Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/7D2A9ADE671F11ED91297D0EC4F9AE02.roa
File: 7D2A9ADE671F11ED91297D0EC4F9AE02.roa (raw, json)
Hash identifier: ARJGDOFNDBaPW+WlIJwRM4FvjXF53QF9LQcKMzbxvBA=
Subject key identifier: CF:03:EB:4F:C7:7B:51:FB:66:F7:D4:ED:E4:CA:A5:CE:63:8F:A5:2B
Certificate issuer: /CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C
Certificate serial: 33BE
Authority key identifier: 0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/7D2A9ADE671F11ED91297D0EC4F9AE02.roa
Signing time: Wed 10 Jan 2024 15:10:52 +0000
ROA not before: Wed 10 Jan 2024 15:10:52 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 9304
IP address blocks: 103.247.231.0/24 maxlen: 24
112.137.16.0/24 maxlen: 24
114.134.80.0/21 maxlen: 21
114.134.80.0/24 maxlen: 24
114.134.81.0/24 maxlen: 24
114.134.82.0/23 maxlen: 23
114.134.82.0/24 maxlen: 24
114.134.84.0/24 maxlen: 24
114.134.86.0/24 maxlen: 24
175.100.192.0/20 maxlen: 20
175.100.192.0/24 maxlen: 24
175.100.193.0/24 maxlen: 24
175.100.194.0/24 maxlen: 24
175.100.195.0/24 maxlen: 24
175.100.196.0/24 maxlen: 24
175.100.197.0/24 maxlen: 24
175.100.198.0/24 maxlen: 24
175.100.199.0/24 maxlen: 24
175.100.200.0/24 maxlen: 24
175.100.206.0/24 maxlen: 24
2403:5000::/32 maxlen: 32
2403:5000:165::/48 maxlen: 48
2403:5000:171::/48 maxlen: 48
2403:5000:188::/48 maxlen: 48
2403:5000:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 29 Jan 2024 09:05:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13246 (0x33be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C
Validity
Not Before: Jan 10 15:10:52 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=659eb37b-bff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:90:10:32:d6:d4:9f:4e:df:e4:a7:09:a0:c2:
c1:07:7f:97:1a:8d:fc:91:6e:55:ff:56:c1:38:a9:
e4:f1:b7:e2:ef:73:c7:51:c4:22:45:f8:f4:6c:95:
99:e3:9f:56:d3:e1:44:86:ec:d1:1c:53:a6:a1:22:
a4:e2:fd:aa:4f:eb:31:c1:7c:7c:7b:9a:55:a3:0a:
4b:7b:84:2e:6b:e9:7d:64:91:e6:fb:fb:28:4c:22:
a5:c5:c4:b1:f6:2c:73:5d:1c:33:00:61:8b:24:ff:
f8:c8:bf:04:ca:73:79:4d:06:07:60:61:8f:bb:c6:
26:0b:76:1a:0a:77:58:00:6b:5d:81:5a:f0:53:95:
51:6b:80:57:12:99:74:95:c3:ca:c0:a9:90:87:ad:
0b:33:f4:8d:23:e5:d1:89:75:2d:c5:92:6b:92:64:
54:ef:55:e2:3b:7d:98:e3:ff:8d:3d:e6:1c:b8:80:
31:ce:04:0a:45:da:a1:2f:11:cc:ec:3a:90:44:23:
56:21:cd:57:fc:13:23:0f:03:53:ae:f9:2c:f5:c5:
c4:59:bb:d4:ad:42:fc:f8:33:88:53:66:e7:9f:a9:
99:3e:9b:00:3c:31:36:50:ee:6a:a5:0c:1f:15:0c:
1e:7e:18:10:7e:1d:46:a8:8f:89:17:b0:a4:98:e6:
c3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:03:EB:4F:C7:7B:51:FB:66:F7:D4:ED:E4:CA:A5:CE:63:8F:A5:2B
X509v3 Authority Key Identifier:
keyid:0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/7D2A9ADE671F11ED91297D0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.247.231.0/24
112.137.16.0/24
114.134.80.0/21
175.100.192.0/20
IPv6:
2403:5000::/32
Signature Algorithm: sha256WithRSAEncryption
8f:3f:41:17:70:d8:f5:c9:7e:fd:a0:1c:db:9f:b3:59:38:54:
9c:6f:e7:4c:ec:da:07:f9:33:7b:0e:64:a7:f3:b3:a5:81:e9:
bd:77:e9:7f:52:30:f6:86:89:3c:42:4e:ef:2b:f1:d3:a9:a6:
59:c4:9a:2c:af:75:68:dc:19:83:74:d9:9e:b7:6b:b3:b5:1c:
d0:8b:7b:5e:56:23:c3:fb:48:42:0d:6a:94:10:40:27:0a:b8:
46:1f:06:bd:d1:7a:f8:4c:3e:f3:7e:99:57:10:95:98:e6:fa:
df:9d:8b:ab:a5:2a:fd:b9:d9:cd:05:ba:65:e7:24:9f:1f:15:
8b:96:51:20:00:01:3f:12:b0:8d:f2:a6:11:a7:2c:46:fd:fd:
e6:51:58:2d:84:c2:41:ef:4c:5c:52:c7:6e:87:65:45:de:30:
be:64:f9:f4:fc:a2:2c:94:a5:bd:2c:5f:2f:8f:0e:e6:c7:14:
a5:0f:bc:96:fb:8e:1d:3d:3f:56:24:48:1d:b3:a5:6d:2b:b2:
33:00:1e:2c:aa:67:53:94:91:1d:9c:6d:49:9c:43:f5:e3:6f:
69:0c:83:e3:80:93:b5:a5:ac:fe:c8:06:53:b1:65:f0:fa:2d:
99:b5:74:7d:b9:b7:a3:14:72:59:ee:aa:d9:bd:5e:83:89:8a:
00:d9:77:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org