Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/01AA80A0F3E611ED97DFEF30C4F9AE02.roa
File: 01AA80A0F3E611ED97DFEF30C4F9AE02.roa (raw, json)
Hash identifier: eo8mfl+SVR1f4ejRnoGJIgmidWoO/KRTtE+W3qLIO6M=
Subject key identifier: 4A:6C:59:CF:25:41:10:15:D5:62:6D:A3:53:38:2B:7C:98:BF:0E:E8
Certificate issuer: /CN=A91B9C52/serialNumber=7905553FECA59030D51918372F1EE17274949FB5
Certificate serial: 03C3
Authority key identifier: 79:05:55:3F:EC:A5:90:30:D5:19:18:37:2F:1E:E1:72:74:94:9F:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQVVP-ylkDDVGRg3Lx7hcnSUn7U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/01AA80A0F3E611ED97DFEF30C4F9AE02.roa
Signing time: Tue 01 Aug 2023 01:42:31 +0000
ROA not before: Tue 01 Aug 2023 01:42:31 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 142127
IP address blocks: 103.151.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Aug 2023 08:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 963 (0x3c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9C52/serialNumber=7905553FECA59030D51918372F1EE17274949FB5
Validity
Not Before: Aug 1 01:42:31 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64c86307-116d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:13:10:39:0a:d0:15:3a:60:3e:90:47:7f:ab:
eb:f4:a2:0c:78:9b:94:91:6d:75:6b:14:56:98:ce:
40:53:a0:d1:83:af:b9:4d:45:ef:c8:4e:78:bb:85:
91:9a:0f:4e:a9:28:20:4f:00:e5:92:3e:8d:6a:b9:
97:73:af:a3:47:61:b6:27:3d:49:ff:4c:d3:74:14:
4f:5f:a4:4b:96:d8:eb:23:d0:aa:28:ce:d9:51:33:
8b:22:07:dd:46:59:a3:67:ca:66:6e:e9:c2:a4:14:
51:d1:b8:c1:da:ff:38:7c:88:83:20:4a:f7:ea:b5:
79:53:5d:36:f7:dd:01:f6:98:d5:3b:61:83:98:58:
9c:3d:27:f5:e7:bb:4a:46:d1:36:53:cc:8c:4a:ef:
9f:35:28:73:6f:67:0c:96:6d:f6:0b:4f:9c:6f:0d:
96:2b:6b:98:96:76:45:58:7b:54:38:e3:ab:db:29:
e9:b6:18:fd:b2:b9:cf:8c:9e:6f:07:66:95:a0:f3:
46:5b:76:0c:9d:77:70:42:de:23:b9:28:30:6f:7e:
9e:24:84:dd:23:01:ac:b4:c1:b9:58:32:ac:83:2f:
f0:d6:f1:4d:71:8c:6c:15:c9:b1:07:bb:e2:b8:83:
31:29:eb:e7:4b:a7:da:8d:29:97:ce:bb:b9:d2:53:
5d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6C:59:CF:25:41:10:15:D5:62:6D:A3:53:38:2B:7C:98:BF:0E:E8
X509v3 Authority Key Identifier:
keyid:79:05:55:3F:EC:A5:90:30:D5:19:18:37:2F:1E:E1:72:74:94:9F:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/eQVVP-ylkDDVGRg3Lx7hcnSUn7U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQVVP-ylkDDVGRg3Lx7hcnSUn7U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/01AA80A0F3E611ED97DFEF30C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.236.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:3a:e4:a6:92:b7:95:e3:c6:8c:b6:33:0e:5d:57:68:31:f2:
ee:04:e0:10:c6:dc:6f:0e:6b:b9:df:25:56:dc:a7:9a:05:32:
19:6c:c4:8f:69:18:8a:64:69:1f:1e:11:e4:37:62:8c:94:18:
6f:b4:af:10:cb:7b:0c:19:71:13:f9:8b:df:02:0c:bc:2a:7c:
32:88:18:b2:56:f7:15:f8:e2:e6:5e:73:b6:5b:10:d6:a9:2f:
c7:3c:c5:51:8c:89:9b:4f:91:89:6a:53:30:4a:53:ca:73:c8:
a1:6d:09:54:3a:36:b2:49:ea:27:cd:06:9b:bf:dc:f8:2e:e0:
47:20:8e:f4:bf:97:59:4b:1b:38:a5:22:87:62:ad:11:61:fb:
b4:50:76:12:4f:db:ed:ff:e5:9b:cd:aa:c1:3c:99:67:e2:12:
6c:61:9e:30:e1:87:99:c4:ee:7e:34:df:5f:a4:82:1d:2d:3e:
b4:c6:07:08:59:bc:bb:f2:d2:70:57:fa:7c:ba:4c:a2:a2:72:
e9:c6:14:29:43:e3:63:8c:31:8c:c0:da:20:b1:7b:36:87:6f:
32:69:fe:ec:d2:7a:3e:64:25:29:e2:47:25:5f:67:c2:cd:1f:
c5:87:aa:7c:dc:46:95:d7:82:d7:f6:87:77:e3:19:20:80:66:
f5:d2:e0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:58 2024 by rpki-client on console-ams.rpki-client.org