Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/87575488A39B11EF8CDC0F52C4F9AE02.roa
File: 87575488A39B11EF8CDC0F52C4F9AE02.roa (raw, json)
Hash identifier: YJHhTF9IZLaxiIpaRTGavXGu8bD7vfzYxNGSoebud20=
Subject key identifier: B6:F8:9E:F5:A5:75:02:12:A7:76:55:8E:89:2E:1B:C5:61:95:DC:9F
Certificate issuer: /CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
Certificate serial: 0AB1
Authority key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/87575488A39B11EF8CDC0F52C4F9AE02.roa
Signing time: Fri 15 Nov 2024 21:49:46 +0000
ROA not before: Fri 15 Nov 2024 21:49:46 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 38038
IP address blocks: 103.14.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Nov 2024 07:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2737 (0xab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
Validity
Not Before: Nov 15 21:49:46 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=6737c1fa-d249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:d2:00:46:a4:0f:ba:5c:27:c5:5a:c0:8b:
a0:ab:50:58:42:d0:37:fe:8b:3d:a2:b3:48:6b:81:
c7:c2:7f:fb:05:ca:c1:b8:66:4a:fa:a9:87:b6:5f:
8f:42:e6:a4:43:02:47:27:a6:1a:ae:c2:2f:08:8c:
e3:aa:cb:a0:7e:59:29:5f:f7:a5:ab:c0:75:cd:56:
a9:e6:15:7b:90:b3:95:a8:92:d2:0e:31:88:9f:b5:
e9:91:76:f0:52:d5:ff:fb:d1:ac:ac:a5:05:df:6d:
d5:8b:44:29:84:84:1a:3d:44:7e:f2:17:de:2d:93:
a7:bd:8a:7b:f5:84:ca:e7:c4:9e:31:c8:2a:87:40:
99:56:45:e5:06:1e:9f:a5:de:7b:4e:59:be:d4:c2:
76:9e:7a:c3:53:0f:89:8c:b8:29:2e:10:d1:c3:5d:
2c:32:7b:9a:10:69:cf:37:b9:f0:80:bc:5b:e9:25:
03:1a:a0:7d:31:10:50:a7:b4:73:f3:32:62:ff:33:
b8:98:1a:85:b6:90:48:0e:bb:72:00:b2:69:cc:af:
e0:61:4c:a6:2e:e0:75:d6:80:8c:02:9f:8f:a3:bf:
c2:ba:59:6b:82:de:6b:0b:0e:8c:84:d0:4f:df:32:
3d:b6:e5:b9:80:5a:ba:a9:77:a8:3c:a5:c2:af:ca:
b9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F8:9E:F5:A5:75:02:12:A7:76:55:8E:89:2E:1B:C5:61:95:DC:9F
X509v3 Authority Key Identifier:
keyid:D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/87575488A39B11EF8CDC0F52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.165.0/24
Signature Algorithm: sha256WithRSAEncryption
48:49:1c:97:d3:67:1d:11:7f:b5:f1:13:94:24:e0:ff:fc:cf:
2e:a8:4c:d8:a9:c3:ad:e4:7d:e4:4f:16:b5:f5:ac:9c:9d:c3:
55:22:7d:52:98:08:3b:f8:65:c8:03:4e:4a:f3:9c:0e:36:97:
fc:0e:b8:33:65:0f:14:4d:9e:32:83:c9:df:4c:17:29:c0:7a:
b0:03:9f:5c:45:e9:ec:1f:0a:31:38:ac:10:e6:e2:89:38:32:
40:ed:fe:45:a6:2d:11:d8:a5:04:27:ce:aa:cc:88:3d:08:77:
a0:88:48:3f:c0:39:ef:c6:da:2e:94:6c:7c:fc:d2:3d:10:00:
b7:13:56:15:1c:74:80:af:b4:47:cf:4d:2d:7a:0f:e6:19:d8:
41:dd:f0:1f:5e:62:ab:85:ea:85:55:b2:e0:f6:55:97:02:c9:
64:43:03:09:b2:4d:6d:da:7e:cd:32:9f:cb:b2:f3:63:e9:b0:
e9:61:e8:d3:8a:34:01:98:e4:41:c0:3c:ce:f4:86:36:fa:49:
c7:62:f2:35:62:8e:d7:c4:85:41:7e:9d:61:68:62:99:86:4c:
00:99:0b:93:eb:68:89:9b:4f:a4:db:92:61:cb:4d:1f:39:a8:
fd:d8:66:39:cd:92:de:50:24:62:6c:f0:5e:b4:f2:e9:3e:4a:
b0:70:41:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:34 2024 by rpki-client on console-ams.rpki-client.org