Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B1C9DEB2845611EEB6676048C4F9AE02.roa
File: B1C9DEB2845611EEB6676048C4F9AE02.roa (raw, json)
Hash identifier: nXhKAeCqWyzND1rhgITS+mxVC8BF3hGonydw1BAY83I=
Subject key identifier: E4:7A:66:72:4D:BD:3A:8A:48:85:F5:44:D0:A1:31:02:E4:A2:47:F3
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0E00
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B1C9DEB2845611EEB6676048C4F9AE02.roa
Signing time: Thu 16 Nov 2023 08:03:58 +0000
ROA not before: Thu 16 Nov 2023 08:03:58 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 151983
IP address blocks: 103.11.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 07:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3584 (0xe00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 16 08:03:58 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6555ccee-54b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:54:bf:12:39:e1:03:33:37:7f:63:2a:f7:28:
30:5c:4a:d7:6f:9a:51:aa:59:f3:75:a3:42:c9:06:
1d:51:71:92:e3:d6:89:0e:1c:49:a7:af:80:19:93:
4c:a8:77:f2:ae:49:0f:31:b0:80:ad:1f:7f:7c:3b:
ca:61:9f:8b:cd:76:9b:93:2e:f7:b0:e4:ce:ab:9a:
51:5d:30:6d:46:f8:18:66:27:5e:e1:22:79:a7:99:
cc:d9:26:67:ff:0a:f2:7a:d2:29:26:9e:42:28:b3:
16:2c:54:24:16:e1:43:0f:8c:ca:8c:70:61:5b:d1:
73:d7:3f:40:45:4d:1e:9c:37:e0:d9:33:6e:2f:d8:
c3:49:88:ab:59:73:9a:5a:90:2d:16:5e:d6:cf:06:
10:f3:ad:6c:f3:ab:c2:0e:c6:1f:e0:9a:ae:9c:c4:
ee:14:ea:66:a5:86:9e:91:fd:a7:17:dd:fd:48:35:
16:0e:57:8d:89:39:44:79:33:ee:56:81:a5:d8:c5:
9b:73:80:dc:d9:59:5f:e4:2d:cc:ed:3e:6f:72:47:
d0:5d:15:f9:7f:c0:35:d0:ad:79:6f:cf:dc:8b:a6:
6c:d4:94:8c:52:ec:a8:cb:65:f0:40:4e:80:b6:b2:
8f:6f:91:5d:78:5f:4b:73:fa:c5:2c:f7:58:e3:d1:
9a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7A:66:72:4D:BD:3A:8A:48:85:F5:44:D0:A1:31:02:E4:A2:47:F3
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B1C9DEB2845611EEB6676048C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.62.0/24
Signature Algorithm: sha256WithRSAEncryption
95:aa:08:e0:c1:b3:2d:f0:89:e6:03:e6:08:42:22:d3:63:31:
1b:2b:30:c5:3e:2d:b5:39:6e:59:2d:01:08:50:96:9e:75:df:
2a:e9:22:90:4c:e2:43:b1:d3:42:4f:9d:a3:f5:a8:d9:f3:5f:
ff:48:c9:ec:a6:f0:61:17:cc:42:06:f4:26:1b:83:d4:f5:98:
dd:36:e7:31:82:eb:d0:f2:0e:63:71:f1:9a:f3:d4:1f:9e:8c:
31:79:a9:44:b6:fe:7f:7b:75:ae:f7:41:34:cd:00:e0:25:65:
eb:a2:a2:c1:7c:74:e0:52:9c:50:d9:9e:3c:db:91:9b:4a:7c:
cc:09:8c:4e:28:63:72:57:fe:68:d6:d1:04:97:36:a7:48:09:
34:93:4e:5b:28:2e:eb:3b:54:54:01:20:12:c9:fa:29:11:de:
2d:a2:bf:04:7a:53:ec:86:8f:ea:56:c5:c4:b9:2f:f7:f1:86:
36:ae:e0:3a:e0:9e:78:03:b1:4c:8c:99:57:86:3f:00:99:47:
97:a5:df:f1:87:39:70:86:e8:4c:7b:ed:86:97:3a:ff:df:47:
78:c2:98:c0:19:61:16:34:47:5d:a4:27:b9:9a:7f:69:ed:2c:
0e:4e:6a:1a:29:1b:89:43:21:39:c5:70:a2:a7:1d:bc:e4:91:
3c:8d:e0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 12:41:44 2024 by rpki-client on console-fra.rpki-client.org