Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/160BC5BE29C711EFA86ED110C4F9AE02.roa
File: 160BC5BE29C711EFA86ED110C4F9AE02.roa (raw, json)
Hash identifier: 9+STzcfjH5QLAGa+cLPX1FriqB9F6wv6hnjb4P8ZS0s=
Subject key identifier: E0:10:BB:3F:40:E6:B3:A0:9F:15:29:1E:9E:ED:C4:3A:25:25:5E:3F
Certificate issuer: /CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Certificate serial: 014D
Authority key identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/160BC5BE29C711EFA86ED110C4F9AE02.roa
Signing time: Thu 13 Jun 2024 20:54:12 +0000
ROA not before: Thu 13 Jun 2024 20:54:12 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 55154
IP address blocks: 103.85.200.0/22 maxlen: 22
110.44.108.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 21 Jun 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4
Validity
Not Before: Jun 13 20:54:12 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=666b5c73-eb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:62:6d:68:be:05:d9:da:96:b1:5a:b4:19:90:
21:ee:a8:be:48:5a:9c:1a:e1:9b:e2:b7:17:2d:07:
f7:5c:af:5e:90:d7:8c:a1:53:27:ce:2f:eb:bf:ef:
79:67:3f:46:5b:18:09:88:3e:1f:84:69:26:46:70:
81:57:12:6f:b6:04:4b:61:6e:5f:a8:02:13:c1:52:
49:e9:1c:0d:a4:f4:bd:7f:8a:54:da:a1:a7:d2:83:
51:6a:ec:b9:72:23:ad:ff:6c:f6:10:9d:5f:3c:6f:
3c:d4:ad:66:be:f7:9d:c4:20:db:7a:86:46:88:01:
21:30:45:e3:2d:67:f0:29:9a:24:9b:1a:3d:18:ec:
79:af:a2:16:5d:90:9c:9e:bb:84:54:91:20:d5:d7:
2f:c1:72:78:b4:07:5f:0b:c7:c7:5f:01:90:4c:4b:
f0:a8:34:fd:54:1d:66:f8:87:d0:a1:2c:c6:21:9f:
c2:26:d7:d1:0e:13:18:e2:54:5f:da:0b:68:4c:26:
22:41:59:58:c0:be:8d:09:9d:11:14:73:ca:9f:3d:
cd:fa:9a:15:e3:a5:15:4b:8f:01:b8:3a:b7:af:3b:
22:cf:95:ab:6e:04:5c:3e:6f:8b:17:fa:4a:03:99:
8f:69:92:5e:37:1a:02:14:41:f3:27:89:f7:ff:9a:
eb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:10:BB:3F:40:E6:B3:A0:9F:15:29:1E:9E:ED:C4:3A:25:25:5E:3F
X509v3 Authority Key Identifier:
keyid:25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/160BC5BE29C711EFA86ED110C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.85.200.0/22
110.44.108.0/22
Signature Algorithm: sha256WithRSAEncryption
af:d3:3c:19:6c:da:a1:b9:f3:41:32:24:12:fc:b6:2e:b4:3b:
b6:a8:17:ee:6c:34:31:a7:fb:60:1c:13:ac:cd:79:73:6f:9b:
a9:c2:b3:d0:b0:69:51:4a:f9:4b:de:ef:45:82:30:0a:cd:c1:
d6:96:27:0d:52:d0:48:f7:be:36:86:45:7c:89:91:c6:2f:ea:
5d:d3:22:03:2e:8c:e2:cc:8a:c5:80:f9:bc:86:a7:e8:0d:f5:
1d:e4:ce:6d:67:31:1c:d3:ad:66:06:75:a2:b2:d2:42:ea:a3:
c2:e1:f8:53:1c:db:5a:26:6e:82:93:f4:89:0f:f1:b0:6c:38:
16:14:28:94:e7:30:db:15:3d:73:66:5f:f4:19:b8:76:df:bf:
f4:5d:cd:4e:88:eb:67:3f:65:b2:fc:cc:77:a5:ab:d0:7d:b9:
c6:2e:4e:88:57:7b:95:7d:c7:63:53:07:bc:6d:04:80:f3:a5:
d7:c4:e8:5b:8c:82:b3:6d:bc:94:50:bc:32:9a:a6:f1:c1:93:
9a:51:1d:e1:87:d7:9f:1a:4b:8d:cf:fb:c0:ac:74:0d:09:ed:
7f:d9:8d:1b:fb:8f:c0:21:9f:20:90:5a:1d:73:dd:95:62:5b:
42:8b:5b:dc:ac:b9:a1:5a:78:5b:f5:b5:bc:43:2e:47:10:aa:
10:da:cf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 20:20:14 2024 by rpki-client on console-ams.rpki-client.org