Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/643464DAFAE811ED8DE54E2AC4F9AE02.roa
File: 643464DAFAE811ED8DE54E2AC4F9AE02.roa (raw, json)
Hash identifier: Xx8CpMBfguT9jWBPyCs7LGZJNgvPy/AP87PvGfFTM+U=
Subject key identifier: D6:AC:C6:30:FD:FE:19:18:B1:CD:E2:3B:0E:9F:E9:54:E8:98:8D:71
Certificate issuer: /CN=A91D226F/serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234
Certificate serial: 03
Authority key identifier: 87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/643464DAFAE811ED8DE54E2AC4F9AE02.roa
Signing time: Thu 25 May 2023 10:39:14 +0000
ROA not before: Thu 25 May 2023 10:39:14 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 151352
IP address blocks: 103.176.0.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Dec 2023 13:52:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D226F/serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234
Validity
Not Before: May 25 10:39:14 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=646f3ad2-be6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5a:03:90:c7:4c:3e:c9:08:22:08:62:ac:d8:
79:3e:76:bb:d8:24:94:63:e7:73:3d:24:2a:df:7f:
d6:ac:59:b0:b2:71:53:1a:63:ef:4b:1c:bc:03:56:
08:f6:e0:1c:27:27:8c:e3:82:d4:23:47:72:8c:e4:
12:e1:87:7a:cc:50:db:dc:7c:7b:99:49:7e:8d:fe:
e2:19:3c:77:b9:3c:6a:66:9f:bb:84:2b:7a:5e:b1:
84:bb:56:46:80:27:1b:5f:47:b1:86:00:63:1b:0d:
23:e0:57:f6:32:a9:9d:82:91:5e:de:22:3d:a7:67:
20:6c:95:a7:0d:7b:9c:09:d6:cc:45:74:59:67:77:
eb:13:3e:da:b5:23:ed:d2:09:33:7d:be:80:c3:13:
af:71:0b:6f:47:32:48:e2:41:1c:e0:64:43:ab:8a:
c8:19:43:30:24:a9:af:93:ce:e6:de:c9:ec:d9:7c:
3a:8d:d3:ee:c8:29:8e:0e:28:39:a3:e8:94:e9:60:
47:3c:ba:a7:f2:0e:4e:de:c9:db:7b:90:06:0c:1e:
90:97:6d:8c:a1:b1:58:5e:89:b4:41:dd:df:08:6f:
74:5f:ac:b9:e8:ab:56:ec:61:87:00:17:45:34:5a:
2e:2c:5b:6b:a0:94:e0:0b:e6:7c:85:86:03:16:9b:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AC:C6:30:FD:FE:19:18:B1:CD:E2:3B:0E:9F:E9:54:E8:98:8D:71
X509v3 Authority Key Identifier:
keyid:87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/643464DAFAE811ED8DE54E2AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.0.0/23
Signature Algorithm: sha256WithRSAEncryption
25:22:c8:29:98:a5:40:dd:9c:99:dd:63:a8:14:90:81:ec:6e:
2d:b8:3e:9c:51:a3:15:ea:44:ef:bb:c1:38:65:ed:59:03:45:
51:ce:9e:00:36:ab:2f:31:f3:ef:33:37:12:c3:21:d8:e4:0a:
91:ed:79:ce:b8:b0:43:a7:54:82:6a:87:0c:3a:d3:c9:4b:e2:
a5:42:5b:39:90:ad:ba:5f:3d:e7:20:7a:11:a6:78:e7:7c:b2:
b1:dc:ea:0d:55:48:10:57:64:77:f8:55:88:c2:3a:62:df:a1:
12:86:46:60:78:e6:bf:e4:e7:40:f1:28:77:fd:5c:5f:65:b0:
26:2a:d4:eb:d8:e3:42:14:b0:ef:c1:73:47:88:a7:a4:b9:9a:
6d:12:a1:16:d4:48:a3:57:e4:4d:38:8f:de:c4:59:ca:40:6b:
05:8c:d9:66:25:9b:63:fb:86:a0:a4:a0:73:7e:76:f2:7c:ef:
46:4d:ed:ec:70:84:93:17:76:6f:d4:82:b8:9c:31:f6:b7:d0:
ca:03:18:0f:54:08:d0:e2:68:14:ee:00:35:b9:f7:38:3f:2d:
60:af:03:6c:aa:e8:bb:f9:04:21:4d:c9:0e:6d:26:e1:67:8a:
fb:76:e5:c7:e3:f9:8c:89:66:48:9c:8b:c7:b4:78:8c:ec:87:
2d:0d:16:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:29 2024 by rpki-client on console-ams.rpki-client.org