Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91BE6D70000/0/3130332e3137352e32372e302f32342d3234203d3e20323132323338.roa
File: 3130332e3137352e32372e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: gKmoihluKVtI7JC2q8C/6fm5qtw4lAd+XidM2Y7FYJg=
Subject key identifier: 4F:0D:86:7A:D0:68:12:DE:56:1D:80:5F:51:48:FC:0F:B4:B9:EE:68
Certificate issuer: /CN=A91BE6D70000/serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB
Certificate serial: 246C6FC9D3710BF239E5C280A3DE44E3F585A2F2
Authority key identifier: BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/3130332e3137352e32372e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 12 Sep 2023 04:36:26 +0000
ROA not before: Tue 12 Sep 2023 04:31:26 +0000
ROA not after: Tue 10 Sep 2024 04:36:26 +0000
asID: 212238
IP address blocks: 103.175.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:6c:6f:c9:d3:71:0b:f2:39:e5:c2:80:a3:de:44:e3:f5:85:a2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE6D70000/serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB
Validity
Not Before: Sep 12 04:31:26 2023 GMT
Not After : Sep 10 04:36:26 2024 GMT
Subject: CN=4F0D867AD06812DE561D805F5148FC0FB4B9EE68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:67:ab:46:8e:fd:4c:b9:5c:90:53:48:20:8c:
a9:e0:6f:45:e4:31:20:d0:ee:62:19:3d:c3:b2:e2:
19:9f:82:32:e7:4e:27:74:84:af:a4:d3:93:d9:95:
33:19:33:12:da:30:a0:bb:2d:dc:dd:e8:8f:fa:30:
9b:9b:0a:c5:d0:b2:71:35:31:23:0a:97:d4:54:f5:
08:ef:21:5d:6e:5d:eb:18:ca:bd:bb:6f:5b:dd:b6:
b4:62:5f:03:a7:bf:a4:5a:0d:fc:7e:53:02:c7:b4:
2e:d3:cb:3f:13:36:77:68:4d:7e:f8:55:9f:6c:8c:
97:3c:b5:63:7d:53:03:26:66:cb:2b:16:c1:11:54:
f8:06:61:24:b3:f1:e3:bd:37:fa:c4:67:9f:7d:8b:
8c:7b:4c:bb:d8:03:d9:0c:50:40:45:b8:e1:ec:99:
89:f5:bb:d9:5f:87:91:21:7d:a6:ff:08:54:d7:9d:
f3:4c:e9:5f:25:4f:a0:06:cd:2c:c3:ff:fe:51:2b:
1d:a3:ba:8d:ec:17:df:88:d8:3b:82:a1:2a:67:a2:
e7:9b:4d:c4:62:d7:fe:d6:c4:9a:d7:1a:54:63:0c:
96:5f:e1:98:43:47:60:60:97:2e:4e:fa:dd:7b:f2:
37:9c:95:0a:19:b1:47:49:af:06:f3:ed:b7:de:97:
05:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0D:86:7A:D0:68:12:DE:56:1D:80:5F:51:48:FC:0F:B4:B9:EE:68
X509v3 Authority Key Identifier:
keyid:BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/3130332e3137352e32372e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.175.27.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e2:a7:d7:05:87:53:75:d2:e7:9d:c8:8f:1d:86:70:00:11:
0d:e9:4d:05:31:c1:20:e6:07:b7:0f:de:cf:90:94:2a:d2:77:
10:9d:cc:2d:83:84:d7:87:aa:73:09:47:db:e1:a8:51:77:98:
5b:85:77:a9:fa:5f:2a:30:84:06:40:f1:dc:3e:51:45:d4:a4:
9a:6c:6c:6c:2e:ac:dd:e0:39:b5:9f:1e:a1:b9:2b:e8:77:a6:
df:29:90:44:ab:d9:05:4c:9c:5c:ab:7c:78:d6:4b:06:23:68:
a1:74:2d:fc:ed:1b:af:16:29:93:37:3f:03:78:cd:84:94:be:
33:ba:da:17:17:c6:0b:db:9e:d1:0f:69:f4:8a:ba:48:ed:7f:
f7:83:25:25:83:ea:0a:6b:6e:a2:d9:e4:52:81:cb:9d:43:f5:
71:09:35:11:37:87:43:fe:ee:66:0b:71:b2:eb:8e:a3:06:f1:
26:64:5a:4d:77:10:3f:12:a1:22:bd:41:cb:e7:be:1e:42:1f:
a1:f2:11:1d:b0:54:7c:aa:e9:08:b8:ee:74:b3:16:95:76:bd:
1f:5a:cf:8d:de:0f:43:d7:e7:a9:1b:23:25:48:32:64:ec:9c:
1a:d2:87:17:0e:b0:59:d2:de:ff:f0:e9:28:ae:3a:38:93:0d:
20:9e:f0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:51 2024 by rpki-client on console-ams.rpki-client.org