Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/6C183596D3D211EE89B1650DC4F9AE02.roa
File: 6C183596D3D211EE89B1650DC4F9AE02.roa (raw, json)
Hash identifier: oIo5/w9DD+04y5Brbal2/3MbrjPvkweDvsx3QKTZuSg=
Subject key identifier: C0:C6:21:7C:07:24:38:D0:CD:5A:8F:91:EF:A5:6C:72:D5:61:2C:09
Certificate issuer: /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Certificate serial: 0375
Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/6C183596D3D211EE89B1650DC4F9AE02.roa
Signing time: Sun 25 Feb 2024 16:58:37 +0000
ROA not before: Sun 25 Feb 2024 16:58:37 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 136969
IP address blocks: 103.152.116.0/23 maxlen: 23
103.152.116.0/24 maxlen: 24
103.152.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 08:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 885 (0x375)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Validity
Not Before: Feb 25 16:58:37 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=65db71bd-ae6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b9:0c:cd:86:59:1e:07:a0:76:cb:35:46:a8:
87:74:63:a3:00:53:6b:2a:41:9e:a1:22:1f:6b:b1:
8a:7d:39:b5:ba:ee:d6:91:95:68:1b:6c:32:40:5b:
8e:d2:5d:54:55:16:7c:30:76:cf:01:9b:b7:da:a2:
f6:8a:46:88:97:87:e4:43:81:1e:76:7f:1c:db:42:
57:4a:6c:a5:92:2d:b4:91:60:b9:aa:12:53:f6:89:
e6:96:26:56:51:1c:7c:03:20:59:00:f7:c5:ba:e1:
18:f6:5e:94:77:25:90:9c:5a:1c:8f:6a:b3:67:55:
a7:fa:a8:eb:0b:dd:91:3a:c6:64:5e:59:be:2e:12:
8b:10:a3:72:a0:ed:b6:26:69:aa:fd:33:2a:7f:24:
6f:30:5f:dc:50:24:fc:ff:e2:cb:cd:5b:6f:1f:03:
17:79:f9:0c:b6:19:73:f3:5c:9a:ad:be:06:27:2f:
7d:ec:ac:0e:7e:48:af:b3:26:40:60:6a:bc:33:12:
1c:c1:8f:bb:06:59:e1:5d:87:9e:fe:01:42:95:2b:
0e:2f:e3:47:79:1a:3a:47:6e:ad:26:05:2a:3d:52:
e2:7d:d5:1f:1b:be:67:33:0c:4b:8c:26:a7:a8:72:
81:b7:3c:f5:06:65:8f:8d:47:fc:15:14:eb:8c:22:
4d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C6:21:7C:07:24:38:D0:CD:5A:8F:91:EF:A5:6C:72:D5:61:2C:09
X509v3 Authority Key Identifier:
keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/6C183596D3D211EE89B1650DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.116.0/23
Signature Algorithm: sha256WithRSAEncryption
30:a7:35:1c:4a:83:1e:4e:b3:2d:cf:02:2c:7a:06:d7:d1:0c:
cd:d4:5b:ca:69:bf:71:36:e3:13:78:06:8b:0d:7e:d1:e4:ed:
30:5a:1a:13:e2:1a:ca:f2:25:7d:ae:d9:e9:3a:1d:0e:41:56:
03:c5:50:3e:d4:94:01:94:cd:30:94:68:a8:e8:67:3f:eb:2c:
a8:72:77:42:52:79:23:26:73:1d:1b:6e:d1:3c:7a:08:00:10:
b1:c6:74:c2:17:13:12:ca:a2:c8:52:f6:c4:c0:c2:83:80:38:
a9:50:8e:e2:1a:75:72:27:55:32:9c:3c:b9:82:27:a3:a7:4b:
61:60:c7:47:65:b0:c1:15:da:2d:0d:f2:c0:5d:0e:a5:a9:f7:
df:52:cc:a5:52:89:66:ac:1c:6e:ce:6d:0f:44:48:6c:96:3c:
af:48:80:33:d4:d9:26:03:2e:80:d8:a6:85:05:9a:1f:82:95:
37:73:6d:ea:3d:27:dc:c9:22:8a:64:a9:5a:5f:40:2a:15:60:
34:5b:f4:58:3f:80:c6:70:ea:38:65:a5:c3:93:65:b6:cc:10:
56:c2:89:d1:20:15:2b:60:35:58:cd:47:64:62:dd:c3:db:45:
0f:f7:76:29:6b:c1:84:b9:61:cc:9f:52:71:2d:50:a0:95:f4:
91:4c:a1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 14:06:36 2024 by rpki-client on console-fra.rpki-client.org