fb:57:58:f6:a1:4d:da:db:
91:ef:6c:8c:58:0f:88:10:6e:c3:73:ba:7d:35:7e:4e:20:15:
25:a6:f4:4a:56:c5:11:b6:11:ec:2e:0e:61:04:aa:14:f2:86:
12:5a:0a:71:0e:78:c7:a3:4d:7c:3f:9a:6f:6c:87:87:7d:93:
e8:ae:75:5e:05:50:4d:88:f2:37:30:a6:bb:80:69:ce:60:61:
6a:1c:68:21:eb:0f:b7:fc:6c:d0:26:19:0b:9f:73:88:6a:df:
b6:aa:f7:c7:4f:62:8e:4a:58:68:d0:c1:6a:86:e6:6c:6d:a6:
8c:f4:2b:bb:6c:91:60:25:cf:d3:b0:86:57:39:f5:c2:30:9b:
e8:c5:02:a8:b6:a5:8a:5a:54:bb:68:b9:9d:3f:5b:33:83:9d:
3b:74:e8:a1:2f:d0:d6:37:cb:af:15:11:ed:79:39:46:f0:ce:
38:43:50:84:ff:bc:85:fc:f7:45:f5:c4:6d:5c:2a:13:01:28:
9f:5f:8d:c7:88:39:f8:d0:3c:e1:6f:fd:89:0b:52:f2:0a:67:
2e:82:ca:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:34:58 2024 by rpki-client on console-ams.rpki-client.org