Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/432CF230A19F11E99F9D5A17C4F9AE02.roa
File: 432CF230A19F11E99F9D5A17C4F9AE02.roa (raw, json)
Hash identifier: NeJvoi4S7FKlAQjctPW+04P5P6b9NrBNuuMUD3jAz60=
Subject key identifier: 99:08:95:86:BE:ED:A2:71:57:70:4E:68:13:2E:68:89:71:78:A1:DC
Certificate issuer: /CN=A9167D07/serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26
Certificate serial: 14B5
Authority key identifier: 03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/432CF230A19F11E99F9D5A17C4F9AE02.roa
Signing time: Wed 14 Jun 2023 18:16:32 +0000
ROA not before: Wed 14 Jun 2023 18:16:32 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 55427
IP address blocks: 43.245.92.0/22 maxlen: 22
43.245.92.0/23 maxlen: 23
43.245.92.0/24 maxlen: 24
43.245.93.0/24 maxlen: 24
43.245.94.0/23 maxlen: 23
43.245.94.0/24 maxlen: 24
43.245.95.0/24 maxlen: 24
103.232.228.0/22 maxlen: 22
103.232.228.0/24 maxlen: 24
103.232.229.0/24 maxlen: 24
103.232.230.0/24 maxlen: 24
103.232.231.0/24 maxlen: 24
182.50.64.0/22 maxlen: 22
182.50.64.0/24 maxlen: 24
182.50.65.0/24 maxlen: 24
182.50.66.0/24 maxlen: 24
182.50.67.0/24 maxlen: 24
2402:a300::/32 maxlen: 32
2402:a300:3e6::/48 maxlen: 48
2402:a300:3e7::/48 maxlen: 48
2402:a300:3e8::/48 maxlen: 48
2402:a300:13e6::/48 maxlen: 48
2402:a300:13e7::/48 maxlen: 48
2402:a300:13e8::/48 maxlen: 48
2402:a300:23e8::/48 maxlen: 48
2402:a300:4000::/36 maxlen: 36
2402:a300:4005::/48 maxlen: 48
2402:a300:8000::/36 maxlen: 36
2402:a300:8005::/48 maxlen: 48
2402:a300:800a::/48 maxlen: 48
2402:a300:c000::/36 maxlen: 36
2402:a300:c005::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 11 Feb 2024 11:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5301 (0x14b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167D07/serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26
Validity
Not Before: Jun 14 18:16:32 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=648a0400-84f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:84:14:b6:2e:17:74:27:40:2d:20:0c:94:
b3:58:cb:0b:1a:ad:14:b2:11:87:af:60:e1:51:91:
d6:70:11:e5:7b:c4:95:a1:62:45:6d:33:21:34:6a:
30:ef:78:9c:24:e3:dd:86:65:9c:2d:25:e0:11:8a:
8f:91:9b:53:70:eb:ac:a5:4f:08:b4:89:34:e1:b5:
6e:39:68:94:97:20:7f:34:5c:fe:01:cd:02:9e:f1:
b8:8c:54:de:c6:ec:36:39:0f:75:7b:7f:66:05:9b:
ff:ba:4c:d2:45:27:34:21:51:c8:7c:3c:63:4d:1a:
9a:68:84:6b:98:fb:c9:30:e4:11:b1:53:80:84:1c:
1f:9b:cc:95:5f:06:6d:98:da:e4:4b:60:b7:d5:d0:
bb:6f:8c:96:c6:0b:f7:01:01:23:2a:45:8b:92:7f:
e4:54:6a:ff:60:d5:6d:ea:1e:f7:2a:0f:e5:81:c2:
ee:da:92:3d:d9:94:c7:59:88:2a:cd:ae:d9:80:2d:
76:85:68:e8:39:0b:12:a8:d3:97:8f:d7:ca:92:1b:
2b:9c:62:a1:22:0d:7f:e9:98:5e:8d:b6:92:87:79:
19:c2:fb:8b:c8:50:80:a8:bb:29:2d:d7:e1:a4:68:
41:5f:24:81:5f:75:60:e7:26:db:ca:74:1b:1b:3d:
6a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:08:95:86:BE:ED:A2:71:57:70:4E:68:13:2E:68:89:71:78:A1:DC
X509v3 Authority Key Identifier:
keyid:03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/432CF230A19F11E99F9D5A17C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.92.0/22
103.232.228.0/22
182.50.64.0/22
IPv6:
2402:a300::/32
Signature Algorithm: sha256WithRSAEncryption
79:78:3d:47:84:6b:d6:ce:7f:83:b9:4a:75:26:a8:d1:ea:62:
06:dc:21:42:0b:32:88:10:6a:9f:92:5f:82:cf:29:85:6e:e7:
ee:df:4b:31:4a:7f:ce:9d:3f:6c:39:12:9f:0d:84:5d:91:82:
d6:82:e4:47:15:6b:7d:ad:ae:9b:cb:a0:06:68:76:a0:7d:2a:
d3:2d:85:ee:f9:5f:01:e6:e2:59:f0:fc:93:29:43:68:f4:b2:
f0:af:14:0f:59:7c:d0:91:9a:0f:bd:d5:9d:47:79:0c:3c:c7:
9b:3b:9b:14:f5:c0:24:30:e7:e5:8f:6e:04:9e:bb:9b:b3:55:
b7:e6:de:f8:68:ff:59:00:11:a0:6e:6c:75:5f:42:ff:67:90:
f3:7e:fe:74:b8:3d:eb:94:14:27:06:5c:68:fe:d5:2b:33:62:
86:32:ff:75:91:0a:36:8f:73:e9:10:05:ee:87:f3:20:9e:f7:
20:4a:1a:f6:25:9a:48:b9:cd:9c:e0:d1:0b:07:bf:6e:04:a2:
71:01:94:ca:90:69:8d:88:9d:1e:ab:26:a4:74:fb:5d:6b:e6:
1f:cd:ec:04:5b:4a:27:30:fd:71:0b:cc:dc:bc:ae:e4:58:69:
c1:30:05:99:14:48:7b:f1:a9:1c:0e:b8:6c:5a:7c:73:3b:28:
c8:93:ba:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 11 14:15:29 2024 by rpki-client on console-fra.rpki-client.org