Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/069EA29806F811E8A09B1139C4F9AE02.roa
File: 069EA29806F811E8A09B1139C4F9AE02.roa (raw, json)
Hash identifier: f7YSP20RmH94AtqFzl+nqfcemokxuBzc1ZhwXQjiMD8=
Subject key identifier: 1A:6C:55:CC:F9:64:9E:5A:42:44:51:E5:AE:41:AC:95:A2:AE:B1:35
Certificate issuer: /CN=A91DC33B/serialNumber=4B435DD49AC111C3DD7BA0F4F08685F216515859
Certificate serial: 14E8
Authority key identifier: 4B:43:5D:D4:9A:C1:11:C3:DD:7B:A0:F4:F0:86:85:F2:16:51:58:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/069EA29806F811E8A09B1139C4F9AE02.roa
Signing time: Thu 04 May 2023 17:54:53 +0000
ROA not before: Thu 04 May 2023 17:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9535
IP address blocks: 103.54.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 04:22:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5352 (0x14e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC33B/serialNumber=4B435DD49AC111C3DD7BA0F4F08685F216515859
Validity
Not Before: May 4 17:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6453f16c-5dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:16:15:16:f9:e3:ca:c7:74:4a:f7:f1:f9:e8:
67:51:03:3e:8f:10:19:62:fd:0b:b8:af:33:b6:d4:
c8:1d:61:89:a6:35:48:03:5f:a9:a7:0d:a6:ae:79:
25:31:0a:81:3b:f8:57:f4:17:c5:87:eb:80:92:cd:
5e:83:86:7e:f9:fa:15:db:d5:f3:49:81:0f:78:46:
06:e3:54:9e:db:f6:ed:61:b8:68:54:9c:01:fa:40:
24:c2:d6:c8:0a:c1:94:00:ff:1f:c1:2b:39:3a:69:
0a:eb:2c:41:32:6c:66:65:63:21:a2:a6:6e:4f:d1:
c3:41:4e:46:6d:10:03:a3:09:9c:ad:4b:33:e1:86:
8e:44:12:3b:c3:b5:81:c3:16:74:45:02:9d:fc:4d:
2f:71:f6:2f:5d:d0:aa:4c:b1:6d:e6:e9:cd:bb:cb:
f1:30:cc:25:09:ce:d2:c7:97:1b:4d:46:29:d4:63:
af:b8:9b:df:19:a9:3b:ad:77:1a:40:3e:b3:c1:6f:
99:13:89:4c:fa:53:e9:c3:2a:f1:81:a9:da:11:7e:
f0:3e:74:c6:a3:7c:5b:0c:c8:b6:51:1f:39:00:71:
3d:5e:bc:7c:5e:d9:f7:4d:32:50:89:e8:1a:72:e3:
e5:e7:23:0b:03:9b:42:5b:04:ce:09:69:ac:7a:e8:
a9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6C:55:CC:F9:64:9E:5A:42:44:51:E5:AE:41:AC:95:A2:AE:B1:35
X509v3 Authority Key Identifier:
keyid:4B:43:5D:D4:9A:C1:11:C3:DD:7B:A0:F4:F0:86:85:F2:16:51:58:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/069EA29806F811E8A09B1139C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.54.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:53:0d:81:b2:c0:55:66:a1:b6:3c:09:d5:83:92:77:b7:91:
19:ef:0d:18:b4:2d:79:eb:36:e8:e5:ff:69:7c:20:31:13:91:
35:19:1a:5f:74:cb:d0:08:75:d3:48:85:ab:ac:ac:b3:39:29:
1c:f8:bd:01:85:76:71:d3:6a:fb:ee:83:de:6d:2b:88:92:86:
d4:d4:f0:7f:21:35:81:90:a9:81:1f:e5:fa:9a:14:8d:42:a0:
21:58:b8:4a:85:96:58:39:3d:4e:5b:b0:99:90:89:f1:53:af:
94:0b:a0:e7:20:78:cf:ea:53:15:de:2e:da:cb:8e:2a:c2:55:
0e:51:79:01:2c:12:8b:4d:df:47:1a:d4:56:0b:06:cb:6c:35:
ec:bf:b2:a1:6a:33:ec:1c:e7:2d:16:2e:f5:e8:70:4a:55:99:
09:71:c3:1b:44:61:69:f8:89:06:db:be:f8:80:fd:06:1a:60:
5c:f3:ef:7c:3c:13:ef:17:9e:5a:71:d6:60:5b:0b:f2:38:70:
41:da:07:a8:90:85:bf:0f:88:15:3d:d0:3e:52:5c:8b:ad:99:
d4:00:58:97:be:ec:72:32:e8:54:96:f8:c8:5b:02:0b:e6:a7:
fe:ff:b5:66:0e:e1:72:66:ce:7f:d0:b1:ef:6e:f4:4b:51:75:
1b:b5:da:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 06:04:37 2024 by rpki-client on console-ams.rpki-client.org