Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232342e302f32332d3233203d3e20323132383135.roa
File: 3130332e3137332e3232342e302f32332d3233203d3e20323132383135.roa (raw, json)
Hash identifier: YOViE3C/Y1SLVLX/S6tO9aacD6T3du1Mq6fBTGgiTB0=
Subject key identifier: E1:E0:F2:CC:1E:72:10:0E:51:A9:98:F3:07:4C:88:F7:DD:0C:4D:DD
Certificate issuer: /CN=A91E54810000/serialNumber=D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940
Certificate serial: 74FB0AC6C1D07F7DF522D911F455A2A665857C32
Authority key identifier: D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232342e302f32332d3233203d3e20323132383135.roa
Signing time: Tue 21 Nov 2023 12:12:40 +0000
ROA not before: Tue 21 Nov 2023 12:07:40 +0000
ROA not after: Tue 19 Nov 2024 12:12:40 +0000
asID: 212815
IP address blocks: 103.173.224.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 08 Jan 2024 02:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:fb:0a:c6:c1:d0:7f:7d:f5:22:d9:11:f4:55:a2:a6:65:85:7c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E54810000/serialNumber=D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940
Validity
Not Before: Nov 21 12:07:40 2023 GMT
Not After : Nov 19 12:12:40 2024 GMT
Subject: CN=E1E0F2CC1E72100E51A998F3074C88F7DD0C4DDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:60:d3:10:04:c7:76:58:13:f4:b3:9b:3f:b8:
a9:a6:2c:6b:d6:1f:33:79:c4:11:4f:66:64:b3:1f:
39:08:80:77:e7:28:68:bc:76:e5:fb:14:a3:e6:89:
60:3a:72:0d:67:be:0c:3d:f8:c1:e7:e0:e6:bc:80:
b8:f2:f0:1a:cd:7b:ce:2a:e0:9e:ea:0d:b5:ed:04:
5a:61:e0:f8:68:42:3e:5b:cf:83:e3:fe:b4:1e:53:
f0:29:a7:05:57:2e:21:83:79:8c:01:fc:55:34:f9:
d2:63:98:a8:73:8c:e9:42:61:88:ae:90:25:7d:fd:
2e:ef:d2:75:77:68:8b:bc:27:e7:53:79:b1:5a:69:
1c:30:f9:91:46:93:12:bd:0d:9e:54:df:e7:39:88:
b4:34:99:db:af:24:8c:aa:26:db:67:02:10:78:77:
b6:0f:71:77:be:c2:fb:7d:2e:6d:72:69:3c:dc:e2:
4e:d8:d0:d2:35:94:b4:47:94:c1:43:5a:fa:82:5b:
ce:71:cd:c3:11:c2:f2:c7:3a:4b:4b:1c:db:4b:dc:
74:89:33:68:b9:f3:a2:7f:cb:b7:9f:fd:85:8d:bc:
aa:d7:53:b0:00:73:f4:3d:80:11:0f:10:c3:67:d2:
08:c1:d8:23:0a:61:0f:07:f2:73:cc:77:76:40:2c:
e2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E0:F2:CC:1E:72:10:0E:51:A9:98:F3:07:4C:88:F7:DD:0C:4D:DD
X509v3 Authority Key Identifier:
keyid:D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232342e302f32332d3233203d3e20323132383135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.173.224.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:1d:61:e8:a6:81:07:66:62:98:43:de:2f:52:7e:e4:3a:d0:
dd:8c:2e:c1:3d:ee:8c:1b:c9:40:f9:b3:36:b3:07:8b:08:31:
3f:86:ba:bf:a4:b7:2e:1d:65:48:2e:93:00:87:0d:7a:da:96:
3c:04:b2:52:22:cb:a8:06:56:ee:58:95:ac:60:42:5b:93:05:
88:37:71:ba:66:33:50:28:f7:25:d7:06:71:cf:5e:ba:7b:4a:
7d:4c:a2:3a:4f:06:c3:7d:95:30:58:a7:b5:68:7c:af:08:0d:
eb:6e:ca:92:6d:99:0e:3e:1f:d6:4c:13:62:fe:65:6c:d2:4e:
e3:3d:31:7a:dd:ab:f1:12:cf:e5:49:48:9c:0b:76:0e:eb:7f:
e1:06:78:c5:d8:53:cd:ac:f1:5d:b0:5e:1c:5f:d2:b6:35:6f:
f5:aa:ee:f9:25:5d:80:f4:b9:a4:1a:0c:b2:cc:93:c7:8e:93:
e4:01:52:71:c9:20:6f:a6:14:39:ac:8a:98:0f:02:5f:6f:74:
7d:46:10:d2:ea:bd:70:bf:c0:2d:02:47:c5:94:4c:9c:61:a7:
b9:af:65:67:de:d4:e8:78:3e:0e:74:3a:23:d6:d8:67:8a:fa:
03:f9:31:4e:11:ca:2a:a9:78:76:c0:4f:be:51:b3:e7:0c:67:
fb:3b:47:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:51 2024 by rpki-client on console-ams.rpki-client.org