Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/DBD3B546C85511EEA231C150C4F9AE02.roa
File: DBD3B546C85511EEA231C150C4F9AE02.roa (raw, json)
Hash identifier: CPsaOAcL4dyzZhh4JN1qDuQYExLRuegLGkz+enL9yFQ=
Subject key identifier: F3:8A:7B:0C:DC:BA:A0:71:7B:40:75:D1:43:7E:16:76:A1:E7:10:B7
Certificate issuer: /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Certificate serial: 0356
Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/DBD3B546C85511EEA231C150C4F9AE02.roa
Signing time: Sat 10 Feb 2024 20:53:25 +0000
ROA not before: Sat 10 Feb 2024 20:53:25 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 140732
IP address blocks: 103.152.116.0/23 maxlen: 23
103.152.116.0/24 maxlen: 24
103.152.117.0/26 maxlen: 26
103.152.117.64/26 maxlen: 26
103.152.117.128/26 maxlen: 26
103.152.117.192/26 maxlen: 26
Validation: Failed, certificate revoked on Tue 20 Feb 2024 11:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 854 (0x356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Validity
Not Before: Feb 10 20:53:25 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=65c7e245-e21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:30:83:7d:3e:e5:b3:db:d3:3c:f0:ab:4d:8f:
29:ff:93:d2:06:7b:97:ec:1a:86:f3:16:c2:33:36:
c7:15:f7:09:f0:6c:ba:e6:0e:e6:54:9c:ed:96:fd:
95:b5:80:25:5c:17:6d:a2:41:70:f8:80:56:50:12:
f6:26:2c:cf:09:93:44:d4:67:8b:a7:4e:a1:72:17:
2b:85:4c:f7:04:5b:90:46:55:b8:08:6c:08:59:cf:
d4:38:b1:0b:83:52:45:a3:c9:b2:53:45:ce:12:20:
55:e8:e5:db:43:d4:89:ba:75:e2:c5:79:e8:38:8a:
ac:93:89:ed:6b:57:a7:ac:8b:90:3b:d3:70:3d:e2:
30:09:23:ae:25:2a:fb:9b:20:13:53:eb:27:15:39:
90:dd:db:44:8a:2d:a4:ed:b6:2c:ec:69:08:fb:7e:
3a:53:74:87:d1:c7:cb:f4:9e:7b:57:5f:04:6b:01:
81:87:0f:06:5d:38:ae:cc:f0:1e:75:48:c6:5a:ca:
29:7b:db:a5:7e:ae:70:a8:72:9a:a3:d9:be:4e:82:
6d:35:3d:af:3f:0e:b9:c3:5c:cf:3a:bc:ef:53:69:
12:3d:7b:06:d2:a7:01:f6:13:42:0c:1a:8f:5f:40:
6f:2f:4b:ad:dd:3d:e6:51:83:7a:1a:14:a3:b5:50:
af:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8A:7B:0C:DC:BA:A0:71:7B:40:75:D1:43:7E:16:76:A1:E7:10:B7
X509v3 Authority Key Identifier:
keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/DBD3B546C85511EEA231C150C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.116.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:ad:11:20:31:0c:98:fb:4a:e1:ac:61:b0:f8:e9:67:a7:1c:
f8:ce:db:78:18:62:45:bc:9f:8f:8a:06:fb:b9:7a:8b:c0:54:
c8:4d:c7:ef:e4:20:64:fb:a9:92:0b:6f:f5:ab:f3:88:22:1a:
86:ec:be:c7:72:80:79:2b:1e:47:3e:fa:d0:06:9c:1c:94:1c:
04:93:7b:25:0c:6d:76:58:03:e9:0d:02:3e:46:5e:87:91:8e:
c6:25:89:0c:e0:44:ec:6b:61:b6:1c:47:bc:5f:02:e9:f2:93:
7e:b7:de:3f:3f:e4:93:04:a9:0d:0f:2d:a0:dc:26:9e:f6:49:
6f:df:a3:02:ad:82:03:af:3e:90:9e:6a:1a:91:ad:47:01:7e:
da:c9:86:0e:52:30:52:0a:03:f0:48:d8:f7:c5:43:26:4d:92:
70:33:6d:fe:dd:8b:f0:49:c3:35:b3:6e:a2:dc:1e:38:d7:db:
ab:d7:8d:97:a0:2d:14:51:d6:49:1d:c2:f7:47:03:05:e3:64:
5e:65:30:27:d7:b0:50:c5:d4:7d:25:6d:4a:b1:8f:0a:60:eb:
2e:66:7d:11:fe:8a:5e:e0:99:09:d8:dc:93:e6:d4:e3:db:42:
94:d9:00:ed:6e:ff:f9:df:da:1e:fb:0b:cd:97:6c:fb:f4:42:
41:b8:b0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 15:08:27 2024 by rpki-client on console-ams.rpki-client.org