Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/67861F5A605711EEB7853C12C4F9AE02.roa
File: 67861F5A605711EEB7853C12C4F9AE02.roa (raw, json)
Hash identifier: mq8OLelvURfc/aRGg92S10HohHZA050XkNNhqoMC9FQ=
Subject key identifier: 9D:51:C2:21:7B:11:3D:55:EE:2D:4C:11:50:DA:F1:6E:29:52:15:1E
Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E
Certificate serial: 110D
Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/67861F5A605711EEB7853C12C4F9AE02.roa
Signing time: Sun 01 Oct 2023 12:38:21 +0000
ROA not before: Sun 01 Oct 2023 12:38:21 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 137074
IP address blocks: 43.224.188.0/22 maxlen: 24
43.226.4.0/22 maxlen: 22
43.226.4.0/24 maxlen: 24
43.226.5.0/24 maxlen: 24
43.226.6.0/24 maxlen: 24
43.226.7.0/24 maxlen: 24
103.18.64.0/22 maxlen: 24
103.43.212.0/22 maxlen: 24
103.104.16.0/22 maxlen: 24
116.89.246.0/23 maxlen: 24
203.28.64.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4365 (0x110d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E
Validity
Not Before: Oct 1 12:38:21 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=6519683d-fb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:92:e0:94:4d:21:97:e1:97:71:5c:9d:72:fd:
d7:33:22:9a:71:a8:8d:8d:f7:53:11:7f:61:66:be:
61:c7:7d:64:b9:e9:0f:e4:e8:95:2b:8c:79:90:0f:
ca:0e:42:74:51:83:03:1b:3a:68:39:f1:5b:a0:2f:
41:e8:a1:77:d1:05:4d:13:b4:9b:c6:cd:6f:e6:e0:
d4:13:9d:db:a0:9c:1d:ee:fb:aa:6c:fb:10:f8:64:
68:bb:96:47:50:24:a0:08:1c:7d:8a:31:f8:98:d5:
d0:76:21:e0:92:70:5d:33:17:3f:1a:cb:7e:36:83:
6e:59:a4:05:07:d4:63:c3:c7:4e:f9:3c:54:fa:0f:
00:52:f6:69:b1:cb:31:bb:e5:25:e8:42:74:f8:30:
75:e9:76:b4:18:79:bb:aa:db:f4:2a:49:9e:bd:bf:
c4:e0:c5:07:60:57:03:e7:3d:6d:92:4a:e5:bf:66:
a4:f2:53:9b:5a:99:75:a9:49:9c:bd:1d:55:98:18:
e9:05:1d:79:79:c5:f2:38:9b:0a:11:36:5d:5b:33:
bf:2d:31:f1:44:bd:3e:70:8a:1c:2a:3a:80:b0:05:
5e:1b:62:0e:d1:0f:61:d6:83:ca:e9:5c:5e:86:be:
34:22:e7:04:2f:ca:63:66:be:2e:89:e4:b4:cb:c6:
1b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:51:C2:21:7B:11:3D:55:EE:2D:4C:11:50:DA:F1:6E:29:52:15:1E
X509v3 Authority Key Identifier:
keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/67861F5A605711EEB7853C12C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.188.0/22
43.226.4.0/22
103.18.64.0/22
103.43.212.0/22
103.104.16.0/22
116.89.246.0/23
203.28.64.0/22
Signature Algorithm: sha256WithRSAEncryption
93:ad:b6:33:4c:42:d0:36:1c:86:9f:94:eb:06:51:82:11:c9:
66:74:16:2c:6c:2b:ef:9a:e4:3c:08:43:8d:76:c4:43:f4:b2:
01:13:da:ec:97:f7:0f:d9:ad:ee:b0:3a:b6:d4:fa:a7:af:fc:
66:52:6f:1f:5e:f8:58:d0:82:23:0b:89:77:cc:58:aa:ea:5e:
fb:ff:d8:66:3d:bc:16:b4:9e:5c:11:f0:af:d2:94:89:5e:b3:
a0:25:4d:45:56:14:02:7c:38:8f:97:3b:ae:3b:b0:01:ff:b0:
39:8a:96:8c:77:d4:ad:fe:43:92:d0:94:f2:9f:c0:83:b4:4d:
7a:35:61:fe:86:60:da:6a:6d:a2:82:cb:b5:c5:29:05:89:8d:
ec:b1:66:66:ab:cc:4f:ee:47:3a:0e:df:d2:bb:b4:0e:5c:c1:
6c:30:b9:f4:28:79:e1:59:a7:38:16:4a:23:6d:3b:db:54:28:
ae:e8:b8:a8:31:e9:ce:93:82:f6:3e:28:60:8c:28:65:76:d4:
be:ba:87:f1:4a:ba:70:9c:3c:02:a2:cd:f6:c3:e0:41:4f:ac:
a7:02:f3:99:b1:dd:69:8b:d9:72:d0:19:da:a3:f9:c4:15:96:
76:ef:5e:71:62:ac:82:b1:9a:bb:29:a1:b1:91:6a:c0:c0:b2:
31:a2:83:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 13:48:45 2023 by rpki-client on console-ams.rpki-client.org