Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCDE1/29E0B442B50D11EAAC6C401FC4F9AE02/D078B850232511EBA643E910C4F9AE02.roa
File: D078B850232511EBA643E910C4F9AE02.roa (raw, json)
Hash identifier: nYgUOsvMAXCGyXLiepoWl0Bs3cBd+jmMvkCFXJIxkac=
Subject key identifier: 7A:AD:5D:D6:CC:89:79:A4:CF:A8:FA:2A:0D:FF:68:A5:33:55:57:C8
Certificate issuer: /CN=A91FCDE1/serialNumber=C2FF115D310BB9147CDDC74991CC1C471FBA1299
Certificate serial: 077B
Authority key identifier: C2:FF:11:5D:31:0B:B9:14:7C:DD:C7:49:91:CC:1C:47:1F:BA:12:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wv8RXTELuRR83cdJkcwcRx-6Epk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCDE1/29E0B442B50D11EAAC6C401FC4F9AE02/D078B850232511EBA643E910C4F9AE02.roa
Signing time: Wed 02 Aug 2023 21:38:42 +0000
ROA not before: Wed 02 Aug 2023 21:38:42 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 137969
IP address blocks: 103.152.132.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 10:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1915 (0x77b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCDE1/serialNumber=C2FF115D310BB9147CDDC74991CC1C471FBA1299
Validity
Not Before: Aug 2 21:38:42 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64cacce2-da7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b7:34:c8:88:d9:0a:37:cb:1f:7f:5d:96:b2:
96:04:09:b2:3f:1d:18:95:c9:37:29:97:aa:72:81:
5f:3d:ca:0d:a7:2f:b6:7c:98:72:6e:f0:f7:57:de:
5e:36:fa:6f:9d:d9:64:1e:56:e0:25:32:ee:da:6d:
71:9d:83:67:0b:4b:48:4a:8c:a6:6a:9f:7d:78:66:
09:4d:cd:0c:d6:04:db:0b:f7:f5:ca:ae:fc:e4:a9:
0c:0f:08:a3:4a:b5:03:f7:4d:e0:e5:c0:fa:bf:4c:
15:c7:25:93:7f:f4:fa:88:38:28:31:81:98:35:cb:
72:73:83:10:62:41:ca:80:70:12:2d:40:5c:26:e0:
bd:6c:e9:66:d3:6e:b0:3d:cd:39:e8:64:32:9c:6a:
d5:fc:b0:13:13:03:a0:2f:72:bc:b0:71:14:b1:64:
e8:f1:d2:a6:ba:f2:9d:0e:0f:63:10:0f:74:57:e6:
8d:b9:cb:6b:e4:69:32:d7:dc:dd:6e:23:28:a5:20:
2d:6f:70:c6:ce:6b:e2:cb:be:21:9a:c3:99:d5:99:
f3:77:6e:5a:4c:55:3c:9a:4d:29:83:5a:b5:4b:29:
e2:01:a7:bf:5f:16:8c:88:9e:9f:f9:3e:f3:b7:2e:
ca:2c:f8:0c:38:ae:2a:e6:e3:cd:7f:cc:11:f6:42:
1d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AD:5D:D6:CC:89:79:A4:CF:A8:FA:2A:0D:FF:68:A5:33:55:57:C8
X509v3 Authority Key Identifier:
keyid:C2:FF:11:5D:31:0B:B9:14:7C:DD:C7:49:91:CC:1C:47:1F:BA:12:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCDE1/29E0B442B50D11EAAC6C401FC4F9AE02/wv8RXTELuRR83cdJkcwcRx-6Epk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wv8RXTELuRR83cdJkcwcRx-6Epk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCDE1/29E0B442B50D11EAAC6C401FC4F9AE02/D078B850232511EBA643E910C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.132.0/23
Signature Algorithm: sha256WithRSAEncryption
06:f8:eb:e7:e0:0b:ed:00:56:05:07:4f:8e:65:96:6a:df:a6:
da:19:55:41:7e:2a:84:48:cc:20:8f:a6:b4:c4:b3:1b:dd:eb:
a1:e2:7f:78:82:53:a1:7a:67:ca:80:af:04:52:9a:e7:91:fc:
b5:fb:ff:78:b2:72:25:41:91:b6:dc:dd:24:3c:a5:ec:05:d4:
c0:d3:9e:d0:3e:12:67:5a:0d:ae:68:bb:b7:5a:44:2b:97:95:
17:40:d4:ce:db:d1:ec:dd:ee:6c:d0:e7:61:be:31:60:92:0d:
fa:5b:10:56:29:c7:e3:36:ef:0e:82:60:c1:63:95:75:69:3a:
4e:53:78:cf:6b:36:3f:f3:ef:ae:8b:b0:81:35:e6:9d:c2:a1:
c0:64:62:cf:2e:d6:ad:e6:61:5a:12:4f:ca:2c:d6:ff:15:4c:
72:28:e0:01:7a:f2:b7:30:16:1e:f1:23:68:ad:b3:96:ff:f1:
f4:1c:ac:96:70:b4:ea:ef:38:2e:97:46:92:c1:68:66:53:26:
3f:79:99:de:b2:91:6a:b4:ae:24:dd:27:3e:94:57:bd:1e:7e:
c8:67:71:50:fa:f3:3a:7d:ee:54:b0:4c:91:4b:72:07:90:6c:
82:fa:d6:b5:6e:bd:73:7c:1d:9d:7f:d0:5b:24:d4:5c:75:d1:
a8:b2:e5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 14:55:53 2024 by rpki-client on console-fra.rpki-client.org