Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/7CEF82123BD011ECBCB98F83C4F9AE02.roa
File: 7CEF82123BD011ECBCB98F83C4F9AE02.roa (raw, json)
Hash identifier: yTK6xsjADSJoG3FEkguF1yyNSNbFFfBdjMG/DMP1n/g=
Subject key identifier: DB:3E:D4:CC:F7:6A:A0:80:21:61:66:A3:B4:15:16:4E:66:4A:63:B4
Certificate issuer: /CN=A913C40D/serialNumber=8C3814723FC755E9A9BA1BC335664A519BBC1CEE
Certificate serial: 038B
Authority key identifier: 8C:38:14:72:3F:C7:55:E9:A9:BA:1B:C3:35:66:4A:51:9B:BC:1C:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/7CEF82123BD011ECBCB98F83C4F9AE02.roa
Signing time: Sat 09 Dec 2023 01:53:27 +0000
ROA not before: Sat 09 Dec 2023 01:53:27 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 40065
IP address blocks: 43.251.224.0/22 maxlen: 24
103.43.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jun 2024 11:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 907 (0x38b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C40D/serialNumber=8C3814723FC755E9A9BA1BC335664A519BBC1CEE
Validity
Not Before: Dec 9 01:53:27 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=6573c897-9849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:46:24:09:da:ee:a9:27:3c:3b:8c:c8:e0:6d:
eb:ac:66:4e:59:3c:88:74:99:48:0d:c0:4a:b6:50:
98:d0:20:57:8b:ff:b9:fe:9d:d5:66:ef:9e:9c:2d:
cb:35:d5:4e:95:59:db:46:10:4f:5f:e0:55:e1:3e:
0a:26:e3:02:48:bf:d7:4e:d8:68:3e:66:7e:48:79:
84:bc:2e:bd:92:56:da:f5:0b:a7:74:52:4d:43:f9:
69:e5:f5:53:9b:d9:e5:d0:d3:c4:c9:25:83:74:f5:
25:91:d4:78:6d:8c:a5:cb:e8:62:b0:23:1b:8f:9a:
ae:7e:5a:8c:1d:90:b6:e0:2b:f7:95:a3:42:a8:0a:
61:4f:c7:36:a6:3a:12:ad:9f:31:63:91:d6:a4:0f:
33:78:8f:41:a6:79:d9:a9:21:3f:30:0e:3d:d7:18:
64:f8:0e:41:29:46:5d:bb:3d:4d:b0:8e:a6:5a:64:
13:38:bb:5e:70:8d:8a:e1:75:a0:a6:bd:4e:24:89:
47:ac:f1:3a:06:0a:9e:71:6a:e7:33:52:33:ae:1f:
c1:aa:12:e8:4e:02:ec:8b:73:27:56:4a:37:25:eb:
e9:ad:5d:3b:8b:82:e9:01:94:61:de:0d:c3:17:2c:
0e:1f:3b:da:54:22:a9:5e:e2:39:4e:d1:43:f7:39:
47:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3E:D4:CC:F7:6A:A0:80:21:61:66:A3:B4:15:16:4E:66:4A:63:B4
X509v3 Authority Key Identifier:
keyid:8C:38:14:72:3F:C7:55:E9:A9:BA:1B:C3:35:66:4A:51:9B:BC:1C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/7CEF82123BD011ECBCB98F83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.224.0/22
103.43.8.0/22
Signature Algorithm: sha256WithRSAEncryption
04:e0:f0:cb:46:00:37:ab:7b:49:a6:e2:ec:03:87:e1:1a:08:
95:09:b2:12:4e:6a:1e:0c:f8:b8:a6:6f:3f:4b:0f:c6:ce:4f:
73:12:e7:19:80:29:4d:a0:55:0c:16:7c:f4:68:f8:39:3a:2c:
91:1a:ac:15:e0:80:78:f3:2b:c4:60:40:4d:ea:61:93:fc:b3:
37:e0:3e:e6:b1:be:d2:b9:1f:41:ca:7d:61:4c:84:90:7a:4f:
bc:c8:2d:0d:88:d1:a9:2e:f0:6d:af:3b:89:ae:6b:40:41:7b:
b7:cf:e7:9f:3b:d0:df:32:f4:f9:12:da:b4:13:b5:af:86:6a:
28:b1:f8:9a:29:0a:a9:dc:4a:8c:a4:1e:ea:96:f4:2b:3f:48:
7a:de:ac:79:52:aa:ff:90:6e:89:72:af:fd:55:eb:bd:72:60:
df:c1:63:e3:60:60:d0:35:c9:13:c8:1a:d1:f6:7e:f9:87:a9:
a0:3f:f0:33:f3:d2:b6:c5:f0:84:0d:ab:97:2f:60:20:dc:54:
89:d7:cf:37:1e:10:bf:e1:4e:33:5d:72:be:d0:7e:a6:f5:d3:
be:24:c4:d4:5d:95:60:0c:fb:1c:02:a3:c3:40:ef:69:46:21:
eb:ec:5d:4b:bc:f0:a9:1d:97:37:68:9c:59:6b:45:7f:f6:5f:
f2:b1:e5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 15:20:45 2024 by rpki-client on console-fra.rpki-client.org