Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/0244EB80254C11EEAC7F9713C4F9AE02.roa
File: 0244EB80254C11EEAC7F9713C4F9AE02.roa (raw, json)
Hash identifier: JZqQnxb+aiMDBBKhHZ4eDERYqB/3X2iwTxdvCw2rPqc=
Subject key identifier: 54:B4:0B:1C:0A:7F:B4:F0:D9:32:0E:4B:2A:4E:FD:BB:FA:9E:D1:B7
Certificate issuer: /CN=A914CCD1/serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E
Certificate serial: 04D5
Authority key identifier: A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/0244EB80254C11EEAC7F9713C4F9AE02.roa
Signing time: Thu 28 Dec 2023 05:12:19 +0000
ROA not before: Thu 28 Dec 2023 05:12:19 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 139922
IP address blocks: 103.147.62.0/23 maxlen: 24
2405:acc0::/32 maxlen: 32
2405:acc0::/48 maxlen: 48
2405:acc0:1::/48 maxlen: 48
2405:acc0:169::/48 maxlen: 48
2405:acc0:1000::/40 maxlen: 40
2405:acc0:1100::/40 maxlen: 40
2405:acc0:1200::/48 maxlen: 48
2405:acc0:1204::/48 maxlen: 48
2405:acc0:1205::/48 maxlen: 48
2405:acc0:1206::/48 maxlen: 48
2405:acc0:1207::/48 maxlen: 48
2405:acc0:1210::/48 maxlen: 48
2405:acc0:1300::/48 maxlen: 48
2405:acc0:1304::/48 maxlen: 48
2405:acc0:1305::/48 maxlen: 48
2405:acc0:1306::/48 maxlen: 48
2405:acc0:1307::/48 maxlen: 48
2405:acc0:1310::/48 maxlen: 48
2405:acc0:1400::/48 maxlen: 48
2405:acc0:1410::/48 maxlen: 48
2405:acc0:f111::/48 maxlen: 48
2405:acc0:f222::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 14 Jan 2024 08:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1237 (0x4d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CCD1/serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E
Validity
Not Before: Dec 28 05:12:19 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=658d03b3-def0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bf:cb:65:7a:6c:94:96:4f:3b:fb:5c:9a:82:
8b:2b:a6:9d:08:25:88:cf:27:f8:03:4f:a1:cf:aa:
b4:57:69:48:be:49:04:1e:5f:bc:18:93:a3:af:5d:
f0:5e:49:15:59:79:cd:4c:96:8b:c3:39:55:86:bc:
0d:b4:30:be:f7:04:70:53:a3:ea:8a:51:ba:67:d8:
5f:ee:a7:9b:f8:17:50:2c:f0:92:a7:6f:fd:fb:4d:
fe:d7:ac:43:bb:d1:cd:d3:c2:1e:e7:4f:38:f7:1b:
1e:79:4b:e3:76:c7:4b:79:72:29:b4:61:5b:35:f0:
4b:a0:b2:bd:b5:25:67:c3:96:5d:bc:3b:d8:cd:1e:
f3:3a:c8:b9:54:e3:93:ea:6c:f8:af:04:36:29:ad:
39:1e:ad:4a:5a:81:0a:c3:6a:dc:04:eb:96:ab:d8:
5e:4a:12:f0:aa:71:a9:2a:47:db:61:b9:ab:bd:3b:
c4:29:aa:a0:b5:1f:f3:17:b5:29:9e:47:14:8c:fa:
0a:fd:8c:96:1c:92:f2:3c:cb:e5:04:bc:ca:f0:1e:
8a:94:46:da:9e:24:9e:d6:cf:58:42:6b:0f:0d:e5:
34:84:0e:ad:d8:c8:58:11:48:77:8d:a1:ca:c7:18:
f4:52:b2:74:82:00:7a:23:22:a0:b1:7d:e7:09:e6:
a4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B4:0B:1C:0A:7F:B4:F0:D9:32:0E:4B:2A:4E:FD:BB:FA:9E:D1:B7
X509v3 Authority Key Identifier:
keyid:A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/0244EB80254C11EEAC7F9713C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.147.62.0/23
IPv6:
2405:acc0::/32
Signature Algorithm: sha256WithRSAEncryption
bf:07:e4:52:06:ce:93:29:e9:de:e7:88:91:35:bf:d8:f1:fd:
14:75:e0:9d:51:c8:4f:64:a8:19:3e:c5:53:73:e8:bc:e1:e9:
87:9d:16:56:ff:3a:a1:42:c4:60:b3:5b:34:9f:24:90:e3:cb:
86:82:59:43:85:da:c4:12:eb:3f:04:74:15:b2:46:0c:e8:b1:
18:f8:05:d7:6a:32:2c:77:0f:8a:15:fe:41:cf:d1:35:32:05:
18:ee:35:e7:31:79:e2:6a:20:fd:35:0a:e4:9b:3f:75:20:72:
1b:c3:2d:2f:27:d9:56:8a:da:f7:d1:71:94:17:19:4d:03:e0:
10:bc:08:b5:fe:e3:37:64:a5:27:91:54:e4:9e:17:75:a7:a0:
f0:14:e1:b8:b3:7f:4c:c1:14:d5:22:30:9e:22:f1:86:a9:1b:
fe:d5:d5:e3:ac:e0:a8:32:c8:fc:dc:75:6b:7c:43:3b:4a:d8:
94:d0:65:58:6e:a3:cd:c3:3f:eb:78:17:04:e2:d9:ff:f9:8b:
b2:09:7c:1e:86:9c:60:1e:9c:0b:b7:68:03:ca:c0:2d:35:64:
21:be:8b:a4:a3:86:7f:e9:3b:43:3d:fb:73:7c:8d:16:c1:43:
2f:3d:fa:15:0d:72:30:07:3c:27:35:fb:77:8c:9e:06:3a:4e:
63:77:de:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 14 11:36:23 2024 by rpki-client on console-fra.rpki-client.org