Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/18CD11D6020D11EFB9644A64C4F9AE02.roa
File: 18CD11D6020D11EFB9644A64C4F9AE02.roa (raw, json)
Hash identifier: NlzEUVjfn+PAQJMHYZ5VQMa0DJkINcTEIJRpYhsAUg0=
Subject key identifier: D1:50:06:B4:0A:66:A2:6A:A4:74:D0:36:52:B9:37:0E:FB:B7:BC:95
Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708
Certificate serial: 08C0
Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/18CD11D6020D11EFB9644A64C4F9AE02.roa
Signing time: Wed 24 Apr 2024 07:34:35 +0000
ROA not before: Wed 24 Apr 2024 07:34:35 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 198247
IP address blocks: 103.244.134.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 09 May 2024 05:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2240 (0x8c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708
Validity
Not Before: Apr 24 07:34:35 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6628b60a-2fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2a:6f:bf:4a:46:4e:48:c8:18:3e:dc:e8:ec:
15:6d:ab:f2:14:5a:06:b2:36:b8:e2:b8:5d:54:1b:
df:34:1f:4d:69:17:ab:a6:32:8b:6c:48:68:e8:93:
36:60:e1:2e:09:9a:cc:67:c7:94:70:38:5d:2f:19:
fb:64:26:92:14:12:1f:ce:8f:48:05:67:f7:16:39:
7f:cd:9d:de:4d:99:23:83:51:ea:fa:f3:38:9a:9c:
0a:56:8b:78:f7:bb:99:74:b7:87:b1:a7:f8:8d:20:
f2:1c:30:34:9f:1b:9f:45:fd:50:e4:22:a1:ef:41:
18:1d:2a:20:38:90:2a:bd:4f:a4:fc:37:16:f8:32:
4c:78:02:37:97:ea:df:88:72:23:5d:71:47:19:ff:
88:12:a1:64:fb:0e:31:2f:7d:1d:45:29:7d:4a:77:
b2:34:2f:08:39:aa:cd:cb:63:7b:b7:4e:69:fc:9b:
02:f1:5b:c0:a4:69:7a:7b:0d:fd:6b:2e:4a:c4:a5:
99:03:99:94:3d:e9:2f:8b:0c:8e:ba:9c:d7:2e:64:
a4:45:36:2e:cb:70:75:9f:04:ab:b2:68:d7:8a:6e:
62:4a:ba:ac:0f:b6:50:f6:be:2a:59:fa:27:3d:6d:
f9:5a:d8:f3:40:f1:9d:fc:a6:50:a7:88:65:ca:83:
ac:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:50:06:B4:0A:66:A2:6A:A4:74:D0:36:52:B9:37:0E:FB:B7:BC:95
X509v3 Authority Key Identifier:
keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/18CD11D6020D11EFB9644A64C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.244.134.0/23
Signature Algorithm: sha256WithRSAEncryption
37:b6:fe:a7:40:af:31:09:b5:6c:e8:47:d7:fa:18:29:d9:da:
0d:f8:61:47:fe:59:31:3a:bf:6b:3e:b0:33:83:9e:38:08:b8:
a2:26:69:16:bd:85:4d:37:ac:2d:1b:fc:c8:4d:c3:c0:41:60:
65:57:19:a3:d0:21:d2:35:70:7b:97:56:80:d0:0b:b1:a8:cf:
d4:45:86:48:a3:bd:71:83:33:c7:10:3a:f4:9e:a5:e7:98:52:
c9:60:63:fb:31:85:64:04:1c:83:59:3a:2d:c7:22:47:1d:17:
5c:67:ab:fb:fd:74:b0:53:b3:8f:bb:ea:70:96:26:1f:56:12:
34:ad:5c:ff:ea:58:20:a0:f9:d7:0a:03:dd:85:18:be:bb:94:
66:70:cf:62:da:0e:a7:37:11:66:0c:5f:de:c6:6e:23:51:00:
1e:de:fc:fa:3f:4c:77:cd:05:7c:17:31:e7:dc:67:64:c8:ea:
76:60:92:d2:4a:6c:19:5c:00:53:8c:57:50:a5:80:b4:19:60:
3b:8b:2f:a2:81:63:05:ac:e5:94:38:2d:ec:8c:1f:6b:a1:93:
91:9e:2f:0a:a1:87:4e:e4:13:d6:be:10:50:bf:b3:9d:fd:2a:
40:ff:53:1b:8c:ea:b5:f8:2f:db:0e:4e:f1:55:d6:e0:6a:fd:
68:16:62:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:24 2024 by rpki-client on console-ams.rpki-client.org