Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/E9315CAA956B11EFB287E24CC4F9AE02.roa
File: E9315CAA956B11EFB287E24CC4F9AE02.roa (raw, json)
Hash identifier: +Yf3JoGUYiUxqywb0vrUm6ga+iAyXrkrPJxru+zOWVw=
Subject key identifier: CD:93:CB:5D:FD:D9:15:B4:3C:DD:C0:1B:56:ED:1F:7B:81:65:AF:10
Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial: 3558
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/E9315CAA956B11EFB287E24CC4F9AE02.roa
Signing time: Mon 28 Oct 2024 20:33:38 +0000
ROA not before: Mon 28 Oct 2024 20:33:38 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 151754
IP address blocks: 103.230.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 06:46:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13656 (0x3558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Validity
Not Before: Oct 28 20:33:38 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=671ff522-1550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:04:92:12:45:9f:3a:52:ed:ae:af:94:70:ad:
51:92:19:b6:fd:9b:8d:5c:b9:66:3b:36:41:aa:0b:
c2:b3:87:c6:16:91:4e:a7:f0:47:c6:3d:ab:eb:17:
24:95:62:72:86:1b:ff:a6:30:fe:51:3b:8c:3e:d3:
48:94:c7:f9:11:d7:55:f5:4c:4d:e6:04:99:87:81:
ef:8f:95:ad:6c:36:8b:98:d9:76:66:40:9d:ba:35:
ed:07:9f:7e:c5:9f:fb:22:ac:01:a6:29:33:31:e0:
9a:d7:51:c3:99:7e:ec:63:5c:53:42:6b:92:3f:bc:
a7:07:22:a7:8e:01:79:85:c8:61:23:17:91:4e:bb:
6f:b5:41:97:f4:ee:e5:3c:da:9a:7e:a4:e3:09:49:
26:21:eb:9c:66:6a:54:9e:3a:8a:8b:48:48:57:45:
c1:e8:f3:a7:5a:ac:b8:b7:ec:33:59:14:1e:5c:49:
7f:4c:e1:e7:54:36:60:6f:b8:62:67:3b:cd:1b:b1:
ba:9d:2a:ee:af:c4:87:25:da:36:c6:d9:31:61:51:
69:33:ec:4d:63:ab:bd:ef:ea:42:96:cd:dc:f8:18:
a2:fa:bc:b4:35:74:2f:13:99:12:dc:68:59:d1:1b:
47:0f:5f:2c:c0:e6:00:78:b2:a7:c4:2f:8a:33:ae:
f0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:93:CB:5D:FD:D9:15:B4:3C:DD:C0:1B:56:ED:1F:7B:81:65:AF:10
X509v3 Authority Key Identifier:
keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/E9315CAA956B11EFB287E24CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.69.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:98:a6:8b:37:cc:ce:93:b8:7f:a3:9a:2e:ee:6a:8f:d4:17:
8e:91:a1:36:7e:f1:54:8f:9c:e3:1d:64:8f:9e:4d:4d:85:91:
b2:61:ce:bd:87:ed:4b:55:4e:87:07:70:15:0c:44:25:e7:7a:
b3:64:ce:42:71:65:a8:5b:c3:53:60:65:61:14:23:94:82:82:
72:c2:4b:51:67:f1:aa:bb:d6:44:ff:d3:a2:21:1d:84:81:89:
b9:a0:93:22:99:c9:11:4b:90:63:75:67:61:55:fd:2f:8a:f2:
45:c6:30:e4:24:eb:92:bc:7f:24:ed:b4:88:1b:7f:50:7a:06:
b9:84:bc:3b:ea:5a:f9:a6:4b:26:94:ac:55:2d:dd:39:e0:4b:
63:69:e3:1c:26:ca:67:42:d2:91:b8:7d:3b:3c:2c:ba:5c:8b:
dd:cf:cf:80:7d:4a:2f:56:31:58:b9:c7:a5:58:2e:05:12:6a:
5b:e7:b3:96:48:8f:5f:64:12:8f:13:c8:d3:b5:ac:0d:9a:86:
a3:df:fa:0e:26:84:9e:06:88:1f:00:6b:7b:27:23:38:4c:f4:
40:dc:ae:e7:ce:9a:e9:53:d4:9f:b4:6f:fc:5f:6f:81:67:1b:
e5:c0:c6:dd:a2:b1:0c:2d:a1:07:c9:25:31:5b:1d:cb:88:07:
54:33:57:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 09:23:25 2024 by rpki-client on console-ams.rpki-client.org