Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/40FCEC066D7711EE8980FE5AC4F9AE02.roa
File: 40FCEC066D7711EE8980FE5AC4F9AE02.roa (raw, json)
Hash identifier: F/ZOgiSKS9+PIc2EK98o/lTZk4oVFeLzKy5DZRqKO34=
Subject key identifier: E9:8F:FB:2D:CB:95:74:5F:E4:F2:7A:62:70:17:C3:16:7E:E7:C4:A0
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0DA9
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/40FCEC066D7711EE8980FE5AC4F9AE02.roa
Signing time: Wed 18 Oct 2023 05:30:19 +0000
ROA not before: Wed 18 Oct 2023 05:30:19 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 209737
IP address blocks: 103.151.27.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 10:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3497 (0xda9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 18 05:30:19 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=652f6d6a-7c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e4:a3:83:b0:00:38:69:d8:b6:84:2e:f5:2e:
46:59:66:c4:36:6a:5b:73:1d:58:0a:6d:23:d6:ed:
ea:f4:9a:14:1c:55:50:90:59:38:1a:df:57:9f:56:
88:5f:10:c8:6a:6b:f6:95:b6:e1:9a:88:16:ab:9f:
91:5d:0b:33:50:f8:ee:61:35:e9:25:5c:7d:e5:2a:
fd:81:a4:ce:d9:9b:b8:f9:ac:35:d2:a3:da:d5:c7:
67:49:0f:18:a8:3d:63:91:65:d3:5d:fe:99:02:16:
c1:a0:b5:72:a6:c9:dc:43:1d:aa:9d:e8:8d:94:bb:
a9:b0:91:be:a1:d3:37:3c:76:77:32:2a:83:9f:88:
b7:c3:14:74:a5:b3:7b:07:13:64:fc:6b:86:64:46:
52:f5:95:86:7c:71:52:03:fc:05:a0:93:22:9f:b8:
0a:99:ff:0e:61:05:ee:88:50:6d:01:7e:4f:4d:53:
f2:32:e6:ba:df:a9:6c:7d:ba:b3:df:d9:99:7f:69:
ee:69:b0:04:67:09:36:90:c1:74:87:1d:69:d2:4a:
8b:60:6a:09:f0:da:f2:23:07:25:08:e5:99:28:f0:
3c:c3:09:3a:49:c0:f4:d3:a7:8c:15:ec:51:96:82:
cc:16:d9:dd:74:5d:4a:fe:ae:9a:7a:9c:af:27:3a:
a7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8F:FB:2D:CB:95:74:5F:E4:F2:7A:62:70:17:C3:16:7E:E7:C4:A0
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/40FCEC066D7711EE8980FE5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
175.110.97.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:84:55:29:0e:b1:3d:92:6d:88:6c:5d:c1:d4:76:6e:5c:0a:
5d:d8:60:f0:0f:e5:b5:c3:d3:3d:20:e7:c3:9f:41:e8:38:cb:
06:14:93:2f:2b:f4:b4:7e:2a:49:50:4b:f8:d1:21:dc:54:b6:
bb:fe:28:e9:1f:16:d1:51:50:1f:43:d2:df:db:0d:52:45:b3:
e2:5e:eb:ef:5e:57:58:1d:f8:7a:64:7c:1c:0d:76:13:16:f2:
82:a7:36:da:7c:82:2f:e0:1d:d7:3d:51:53:45:bd:be:42:ce:
96:4a:de:ba:59:13:f9:73:0d:01:e4:05:ef:1b:10:70:e0:5e:
b2:6c:3a:6e:c0:37:06:f3:87:20:61:ce:36:3c:53:f3:74:96:
b9:a1:92:39:d7:01:af:4f:a9:7c:34:df:49:09:b9:79:48:d0:
4a:30:55:7d:ed:37:3b:4b:f4:06:b7:e2:de:4d:c6:ec:d4:53:
df:4f:c8:b0:2b:24:5f:d9:fb:51:7a:bc:44:21:a5:75:31:16:
8d:f0:d4:c7:a6:01:e4:1f:5b:b5:b6:43:33:73:03:37:ee:83:
ef:f6:2c:7e:20:ab:aa:b9:80:d9:ec:df:1a:64:e3:f7:b1:73:
71:66:ae:d6:6b:30:56:88:b0:ac:dc:a9:ec:1e:40:b0:eb:aa:
20:e8:22:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 15:27:48 2024 by rpki-client on console-ams.rpki-client.org