Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/37EB330AC9A411EE98496754C4F9AE02.roa
File: 37EB330AC9A411EE98496754C4F9AE02.roa (raw, json)
Hash identifier: pq3YmshSa5LiwtO4lXl1oBpAEwDO9Rdm27qbxdhtJJo=
Subject key identifier: 27:DA:65:42:CB:7E:70:7F:11:A4:51:F4:82:D0:CF:54:E5:08:02:22
Certificate issuer: /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B
Certificate serial: 05
Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/37EB330AC9A411EE98496754C4F9AE02.roa
Signing time: Mon 12 Feb 2024 12:43:16 +0000
ROA not before: Mon 12 Feb 2024 12:43:16 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 7545
IP address blocks: 103.42.62.0/24 maxlen: 24
103.42.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Oct 2024 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B
Validity
Not Before: Feb 12 12:43:16 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65ca1264-7fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:c6:20:ee:85:42:e8:b8:fa:9d:3e:13:bb:
f4:f2:b2:fd:19:1a:11:61:5b:da:a0:a3:0d:ae:29:
9c:ce:59:8c:b9:af:16:ee:60:ae:53:a9:40:c8:b1:
78:df:f9:cd:31:2a:39:24:33:f9:67:55:1f:78:92:
23:a9:eb:05:9b:2c:9c:4b:64:69:e3:fd:d1:91:0a:
1a:8f:ad:32:51:bf:a7:cb:b2:6c:62:47:fd:a5:f9:
89:38:cd:5c:e7:d5:17:4e:24:da:ba:01:b1:4a:84:
7d:e4:3d:96:07:5f:08:bd:b6:83:97:64:21:c6:b5:
59:b2:f4:08:d4:d7:e8:fe:20:76:80:aa:39:a2:93:
fd:c1:9b:37:10:80:12:10:4e:50:27:45:69:4e:c7:
f8:bd:a4:7a:1b:60:cc:cd:ea:6c:92:46:f5:c1:9e:
b5:3e:3d:6f:1a:34:40:78:74:2a:a0:05:31:cc:b7:
83:60:52:fc:4a:0e:30:4f:72:2a:18:ae:08:7d:d0:
5c:23:5e:53:98:21:34:ec:15:6e:2c:7a:ac:0e:7c:
7e:30:de:ad:90:1c:21:79:67:6c:36:a2:b9:a9:7f:
03:50:04:a3:71:fa:cf:b0:7e:d7:1d:e4:56:84:17:
44:50:f0:36:82:9a:87:48:d4:43:eb:ae:3c:47:78:
c6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DA:65:42:CB:7E:70:7F:11:A4:51:F4:82:D0:CF:54:E5:08:02:22
X509v3 Authority Key Identifier:
keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/37EB330AC9A411EE98496754C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.62.0/23
Signature Algorithm: sha256WithRSAEncryption
93:88:49:b5:6b:44:a1:b3:5f:40:8c:0a:b2:bc:74:c9:88:e6:
dd:0b:28:12:da:da:f3:13:b4:62:e4:7f:0e:2f:bc:64:b7:54:
42:6f:4d:45:e2:31:9b:b5:25:31:72:09:4b:a3:bc:6b:fb:98:
da:be:92:bc:14:7a:8e:dd:1b:11:d1:8d:82:9c:a1:2c:e0:72:
47:b0:56:d3:39:a4:55:af:72:94:97:e0:94:aa:07:4a:fb:ad:
d1:49:8e:d1:67:24:b3:6f:a5:e2:81:1d:75:97:eb:0a:21:c2:
6f:39:c2:75:e0:3a:77:01:96:8e:92:59:68:33:ba:d0:7c:1e:
d8:66:cf:fa:48:8d:6f:f0:7c:9b:10:1c:ed:5d:1f:a0:11:ea:
52:61:81:e1:f1:25:84:11:ab:bf:86:a6:6d:5d:29:85:e5:7c:
77:1a:f9:4e:b0:e3:01:d3:9d:d4:13:2d:2a:1b:8b:61:f5:9a:
92:2f:8c:23:c7:48:ac:e2:94:d0:4a:93:8a:69:16:a5:49:5f:
fe:60:af:04:2e:15:25:7a:00:35:ba:c0:6c:99:92:22:7c:77:
51:4c:50:5e:af:5b:3f:ee:00:20:4d:3b:ac:70:55:25:a9:be:
11:35:1d:f0:4e:1c:ef:bb:db:c9:79:18:81:64:24:d7:4f:dc:
f3:b5:6d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 08:35:26 2024 by rpki-client on console-ams.rpki-client.org