Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/CDC5A23828A011EFA537E070C4F9AE02.roa
File: CDC5A23828A011EFA537E070C4F9AE02.roa (raw, json)
Hash identifier: 6jvZjVAY67OhjaC5yI5pwpxZY8Ay/dZVX3dkrJKABHc=
Subject key identifier: F0:4B:99:89:46:4D:4D:AB:68:8E:88:82:3A:2B:CB:24:67:D5:D0:4A
Certificate issuer: /CN=A91DEF04/serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38
Certificate serial: 05CD
Authority key identifier: 31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/CDC5A23828A011EFA537E070C4F9AE02.roa
Signing time: Wed 12 Jun 2024 09:47:39 +0000
ROA not before: Wed 12 Jun 2024 09:47:39 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.80.86.0/24 maxlen: 24
103.80.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 15:26:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1485 (0x5cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEF04/serialNumber=3116E07584056C16F568F0EC6098E7DC4F504A38
Validity
Not Before: Jun 12 09:47:39 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=66696eba-cef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:75:01:d8:68:b0:a2:b4:2c:2a:74:29:d7:0f:
1f:3e:08:90:51:dd:f6:5d:90:77:73:51:08:83:cb:
5e:0a:22:ed:8a:f4:cf:a2:b1:6f:14:52:4b:ce:95:
64:82:0c:35:38:e7:b0:20:8e:82:40:09:6c:52:ff:
37:d4:5f:6e:41:9f:71:ce:96:93:f5:18:db:ce:ab:
1b:28:56:7c:4a:8a:4b:dd:ce:64:01:74:b4:91:d1:
df:5d:18:ea:71:09:29:02:c3:b3:54:8b:0e:df:bd:
d3:85:af:27:fe:9f:96:5d:04:e3:19:ce:22:70:40:
2c:1a:4f:98:2c:6f:1e:e9:7f:76:0c:c6:e1:08:ae:
7b:ac:00:3a:19:c7:c1:55:74:57:85:dd:d6:41:84:
22:ac:37:e3:c3:35:c4:a2:d2:86:15:89:48:9b:63:
89:e8:7c:87:58:aa:32:b5:41:c3:33:68:9a:b2:e0:
d1:b3:b0:43:55:6e:90:07:c9:92:d1:6b:1a:42:54:
c5:e4:10:47:e4:09:1d:6f:d3:3f:19:ce:c8:06:12:
90:cb:70:16:00:44:a6:86:ad:c1:90:79:dc:c0:4b:
0a:ab:40:cc:71:21:ef:68:48:f7:c8:b8:28:01:b7:
5a:79:ba:ee:9c:41:52:02:c9:0c:5e:63:ad:1e:00:
8c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4B:99:89:46:4D:4D:AB:68:8E:88:82:3A:2B:CB:24:67:D5:D0:4A
X509v3 Authority Key Identifier:
keyid:31:16:E0:75:84:05:6C:16:F5:68:F0:EC:60:98:E7:DC:4F:50:4A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/MRbgdYQFbBb1aPDsYJjn3E9QSjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRbgdYQFbBb1aPDsYJjn3E9QSjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF04/991EB75A7AB011EBA027BB7FC4F9AE02/CDC5A23828A011EFA537E070C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.80.86.0/23
Signature Algorithm: sha256WithRSAEncryption
64:d6:3f:c3:68:63:94:f5:d4:7b:20:09:90:0e:1e:6f:e8:d2:
36:8b:79:97:75:85:1c:69:77:39:00:3e:73:7b:5c:ba:61:d7:
85:6e:da:15:c5:af:9d:64:63:e7:86:e8:4e:db:db:87:04:b8:
15:8b:97:45:bf:bb:cf:a3:82:d3:2a:23:d6:18:8c:2c:ab:61:
fa:1e:c5:d7:89:57:38:3d:2c:5d:44:4e:c0:24:78:ed:d0:a8:
f3:3a:cd:53:27:b5:9a:f5:75:8f:57:1c:fb:02:c0:80:38:44:
a3:99:53:e3:14:5e:bd:2e:e6:87:2d:d7:3e:1e:87:b6:4e:1f:
6b:20:67:38:00:ef:aa:be:f7:5c:1c:f0:20:bb:d1:f3:3f:d4:
ee:4d:72:12:b6:de:69:1a:b8:42:f8:71:1d:cc:55:4a:6b:90:
83:46:1d:b2:1b:b6:4b:57:e5:ff:3b:d6:4e:dd:97:c3:8d:95:
79:a6:ea:8a:a8:9b:78:0c:b5:be:fa:a0:45:28:55:3b:6e:7b:
73:22:b3:4c:9f:10:49:bd:d6:bf:8c:bb:20:e4:a1:6b:24:e6:
30:7f:25:74:4d:33:98:6b:d9:b1:a8:f6:bd:97:69:d5:51:ab:
71:26:9e:ec:88:3e:20:a0:24:56:5c:0b:f9:e9:31:8e:34:6f:
ac:3b:80:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 19:11:14 2024 by rpki-client on console-ams.rpki-client.org