Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/82BD604457EB11EF9C9B5620C4F9AE02.roa
File: 82BD604457EB11EF9C9B5620C4F9AE02.roa (raw, json)
Hash identifier: XBai/0LY4HD4sReo/xmivA80FmMByJzWh246f7+kc4w=
Subject key identifier: 88:AA:15:FE:10:5A:3D:9A:69:EF:D3:EA:95:5D:7B:81:C4:E0:1A:73
Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial: 0210
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/82BD604457EB11EF9C9B5620C4F9AE02.roa
Signing time: Sun 11 Aug 2024 14:10:49 +0000
ROA not before: Sun 11 Aug 2024 14:10:49 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 150716
IP address blocks: 103.67.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 04:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Validity
Not Before: Aug 11 14:10:49 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66b8c669-e097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:84:cb:ad:b9:05:f7:15:bb:d9:58:31:40:
6b:6b:b9:07:16:51:db:d4:fb:52:c0:bd:b2:98:78:
46:61:01:44:6d:0c:72:4d:e2:b1:a2:05:a0:10:ec:
45:0f:48:81:0e:58:0f:02:4f:f6:2e:3d:1b:c8:f5:
5d:4c:01:a4:9b:b5:ce:9b:b9:a2:7d:5a:bd:48:be:
5e:6e:ad:96:84:83:8a:ed:3f:24:b4:66:21:91:f9:
0f:70:8f:c6:f9:12:c4:0a:90:a7:e7:d0:5a:4d:99:
26:05:61:6d:9c:b4:58:8d:81:db:77:4c:49:1f:74:
e1:cc:3a:68:b1:f3:4e:cd:b6:04:f2:80:81:32:23:
86:db:3e:22:96:25:89:bf:53:92:9a:8c:de:27:d9:
f1:c4:e8:df:50:9c:af:5d:50:bc:1d:2e:2d:af:63:
c5:a3:b4:be:74:84:ed:ae:a2:52:3b:25:20:f3:c0:
4d:28:65:18:20:3c:de:c3:65:91:9e:06:19:d9:4d:
05:b0:75:b7:c3:51:40:42:0c:4b:69:b5:8f:16:0b:
c3:43:c0:14:f0:38:a3:0b:2a:45:b2:20:05:23:9e:
f5:a3:1e:78:14:42:38:6a:c5:d3:08:61:ba:76:f7:
d7:69:94:07:0c:11:c8:6d:0d:6c:d9:a5:4e:86:b2:
ef:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AA:15:FE:10:5A:3D:9A:69:EF:D3:EA:95:5D:7B:81:C4:E0:1A:73
X509v3 Authority Key Identifier:
keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/82BD604457EB11EF9C9B5620C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.67.247.0/24
Signature Algorithm: sha256WithRSAEncryption
21:b5:62:bc:8a:a1:f4:88:ff:9b:66:b4:fd:af:04:2c:83:22:
66:ea:cf:f1:dd:98:3d:b1:0d:95:50:17:57:e6:3b:db:6c:ae:
9c:e5:5d:c6:a0:e0:0c:4d:dc:a6:32:61:e4:4f:f0:d9:7d:a2:
c0:2f:02:04:b9:da:c8:25:00:89:72:03:15:33:d4:42:b6:9c:
ab:7f:0c:79:d0:58:7a:e7:89:76:bc:f1:7b:8e:f0:05:78:94:
de:79:a2:69:e1:65:c7:4a:dd:e3:14:e5:e0:d7:ac:12:e6:42:
b6:30:25:90:9d:2f:97:c2:40:a9:14:8a:3e:38:37:23:f3:04:
58:15:74:c0:9c:83:da:31:b3:b5:0f:16:91:bd:ee:75:4b:f2:
c0:20:5f:c3:17:be:82:9d:34:a7:b1:dc:51:31:81:04:21:50:
e3:85:a9:7e:fd:56:ca:2b:32:32:f6:02:6d:79:e1:8e:88:58:
f7:b8:97:a0:a3:b5:6a:62:74:b3:34:18:b3:04:c9:7e:f6:e3:
fa:a6:59:a9:bd:76:55:fd:59:d5:e6:8b:18:bc:4b:b9:0e:be:
f9:ce:b3:dc:2c:4e:33:53:69:bb:00:d4:c1:69:7c:df:04:c6:
ae:83:87:42:f6:8c:2a:2b:fe:bc:32:70:6e:b3:c6:05:c6:03:
9b:23:0a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 07:27:13 2024 by rpki-client on console-ams.rpki-client.org