Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/85DE87DC47AF11EEA0A5EB62C4F9AE02.roa
File: 85DE87DC47AF11EEA0A5EB62C4F9AE02.roa (raw, json)
Hash identifier: rH2vNsfq5ersexmZDiVvwe39yhBGVAKGaeovnGkZbS0=
Subject key identifier: 9C:19:30:37:4A:82:7B:E2:A8:F3:68:47:CD:28:1A:8D:69:A5:2E:34
Certificate issuer: /CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60
Certificate serial: 20A8
Authority key identifier: 72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/85DE87DC47AF11EEA0A5EB62C4F9AE02.roa
Signing time: Tue 12 Mar 2024 01:03:31 +0000
ROA not before: Tue 12 Mar 2024 01:03:31 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 132858
IP address blocks: 103.29.172.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 18 Jun 2024 01:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8360 (0x20a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60
Validity
Not Before: Mar 12 01:03:31 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65efa9e3-5ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b5:69:b9:f9:ed:49:9c:ab:c6:66:c1:e3:87:
ae:bb:25:76:9f:3f:70:fb:3e:ab:fe:1a:7c:3f:2f:
14:77:b4:a4:ad:8c:3a:0b:ac:33:af:e3:53:6f:ce:
6b:de:b7:a7:32:25:3d:80:11:76:21:a4:b1:c7:0f:
f9:87:1e:e6:f9:63:ad:80:0a:58:97:37:99:d0:85:
96:3f:56:3b:35:ea:a6:44:19:50:52:c7:81:48:51:
a0:94:f4:a1:05:6a:09:ec:93:8d:e4:4f:09:c9:ff:
28:48:8d:47:ec:8b:94:0a:79:f3:02:dc:a4:b5:f2:
9c:09:94:74:17:d6:e1:a7:45:05:7d:6c:24:3c:67:
a6:ca:6a:ec:3a:a9:70:45:63:45:9e:b1:32:80:24:
9c:22:3e:24:c4:e1:72:96:3c:97:6f:1f:88:14:f7:
99:10:b0:10:7e:51:21:6f:c4:f3:14:2b:01:05:01:
bb:6c:07:02:b2:b2:b5:dd:41:fb:11:25:f6:0f:28:
7c:fb:74:67:b4:9b:6c:bc:c3:5a:32:2b:9c:84:23:
45:92:d8:87:30:09:c2:d8:2b:39:c5:6d:25:ac:ca:
b1:10:f7:4d:71:ad:0f:57:55:92:99:9d:0e:6a:5d:
9a:93:94:53:8b:79:ed:b2:ef:1b:ed:82:36:40:94:
0b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:19:30:37:4A:82:7B:E2:A8:F3:68:47:CD:28:1A:8D:69:A5:2E:34
X509v3 Authority Key Identifier:
keyid:72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/85DE87DC47AF11EEA0A5EB62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.29.172.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:69:a5:2e:23:2c:66:79:9f:63:4b:a0:58:ca:f5:8e:50:3b:
87:1f:32:b5:5c:31:c3:1d:2c:25:b0:96:45:86:23:fe:78:10:
1e:b0:8e:fd:f4:0b:73:3e:27:08:b1:18:49:dd:80:e1:34:15:
a5:6d:d1:00:d1:d3:ac:63:61:5e:7b:12:59:90:1b:d2:5b:60:
5b:cb:51:4b:54:18:6d:9b:7b:62:8b:45:7b:6f:d0:05:09:67:
ba:8b:16:82:af:11:5d:c3:2e:35:a5:d8:be:b0:bb:6c:47:50:
d2:a0:06:67:b1:a0:bb:d9:bb:c9:ab:66:44:79:8a:3a:5f:a8:
38:98:55:f4:98:b5:7c:07:48:67:c8:03:28:48:e9:af:fa:2e:
9b:45:cf:42:d6:ed:62:9e:d1:28:0d:de:f0:c1:99:55:14:d9:
ef:5b:81:4b:ec:af:20:93:d4:e7:e1:43:ce:53:78:d3:05:41:
3a:5a:bd:74:e3:01:f1:b2:61:f1:e9:08:1a:72:2a:39:6d:0e:
24:27:4c:91:e5:ef:41:a0:92:51:56:e7:33:73:1d:6b:92:c4:
01:07:5a:10:d1:05:62:eb:a6:83:06:14:1c:03:f4:0d:24:25:
f7:f9:31:43:23:43:16:76:23:d1:3b:fa:80:09:1b:76:53:8c:
e3:34:80:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 02:58:45 2024 by rpki-client on console-fra.rpki-client.org