Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/4411EC26826211ED98EB7733C4F9AE02.roa
File: 4411EC26826211ED98EB7733C4F9AE02.roa (raw, json)
Hash identifier: mF3jBF0LsOqnLaeyOZL40RRZYJ6e5rGGj3cwdCGsQk4=
Subject key identifier: D5:9D:68:03:02:72:43:AC:72:D7:62:07:19:16:B2:20:3D:74:0F:5A
Certificate issuer: /CN=A915D1A2/serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3
Certificate serial: 0ADD
Authority key identifier: 6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/4411EC26826211ED98EB7733C4F9AE02.roa
Signing time: Tue 16 May 2023 16:56:10 +0000
ROA not before: Tue 16 May 2023 16:56:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137530
IP address blocks: 103.112.56.0/24 maxlen: 24
103.112.57.0/24 maxlen: 24
103.112.58.0/23 maxlen: 23
103.112.58.0/24 maxlen: 24
103.112.59.0/24 maxlen: 24
2402:a540:56::/48 maxlen: 48
2402:a540:57::/48 maxlen: 48
2402:a540:58::/48 maxlen: 48
2402:a540:59::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 Feb 2024 07:59:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2781 (0xadd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D1A2/serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3
Validity
Not Before: May 16 16:56:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6463b5aa-07da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:50:58:e5:73:3f:36:ce:7d:78:74:a7:ae:
a6:eb:01:c4:de:ec:9b:ac:ed:28:38:88:52:fa:67:
84:b4:89:db:12:5d:71:62:13:58:41:78:df:02:7a:
83:a7:ee:4c:26:7f:56:11:1d:5c:c6:04:3b:6c:97:
25:8a:14:08:c2:db:bb:9c:19:fc:f6:de:ad:b5:21:
fe:43:d5:f3:b0:63:f0:29:d0:29:24:3c:08:f0:9d:
0d:a9:28:02:08:d9:a3:4a:cc:64:29:be:6b:42:dd:
73:b6:18:27:49:4c:2a:57:9b:e4:6d:af:7c:a0:1d:
be:8b:ba:16:90:73:47:3f:5e:a0:af:34:84:c8:5d:
7c:9c:f5:64:f0:ae:7d:aa:ef:8d:61:20:81:2b:c2:
98:6e:07:a3:c1:76:8b:66:34:d8:32:13:48:fd:22:
c7:ca:2f:37:f7:57:07:51:33:35:cd:56:2a:b0:a8:
de:61:74:db:1f:c1:2e:f6:f5:16:ce:a5:81:7f:2a:
c4:2e:8b:8e:ae:6a:ab:b8:a1:1e:e7:cc:0e:8a:d5:
29:13:e0:a4:1c:f0:35:9d:43:f4:4e:3d:6d:b9:49:
be:e3:29:cf:fe:49:1c:dd:6d:2d:d6:1f:b5:02:88:
5f:06:d3:53:68:3f:43:81:35:ac:58:29:01:4e:a8:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9D:68:03:02:72:43:AC:72:D7:62:07:19:16:B2:20:3D:74:0F:5A
X509v3 Authority Key Identifier:
keyid:6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/4411EC26826211ED98EB7733C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.56.0/22
IPv6:
2402:a540:56::-2402:a540:59:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
aa:2a:12:bf:73:4b:1a:45:70:13:07:3c:11:4c:2b:72:6a:1a:
fe:b6:06:a5:37:6c:17:c1:ca:79:18:07:86:f3:76:b1:6c:2c:
ec:22:35:e3:4d:e0:7e:ee:2c:26:c4:d1:e0:aa:b6:29:84:41:
39:f4:9e:bd:7d:39:da:c4:29:b9:eb:20:96:98:e8:7d:46:d4:
94:66:a8:55:74:47:ea:d3:48:d9:d4:e6:7b:85:e6:68:0b:99:
29:c5:b1:48:b4:a4:e8:c5:91:99:45:03:fc:b3:a4:2b:ca:f6:
6b:34:14:e2:21:a8:f9:21:0d:ef:18:ee:21:2c:d4:47:55:7e:
ac:b7:77:67:ff:76:a4:d6:d4:e0:bd:97:cd:ff:12:4f:14:52:
b1:3f:86:dc:d7:2d:f0:f7:0c:13:3b:6c:7e:0b:b8:ca:33:93:
97:78:d8:f5:6d:1b:6a:dc:df:9f:29:63:a4:64:6e:51:5b:d7:
90:10:3c:76:f2:a0:36:e6:d8:ec:e4:95:a5:39:3c:8d:e7:d4:
6f:01:63:f2:c4:e3:ce:96:b7:50:29:88:15:b4:47:16:8a:91:
c1:bd:6f:c6:81:71:ce:50:5f:bf:62:e6:f7:7f:c3:4e:fc:12:
be:b2:94:d9:04:c5:0e:60:ad:2e:24:53:ea:26:5d:b4:c9:53:
1c:a5:dc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-ams.rpki-client.org