Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/FBC0FDE42A3111EFA2F4C557C4F9AE02.roa
File: FBC0FDE42A3111EFA2F4C557C4F9AE02.roa (raw, json)
Hash identifier: zxk1qCJ1YGTZdpyNa8Y6ozLFaFEKM11MmSY/ia4swQo=
Subject key identifier: F7:0A:67:C7:B7:EF:D9:16:C3:42:ED:AA:13:EF:BB:E2:0B:52:41:6A
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 0608
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/FBC0FDE42A3111EFA2F4C557C4F9AE02.roa
Signing time: Fri 14 Jun 2024 09:39:24 +0000
ROA not before: Fri 14 Jun 2024 09:39:24 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 64021
IP address blocks: 43.229.152.0/24 maxlen: 24
43.252.208.0/24 maxlen: 24
43.252.209.0/24 maxlen: 24
43.252.210.0/24 maxlen: 24
103.228.64.0/24 maxlen: 24
103.228.66.0/23 maxlen: 23
103.234.54.0/24 maxlen: 24
150.107.1.0/24 maxlen: 24
150.107.2.0/24 maxlen: 24
150.107.3.0/24 maxlen: 24
150.129.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jun 2024 09:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1544 (0x608)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Jun 14 09:39:24 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=666c0fcb-79da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d3:ff:11:d9:fe:75:e3:51:78:88:c7:e4:8b:
c1:d7:8b:67:f8:7b:79:d1:52:44:ec:d3:30:47:42:
58:cd:ec:31:1b:e6:d7:76:70:b9:6c:be:a6:8f:26:
bb:31:29:cc:1a:82:6f:a4:d0:bc:9b:04:23:fb:64:
3a:34:10:76:32:6f:55:31:ce:83:9e:cb:25:8b:0b:
ef:0d:52:b8:c6:ad:f3:61:94:db:9d:89:26:04:21:
67:15:d8:89:23:ef:56:08:16:b9:36:ef:45:9d:09:
f3:3c:7a:06:99:a2:55:f4:76:0e:19:0e:f9:b9:da:
42:1f:67:ba:87:22:11:8c:69:b2:c3:d3:8e:06:05:
e2:6b:82:4d:87:44:b8:cc:05:61:0e:44:22:a1:bf:
72:f2:3c:7b:4e:0d:f4:6c:24:f8:8b:e8:89:93:6e:
9f:18:b8:da:4e:96:fe:cb:02:65:ba:3c:d8:c8:9a:
0a:b2:b8:1d:5c:9d:00:95:96:c3:ae:79:3a:04:cf:
18:36:6c:d0:b4:41:a7:5a:14:7a:44:97:ec:60:eb:
d1:3f:8f:d4:99:d9:fb:b5:2d:10:c9:8f:7e:cd:01:
05:03:2e:f0:cb:ca:4d:21:e7:5d:b3:3e:e8:3f:1d:
83:a3:2c:97:78:ec:84:08:1f:c9:e7:38:40:a6:28:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0A:67:C7:B7:EF:D9:16:C3:42:ED:AA:13:EF:BB:E2:0B:52:41:6A
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/FBC0FDE42A3111EFA2F4C557C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.152.0/24
43.252.208.0-43.252.210.255
103.228.64.0/24
103.228.66.0/23
103.234.54.0/24
150.107.1.0-150.107.3.255
150.129.42.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c4:c7:7c:10:4b:d9:34:c5:5c:fa:26:3f:66:1c:8d:59:db:
da:b8:dc:ae:65:42:58:62:22:18:4e:62:3c:29:a4:d3:81:04:
e0:30:e2:b7:fc:3e:3c:11:38:75:50:57:34:c1:80:28:28:b4:
b7:03:aa:9d:65:9e:ff:f9:a9:d9:32:9f:05:43:11:44:e7:2c:
9b:18:77:13:d3:ff:2a:8f:3c:70:c3:1e:1d:09:ff:13:9e:39:
c5:28:9a:30:40:7e:ea:52:72:e9:5f:77:86:8c:12:72:ab:ed:
0b:14:be:03:71:89:e3:d2:25:38:2c:99:5e:1c:db:38:e4:5f:
83:d2:f3:d0:55:36:7e:65:d3:c2:9c:a6:d3:ba:14:00:cd:f7:
3a:8c:82:d3:a3:d1:d5:91:5e:50:9f:06:c3:9f:b8:36:d1:00:
6c:63:f1:2a:0d:39:03:2c:c0:ac:60:0f:b1:a0:ec:ff:43:40:
9a:3f:cb:24:92:69:93:59:36:a8:5b:14:63:14:0d:a5:e6:6e:
89:7b:ea:16:7f:1c:02:79:e1:ff:ae:3a:d2:00:41:14:75:06:
e9:4e:57:d0:29:0d:24:5f:6a:34:1b:d7:a7:ca:02:65:fe:86:
8e:da:24:c4:aa:91:8c:06:8d:fc:6c:33:c3:13:9d:c9:20:80:
6a:46:a7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 13:45:59 2024 by rpki-client on console-ams.rpki-client.org