Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232342e302f32332d3234203d3e20323132383135.roa
File: 3130332e3137332e3232342e302f32332d3234203d3e20323132383135.roa (raw, json)
Hash identifier: ubsGy9wq6Mz9vnZrAfaY25OoNT21ngTbGzPpGtVY6qs=
Subject key identifier: 4E:72:CB:CF:02:78:27:D8:B5:8A:6C:18:12:FC:97:44:27:05:96:D9
Certificate issuer: /CN=A91E54810000/serialNumber=D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940
Certificate serial: 08D8DCA5029583FD0ED988844A89D4B1A907D483
Authority key identifier: D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232342e302f32332d3234203d3e20323132383135.roa
Signing time: Tue 21 Nov 2023 12:12:19 +0000
ROA not before: Tue 21 Nov 2023 12:07:19 +0000
ROA not after: Tue 19 Nov 2024 12:12:19 +0000
asID: 212815
IP address blocks: 103.173.224.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 02:25:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d8:dc:a5:02:95:83:fd:0e:d9:88:84:4a:89:d4:b1:a9:07:d4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E54810000/serialNumber=D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940
Validity
Not Before: Nov 21 12:07:19 2023 GMT
Not After : Nov 19 12:12:19 2024 GMT
Subject: CN=4E72CBCF027827D8B58A6C1812FC9744270596D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:78:a3:e8:71:36:d0:4f:8c:69:ec:06:1d:e4:
fe:9f:a0:87:15:7f:ea:a9:39:54:aa:d9:35:71:38:
2c:83:40:bb:b0:6f:04:cb:29:00:52:f3:5f:c7:30:
bd:a5:bf:46:cc:70:0b:d5:09:3e:21:9f:2a:0e:51:
8a:51:63:40:c1:88:eb:78:10:3c:90:1d:51:bc:49:
1c:12:3d:ca:da:22:eb:24:e4:3d:33:b8:10:f5:64:
14:a7:ec:34:34:df:1c:b0:0c:ca:3f:72:5f:28:db:
69:bb:80:60:24:4b:fa:42:5e:09:0a:6e:3e:f2:18:
dd:9a:57:62:96:5d:79:7c:55:43:31:43:2a:a8:65:
ca:03:01:bf:11:92:7c:be:b4:08:be:27:a9:26:0d:
fc:cc:51:35:4e:3b:b1:5c:95:88:49:2c:4a:43:e6:
7b:71:e3:b1:f2:ab:a8:2c:24:d8:53:cf:c0:3e:3a:
87:8c:53:f5:e3:d3:b8:67:72:96:3c:7a:00:da:2b:
56:14:9c:73:c7:e8:f9:e4:d3:74:1b:80:24:44:65:
87:fc:2e:c5:62:16:6d:5f:0e:a4:2c:82:72:0f:56:
45:b4:a9:2a:5b:57:eb:4e:0d:f6:f2:5c:bb:df:dc:
d1:1a:81:15:e8:0c:80:5b:1b:d8:72:3a:6c:f4:a1:
31:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:72:CB:CF:02:78:27:D8:B5:8A:6C:18:12:FC:97:44:27:05:96:D9
X509v3 Authority Key Identifier:
keyid:D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232342e302f32332d3234203d3e20323132383135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.173.224.0/23
Signature Algorithm: sha256WithRSAEncryption
16:5b:db:b0:10:f9:80:dc:f8:3c:1c:fa:42:42:f7:be:90:d8:
d9:74:3f:16:cb:f8:46:3e:77:84:4b:4a:ff:ac:3d:a5:b2:1c:
b2:1f:e1:8f:6f:59:80:08:02:ba:54:a6:99:78:f8:94:60:9a:
48:9a:41:5c:e0:97:c1:21:72:26:d5:9c:69:88:77:b4:a4:de:
79:20:0f:26:9b:39:9d:6c:6e:d1:84:76:e6:3f:c6:59:4a:c9:
0a:e9:35:7f:20:f6:76:b0:c3:a1:a5:68:60:2e:81:99:ee:29:
b2:1c:bd:a9:b8:da:92:70:eb:2b:f5:4e:c2:3e:65:76:41:08:
0c:6d:a6:d7:96:72:69:ff:ec:b6:a0:bf:19:96:15:8b:c4:d1:
1a:b4:34:09:55:fd:c2:e9:2b:4c:f8:3c:9e:55:15:3b:95:d5:
f5:1c:8f:fa:5b:af:9d:0d:42:bd:f5:a1:dc:ab:2f:27:31:69:
73:d1:a1:0a:07:79:69:69:ae:c0:a6:1f:13:43:03:2f:6f:9b:
9d:c9:9e:a6:59:18:2b:0b:5c:17:2d:6a:22:d5:dc:7f:ef:11:
b5:85:f2:eb:9d:04:68:d9:3b:48:e6:ce:d1:78:c3:e2:26:f8:
9c:fa:25:74:26:02:b7:6c:8f:3d:79:b2:a0:fb:ee:79:af:14:
d8:50:3f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:51 2024 by rpki-client on console-ams.rpki-client.org