Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/7E8F80386F2911EFA1173E6CC4F9AE02.roa
File: 7E8F80386F2911EFA1173E6CC4F9AE02.roa (raw, json)
Hash identifier: P77cEIEJMZDk/ysgC6pwSU85Vg6nxaFLw+X73hUEcvU=
Subject key identifier: 56:16:1A:73:63:5F:2C:7D:26:16:07:7D:AD:18:42:2D:41:4D:32:25
Certificate issuer: /CN=A91DB8D9/serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE
Certificate serial: 031A
Authority key identifier: 5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/7E8F80386F2911EFA1173E6CC4F9AE02.roa
Signing time: Tue 10 Sep 2024 04:02:28 +0000
ROA not before: Tue 10 Sep 2024 04:02:28 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 60542
IP address blocks: 103.163.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 03:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 794 (0x31a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB8D9/serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE
Validity
Not Before: Sep 10 04:02:28 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=66dfc4d4-2d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6e:f5:cd:90:7f:a9:af:eb:84:93:1e:f7:8d:
da:9a:6c:0f:b1:64:76:31:5e:30:84:ca:15:22:00:
2d:dc:96:79:f5:a6:46:60:48:c0:cd:fe:7d:55:61:
30:28:fc:ce:51:16:87:94:bb:81:ce:18:06:65:d0:
65:8d:77:25:f9:e5:7e:6e:79:10:be:91:39:6a:ca:
86:bc:01:8a:90:d1:4d:bd:eb:6d:a5:03:2b:d7:25:
5f:43:a9:92:47:7d:9b:db:91:aa:f0:3c:48:f0:d7:
18:87:ab:5f:00:df:3b:23:cd:b3:a6:41:e9:8a:5c:
d9:5f:fa:b5:16:f5:de:08:07:e9:d2:27:63:e6:17:
59:69:16:80:1b:30:b7:10:f2:d7:aa:1d:35:24:b3:
17:11:ef:1c:b7:90:20:a1:cd:2c:fb:62:03:6e:e8:
e0:65:af:70:61:53:30:b4:b8:60:5e:8d:61:e1:31:
86:bb:f6:cc:fa:9d:18:b8:88:6c:a2:81:aa:fa:78:
50:c5:45:73:29:a4:e2:0d:42:01:41:51:b4:4a:e1:
8c:33:80:3a:00:e5:dd:1d:55:b5:e5:fa:a6:db:18:
f8:a6:ed:ef:15:33:16:59:9f:e0:13:df:95:fe:44:
9c:f4:14:7d:a0:40:41:22:20:81:17:ff:cf:15:0a:
7c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:16:1A:73:63:5F:2C:7D:26:16:07:7D:AD:18:42:2D:41:4D:32:25
X509v3 Authority Key Identifier:
keyid:5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/7E8F80386F2911EFA1173E6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.155.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:45:8a:9d:72:12:3a:91:29:14:0a:81:cd:cc:f4:38:4c:e7:
7f:9b:98:d8:e4:03:12:ea:09:67:17:f9:df:8e:53:a4:88:0d:
d8:7e:b4:82:32:ab:5d:26:df:32:94:0c:a1:70:65:e6:f9:e2:
11:cb:d4:20:fa:6f:28:d7:c0:9c:56:ae:32:0f:d6:13:3f:8f:
71:38:d7:8e:49:77:1c:9d:94:b8:cb:35:90:00:1a:22:b9:c1:
4a:74:01:4b:56:d7:29:8f:2d:92:09:6d:1d:ab:36:69:22:44:
3b:6a:73:b0:4d:1a:97:96:a7:6f:67:1f:3c:f4:39:e1:81:84:
d4:e7:b4:73:c2:f0:f6:57:37:68:49:56:d1:9d:a7:56:72:d6:
c9:e3:31:a6:d7:3f:6d:15:88:ae:8e:15:d7:31:63:9a:17:4c:
b1:ed:42:c0:d6:70:99:57:76:c7:6e:ce:fe:6b:2b:8c:b9:27:
f7:8f:88:77:78:1e:17:80:14:9d:4f:74:45:4e:b2:8f:53:3f:
18:96:f8:25:a4:5a:f7:d7:5e:e2:fd:ed:ec:8e:c1:e2:d1:d9:
6f:65:9f:64:67:38:d6:92:a2:da:e5:30:ec:34:e8:cf:43:fb:
4f:fb:c5:5b:04:b6:8f:24:ec:eb:fe:32:3e:ef:ca:27:08:6b:
65:af:20:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 05:18:55 2024 by rpki-client on console-ams.rpki-client.org