Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/5D890348833E11EC9274432AC4F9AE02.roa
File: 5D890348833E11EC9274432AC4F9AE02.roa (raw, json)
Hash identifier: o30qhVF0a6Xoc4AvS8fNhClsyN0gsubivlC8I7q5vbo=
Subject key identifier: 98:3F:39:4D:C7:48:0B:4D:50:E3:AC:B9:5A:1F:5F:6B:96:FA:CA:22
Certificate issuer: /CN=A91C9286/serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682
Certificate serial: 0AFC
Authority key identifier: C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/5D890348833E11EC9274432AC4F9AE02.roa
Signing time: Sat 16 Mar 2024 19:57:57 +0000
ROA not before: Sat 16 Mar 2024 19:57:57 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 138346
IP address blocks: 103.146.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 10:16:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2812 (0xafc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9286/serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682
Validity
Not Before: Mar 16 19:57:57 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65f5f9c4-1d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:97:ae:b7:6f:cd:5e:00:9d:86:b2:0a:19:84:
6c:42:16:6f:c2:fe:b1:01:47:7e:2e:7a:d8:38:f0:
d5:d8:34:76:32:1f:10:72:40:ab:b1:5a:d9:5b:f7:
0f:85:f5:3c:b9:f9:09:71:92:e6:fb:61:b4:a9:db:
4c:5f:30:38:6a:3b:bc:30:5c:ca:d7:1e:c0:47:bc:
d5:f0:bd:6a:d5:13:b3:82:37:72:da:c8:e5:f1:5d:
57:2e:e1:5c:6b:1c:2d:c4:16:6e:cb:64:2c:1d:af:
27:ee:d6:79:75:9c:51:eb:6a:b0:df:db:df:69:0e:
75:02:1e:4f:78:52:28:3e:e7:1a:9d:fd:49:c3:d4:
c8:d5:e6:5e:a5:96:9c:75:95:fd:f8:0f:35:80:25:
82:14:54:6f:8f:69:35:67:e9:98:04:cf:47:e5:65:
84:6e:b7:1a:ea:72:94:53:66:0d:20:55:dd:5d:46:
ca:8f:c7:d3:8e:e9:85:15:ad:ef:a7:fd:89:d5:00:
5e:73:21:97:aa:3c:23:e7:06:7c:83:c2:7f:2f:fc:
00:32:cb:ad:3b:89:03:7e:34:7e:cd:55:43:74:90:
c8:63:50:09:e3:51:5b:c8:3b:be:a4:c2:e8:52:34:
9a:63:31:3c:42:97:82:29:11:de:c4:b2:fc:dc:b4:
08:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3F:39:4D:C7:48:0B:4D:50:E3:AC:B9:5A:1F:5F:6B:96:FA:CA:22
X509v3 Authority Key Identifier:
keyid:C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/5D890348833E11EC9274432AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.151.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:30:9c:39:da:49:87:c6:58:c1:8d:f7:db:d0:25:0e:18:d5:
29:fb:42:63:e7:78:7d:dd:a8:df:56:d7:33:54:1d:a9:db:59:
f0:ee:ed:96:b2:3d:22:82:b9:8e:5d:a7:60:3d:21:fd:d2:28:
fa:99:76:b0:a9:8b:e5:5b:08:06:db:67:d3:10:3d:8f:89:a0:
0e:da:be:ea:df:cc:39:15:ae:94:f6:84:43:4b:89:da:18:3d:
a3:4d:9b:71:2f:5b:10:72:02:a6:43:c1:08:0a:79:28:a5:66:
b3:28:d8:74:92:b4:ce:0d:ab:f1:35:92:90:be:18:99:09:f3:
e4:49:65:2d:23:64:9a:ef:c2:ec:f0:15:8b:53:e4:1b:1c:14:
e2:53:3a:62:ad:4e:a2:ab:56:73:f0:03:a3:1d:b7:84:07:bf:
34:58:ca:f0:f2:61:df:e9:8d:d8:98:c4:d7:78:83:6c:9e:2c:
5a:9e:0c:17:1d:41:49:30:01:94:00:e1:12:a9:a3:be:c7:53:
ca:a4:d4:b2:9b:05:b9:75:45:bf:b0:ca:4b:fc:45:9d:96:8f:
f6:25:8c:d2:5c:ec:1d:f4:e0:51:64:fc:fd:ce:33:3b:92:26:
aa:a7:8e:ae:92:73:80:57:48:dd:6a:59:55:39:a5:26:7d:1f:
ea:72:1a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 14:54:22 2024 by rpki-client on console-ams.rpki-client.org