Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/161E007AB8E911EEBFA0A242C4F9AE02.roa
File: 161E007AB8E911EEBFA0A242C4F9AE02.roa (raw, json)
Hash identifier: oPm+Dp8LFvs43NKbdoOQsV5NYma3Fdco2to1/Qprbk4=
Subject key identifier: A3:8B:BD:CF:99:2F:9A:10:21:90:9C:73:B0:40:4F:2B:DC:30:43:6E
Certificate issuer: /CN=A91F5266/serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D
Certificate serial: 02AF
Authority key identifier: 62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/161E007AB8E911EEBFA0A242C4F9AE02.roa
Signing time: Mon 22 Jan 2024 05:42:53 +0000
ROA not before: Mon 22 Jan 2024 05:42:53 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 142615
IP address blocks: 103.170.230.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 03:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 687 (0x2af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5266/serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D
Validity
Not Before: Jan 22 05:42:53 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=65ae005d-ed7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:be:dc:94:7c:03:f3:65:84:c1:8e:3d:70:fe:
ec:79:a6:55:e2:2e:8a:7b:d7:fe:b4:40:9a:e8:89:
c6:3f:53:80:c1:14:2e:1d:82:e6:36:3d:31:d6:f5:
70:2f:a4:9c:0a:8e:95:e8:19:d7:c1:5a:f3:94:f2:
5a:dd:30:7a:8b:70:77:f6:5d:6e:91:63:ff:94:f2:
cb:05:70:77:4d:08:94:12:31:60:1f:c1:5f:92:ad:
4c:db:ce:ef:1f:ad:22:ba:ec:1b:26:75:b0:21:76:
15:72:c4:40:27:b8:75:22:1e:d0:d5:2a:a8:8a:1c:
b0:b1:af:1d:23:ac:45:d6:13:a3:14:80:4d:6d:75:
82:14:4c:c5:87:95:88:71:00:6b:33:3e:42:6c:68:
48:48:50:20:2d:48:c2:c8:2c:c3:07:dc:fe:a4:7b:
d6:bf:3b:12:8f:02:a8:bc:ee:b9:9c:ae:49:e8:ef:
e4:24:d6:94:39:79:cf:ea:8b:9b:60:b2:bd:b2:91:
de:9a:47:84:ff:e7:ad:2e:1e:df:d7:b1:a4:39:39:
22:bb:c5:da:49:18:c9:c6:4a:27:75:3c:cf:ac:d2:
df:2d:70:05:94:bf:35:d8:f7:be:8f:6f:99:49:d9:
e9:2d:9e:5c:7c:3e:af:61:05:c8:28:ba:9d:91:5f:
82:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8B:BD:CF:99:2F:9A:10:21:90:9C:73:B0:40:4F:2B:DC:30:43:6E
X509v3 Authority Key Identifier:
keyid:62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/161E007AB8E911EEBFA0A242C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.170.230.0/23
Signature Algorithm: sha256WithRSAEncryption
54:d9:15:e1:1d:fa:f8:9a:87:13:f9:99:53:b8:a6:5a:ac:c9:
04:26:dd:8b:65:27:c5:cf:89:38:9f:74:3e:f5:e3:b9:a5:2d:
bd:3d:ad:62:f4:9d:b6:fd:b4:f1:7e:2b:f1:8e:2a:f0:ce:26:
26:d2:29:64:1c:39:43:ec:b3:e0:73:94:46:9a:9b:c6:74:4b:
01:1e:07:d8:49:12:aa:61:b4:8c:2c:72:04:8c:64:de:a9:81:
cf:3c:b0:8a:7d:88:63:05:61:23:07:e4:00:39:1d:97:e4:0a:
d1:e4:6a:87:31:a2:6f:f0:9b:39:9e:2b:14:77:e8:32:6a:5a:
a9:9f:75:53:48:1f:2c:91:68:bd:90:d1:97:1c:82:fb:c6:7c:
dc:25:00:8b:d0:ab:a8:84:61:fd:13:ea:fe:eb:6f:5f:f9:52:
37:f7:d1:52:1f:b0:16:57:e6:a3:9e:a4:d0:f2:50:34:6a:bb:
c7:37:10:fd:47:f5:cf:59:d5:39:d7:e2:ac:e0:a5:c9:8b:bb:
27:31:03:a1:ae:c8:74:18:ed:8a:fa:32:29:37:b3:06:22:26:
2c:d2:66:6b:27:67:14:2b:bf:cb:22:06:78:e9:b2:1f:f1:ca:
98:1c:5d:96:83:61:e4:0b:59:2e:68:b8:78:3d:f1:26:2f:c1:
a7:b3:62:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:38 2024 by rpki-client on console-ams.rpki-client.org