Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5A5C/BAB815D40E1911E889424E45C4F9AE02/593BA63E0E1B11E8875B494CC4F9AE02.roa
File: 593BA63E0E1B11E8875B494CC4F9AE02.roa (raw, json)
Hash identifier: lZejtWKNjr94YrM8N5v0kCf6VIlKoicYTn2k22orVBM=
Subject key identifier: 93:5F:A2:14:DE:6D:2D:B1:CD:50:F4:09:A7:77:1B:FD:C4:18:87:6D
Certificate issuer: /CN=A91C5A5C/serialNumber=EF4AD08F2560DB902F085D614473BA04808B84A4
Certificate serial: 1548
Authority key identifier: EF:4A:D0:8F:25:60:DB:90:2F:08:5D:61:44:73:BA:04:80:8B:84:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70rQjyVg25AvCF1hRHO6BICLhKQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5A5C/BAB815D40E1911E889424E45C4F9AE02/593BA63E0E1B11E8875B494CC4F9AE02.roa
Signing time: Thu 18 Jan 2024 17:25:02 +0000
ROA not before: Thu 18 Jan 2024 17:25:02 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 134743
IP address blocks: 103.103.104.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 01:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5448 (0x1548)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5A5C/serialNumber=EF4AD08F2560DB902F085D614473BA04808B84A4
Validity
Not Before: Jan 18 17:25:02 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65a95eee-43e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:4b:3f:95:ca:f8:32:5b:08:48:e4:d3:d9:
d8:11:70:63:f6:42:57:f7:48:13:20:a0:87:1d:a0:
d4:7b:ea:84:14:27:1c:8f:85:e6:26:1c:24:79:fc:
34:e3:09:d3:ac:da:39:17:76:b7:ee:8f:b9:84:9f:
cd:d9:20:47:cd:57:eb:ed:09:57:9f:a8:3b:3a:12:
e3:23:16:f5:ab:64:9d:dd:fc:6f:00:1e:e9:d0:ef:
b5:75:ca:e0:8e:5c:b3:01:3c:40:34:33:db:1a:f5:
9e:ac:c7:aa:d3:ad:9a:c1:29:b9:9e:10:55:79:4b:
c0:60:e3:98:e2:d3:b8:c7:8b:db:8d:25:07:5e:b0:
da:0c:85:2a:47:24:5e:a3:04:6b:2c:db:2c:e8:d6:
f6:e6:e4:9d:0b:e6:94:f1:81:f7:b9:91:2d:90:0c:
10:67:16:f0:14:f8:97:60:52:9a:6a:a0:6e:81:83:
b0:be:71:a0:ed:02:50:74:51:a9:6e:39:e4:30:a7:
3b:4a:0d:de:43:b3:0d:63:fd:44:90:99:24:60:d8:
fd:14:5f:5a:33:4b:6a:33:62:f6:8d:51:1c:b5:e9:
5f:5b:1c:70:40:e9:d7:8c:63:bd:59:96:28:bd:9d:
31:57:f9:7c:e1:db:c0:f2:81:e1:4e:4e:40:68:15:
49:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5F:A2:14:DE:6D:2D:B1:CD:50:F4:09:A7:77:1B:FD:C4:18:87:6D
X509v3 Authority Key Identifier:
keyid:EF:4A:D0:8F:25:60:DB:90:2F:08:5D:61:44:73:BA:04:80:8B:84:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5A5C/BAB815D40E1911E889424E45C4F9AE02/70rQjyVg25AvCF1hRHO6BICLhKQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70rQjyVg25AvCF1hRHO6BICLhKQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A5C/BAB815D40E1911E889424E45C4F9AE02/593BA63E0E1B11E8875B494CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.104.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:82:91:75:b5:fc:12:70:12:26:85:ce:8e:eb:da:f5:5c:68:
e3:34:fb:bc:73:86:8f:b7:d1:88:48:f4:84:ad:e4:1f:1c:10:
4d:b1:62:d0:0f:95:94:e5:be:33:41:91:63:9d:93:b3:64:9e:
b4:f3:cc:ab:02:72:8c:20:99:83:64:06:e3:e9:69:81:77:87:
0b:b5:89:6d:61:87:82:c6:85:94:a1:dc:96:83:7e:e1:67:7c:
16:77:d9:a3:2d:a8:87:47:e9:3e:0d:f0:31:68:1a:d1:3d:02:
e6:0e:6a:99:0a:e9:c6:11:94:35:d2:4a:6e:c3:a9:49:c2:5b:
e3:42:da:70:67:e5:8c:f8:21:1f:74:6b:91:c1:b8:86:42:ac:
74:75:92:e4:ab:d8:57:bb:30:d2:69:38:e4:44:f1:5f:4d:d9:
66:a7:f7:9f:19:ea:6f:32:33:61:9a:67:8a:61:09:19:15:99:
df:6e:82:28:30:9a:46:3d:cb:d9:b8:2b:d6:ab:23:de:07:dc:
02:f1:b4:36:b2:ce:f7:59:5f:5b:c0:d0:4a:9f:14:9d:ac:34:
0a:d0:8d:15:2f:08:d8:47:1c:55:dc:32:2c:9c:a3:fa:ee:6b:
ef:69:48:4f:53:b5:79:6b:37:d8:70:85:b6:ed:d6:d6:0f:91:
6b:b4:23:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 03:11:45 2024 by rpki-client on console-ams.rpki-client.org