Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/0B5E5BB8116A11EC994F9D47C4F9AE02.roa
File: 0B5E5BB8116A11EC994F9D47C4F9AE02.roa (raw, json)
Hash identifier: Sl4jo8GoYmHvxl98IOytCg0mHw3anJ6/BGsR4r1goOQ=
Subject key identifier: 06:CE:36:3F:10:13:71:A8:FF:8F:F9:81:D0:C8:FC:18:67:60:65:1A
Certificate issuer: /CN=A91BE056/serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B
Certificate serial: 0401
Authority key identifier: 8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/0B5E5BB8116A11EC994F9D47C4F9AE02.roa
Signing time: Wed 11 Oct 2023 00:52:41 +0000
ROA not before: Wed 11 Oct 2023 00:52:41 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 135607
IP address blocks: 103.171.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Aug 2024 03:57:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1025 (0x401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE056/serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B
Validity
Not Before: Oct 11 00:52:41 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=6525f1d9-e750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:6a:07:68:fa:9a:08:30:e3:99:25:ec:71:
50:2c:5d:fd:0b:34:62:c5:fd:fa:46:fa:ab:f1:6f:
7a:15:38:be:2c:c5:c6:ea:cc:c9:45:c3:c1:e4:13:
3d:58:65:84:f7:41:3f:86:36:cb:d7:8c:cf:0b:03:
f7:06:1c:fb:79:65:1c:49:cd:c9:10:50:e7:87:7d:
50:39:cd:4b:3d:aa:97:45:9a:83:99:73:df:f7:2e:
b6:87:20:1e:32:68:03:82:24:46:10:97:4f:65:ad:
9a:a5:13:35:4f:2f:03:8a:a5:71:b1:6b:32:ae:e7:
e9:7d:b7:a4:19:04:94:81:50:dc:86:cc:fc:a1:71:
af:a2:bd:02:f7:7f:21:88:71:9e:3f:64:42:7d:fb:
6f:53:95:d0:6e:8c:05:e3:d0:82:dd:46:75:25:d4:
a7:57:27:58:0d:b9:4b:8d:ae:24:07:10:fb:c1:f3:
24:9c:fb:43:c7:10:f8:6f:ae:33:49:0e:e3:20:24:
e5:05:56:f1:7f:a9:00:a2:4c:09:9e:12:1c:01:27:
83:39:42:38:03:31:45:f6:89:d6:20:60:54:02:5d:
f2:a3:af:70:c4:43:ea:4d:7e:b1:d4:a8:bb:4e:4f:
42:e2:02:fb:7e:fd:b6:67:3c:a5:62:d4:f1:0a:7e:
94:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CE:36:3F:10:13:71:A8:FF:8F:F9:81:D0:C8:FC:18:67:60:65:1A
X509v3 Authority Key Identifier:
keyid:8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/0B5E5BB8116A11EC994F9D47C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.89.0/24
Signature Algorithm: sha256WithRSAEncryption
82:d6:68:a8:4a:13:1a:86:d2:7c:e9:42:83:82:af:ba:05:8c:
df:09:b3:4f:55:de:1e:d7:43:32:c4:17:96:c5:63:3b:54:f1:
4e:22:dd:26:9a:32:bb:ac:21:4f:3b:db:63:f0:c7:2f:6e:57:
3b:21:97:62:9b:6b:15:57:f8:66:05:ea:78:a4:79:af:52:25:
7a:ef:8f:4c:63:ca:78:de:67:28:9d:7c:59:d5:45:9e:88:29:
ce:cd:78:6f:d0:49:75:74:9e:31:64:d1:2a:20:92:36:19:14:
21:46:23:8c:69:16:6d:df:64:e4:0a:0b:95:46:f1:3d:84:8b:
27:4c:71:ee:8a:e3:17:b0:a9:71:d2:fe:a9:c6:88:bb:27:4f:
04:63:98:ac:24:c6:20:7b:f4:6d:50:e1:48:e3:b7:a9:52:d7:
04:f2:b1:f5:28:a3:88:5e:42:70:f9:73:e4:a8:86:d5:a6:a3:
57:53:92:4c:ed:67:9a:79:77:fb:e8:68:03:f3:1e:04:54:b4:
1f:7b:34:c7:6e:31:34:e9:ca:3c:72:4f:f2:70:9c:5e:a8:15:
ea:e5:70:7f:4c:e6:0b:32:2e:6c:aa:34:4f:a0:9f:c9:a4:85:
ab:b9:83:9c:9c:8a:53:20:77:9c:d7:f7:4a:2f:c0:48:ac:00:
ba:90:40:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 07:36:07 2024 by rpki-client on console-ams.rpki-client.org