Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/BF54F1F0FB4511EEA4E4B262C4F9AE02.roa
File: BF54F1F0FB4511EEA4E4B262C4F9AE02.roa (raw, json)
Hash identifier: 3rzAkM8scb/iKGxJrcextVwwwyBhxgbC43ZAKDx/AU4=
Subject key identifier: A5:D9:BD:3C:B6:3B:E7:8D:BE:CB:7B:E3:62:EE:FE:7C:9F:62:C2:74
Certificate issuer: /CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3
Certificate serial: 024A
Authority key identifier: 86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/BF54F1F0FB4511EEA4E4B262C4F9AE02.roa
Signing time: Thu 04 Jul 2024 13:52:31 +0000
ROA not before: Thu 04 Jul 2024 13:52:31 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 45.248.54.0/24 maxlen: 24
103.216.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 01:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3
Validity
Not Before: Jul 4 13:52:31 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6686a91f-4a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:32:c3:79:eb:ed:54:4c:72:63:57:34:08:b0:
c2:d9:bc:7e:c9:1b:42:84:43:11:6c:9b:15:83:59:
b8:cd:c0:6a:2e:74:96:f4:be:f7:ce:17:2c:f7:df:
f2:ef:4c:46:ea:9b:90:1f:21:a4:93:a8:6f:b3:12:
04:af:ac:ea:32:7c:0d:08:83:41:2b:11:c1:f0:06:
cb:cd:88:6f:9c:57:5d:bb:ad:ae:57:9c:74:ea:d9:
73:cf:85:20:59:e3:0a:07:07:df:cc:cb:40:49:53:
d4:dd:05:02:3e:c7:2c:ed:a6:99:4b:6f:2c:47:e9:
ff:3d:aa:5a:58:d0:97:5c:6c:08:77:54:62:15:1a:
80:08:c6:f8:32:b0:5c:76:99:5d:36:d1:10:fe:a6:
6f:08:ea:6a:05:b3:82:67:45:93:f6:7a:57:d5:a1:
82:6c:d8:51:67:8d:58:ad:00:d1:ab:b0:60:f4:45:
50:06:37:13:4f:85:c7:f0:06:03:fa:fb:cd:af:04:
03:7b:bd:44:d5:9d:33:45:a6:f7:1b:b1:e0:58:81:
c0:e4:e6:29:9d:70:c7:83:bf:9e:1f:82:eb:2e:91:
c6:63:21:6a:3f:90:d7:5c:9f:f5:d9:e5:11:31:96:
cd:e7:6d:84:f7:87:fd:5b:97:cb:05:ac:a9:5e:94:
d5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D9:BD:3C:B6:3B:E7:8D:BE:CB:7B:E3:62:EE:FE:7C:9F:62:C2:74
X509v3 Authority Key Identifier:
keyid:86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/BF54F1F0FB4511EEA4E4B262C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.54.0/24
103.216.197.0/24
Signature Algorithm: sha256WithRSAEncryption
25:e6:dd:3b:d9:7f:9a:fb:8e:d5:c0:c8:1d:a4:fa:ea:c5:5a:
2f:65:3e:37:41:ca:fb:9b:a9:0c:ed:5f:80:fa:e7:97:6c:82:
89:9d:2e:60:8f:2d:34:1e:a4:1b:6f:8e:98:4d:ff:21:34:57:
2f:b4:a7:7f:9d:c7:df:92:e9:51:e9:13:4d:bc:ee:6a:dd:a8:
00:3c:90:ff:d9:4f:68:5d:d3:82:f9:38:1f:18:aa:34:9c:59:
c7:02:9b:9c:be:83:5a:97:35:f3:eb:8e:7e:5a:6b:bd:f6:87:
31:f1:e7:a9:98:ab:81:95:02:4c:14:52:2a:53:7e:78:a1:9b:
ad:fe:c6:fc:c3:45:d8:a0:ff:56:9d:08:b9:57:f0:57:d1:c5:
c0:28:fc:a5:dc:81:07:5d:cc:50:0e:21:86:d9:fa:ea:c8:01:
2d:de:42:8f:fc:cf:8d:38:ef:8d:7a:2a:de:8c:24:05:87:94:
b8:2f:6f:33:98:ff:98:97:7e:71:2c:95:dc:07:b4:13:00:7c:
ef:97:dc:c3:b3:51:99:e2:4b:7c:01:01:32:fb:50:ad:0b:b6:
45:09:28:b1:02:c6:18:41:ce:9f:dc:65:ab:62:5e:6b:2e:e5:
cc:0e:eb:9c:85:bf:cc:5d:aa:63:70:86:38:09:38:b2:13:2b:
d3:36:06:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 02:44:42 2024 by rpki-client on console-fra.rpki-client.org