Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/B391A3F23BCD11EC8086E031C4F9AE02.roa
File: B391A3F23BCD11EC8086E031C4F9AE02.roa (raw, json)
Hash identifier: eijpIPyP9ZdUj6P1zsJbVTN+Bw+a41pYS+QIEENyM+U=
Subject key identifier: 3E:54:D6:D2:8F:A3:1F:CE:2A:BA:65:FF:DC:D4:E2:75:DF:AF:9E:54
Certificate issuer: /CN=A91AD0B2/serialNumber=44BA569BFD2EC816B069734513E0BBF2D34EB707
Certificate serial: 0475
Authority key identifier: 44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/B391A3F23BCD11EC8086E031C4F9AE02.roa
Signing time: Wed 13 Sep 2023 00:42:13 +0000
ROA not before: Wed 13 Sep 2023 00:42:13 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 40065
IP address blocks: 43.242.200.0/22 maxlen: 22
103.38.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 03:08:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1141 (0x475)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD0B2/serialNumber=44BA569BFD2EC816B069734513E0BBF2D34EB707
Validity
Not Before: Sep 13 00:42:13 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=65010565-da90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:f3:f2:57:f6:b8:d4:a0:b3:41:20:36:c7:
a7:71:7b:f4:30:c6:3e:14:b9:33:81:d8:d4:0a:08:
29:6c:be:d9:41:87:73:1e:9c:3f:c8:36:99:35:1d:
c9:0a:1d:07:70:74:d0:fd:3c:57:58:10:b9:9c:60:
2e:27:cf:e4:48:df:52:5c:05:bd:62:08:08:76:f2:
81:bb:77:3a:69:04:48:f2:af:68:61:62:a5:0f:51:
69:8e:7c:58:29:24:79:04:bd:c9:53:00:fa:ec:20:
0b:e1:7a:76:80:75:68:25:98:f8:b7:51:b7:61:f5:
d3:5e:60:46:17:ea:56:2d:72:9b:c5:17:b9:1d:b7:
7e:4e:9a:e4:f0:98:ea:e2:b9:56:62:98:f5:8b:06:
b5:0b:96:35:dd:9d:28:ff:1b:bc:b9:cc:73:98:e5:
c2:3c:39:29:eb:ff:5f:25:b5:39:ba:1f:f6:dc:95:
a8:4a:09:90:7d:40:00:41:49:31:96:98:78:3f:60:
72:23:b4:b2:11:5b:47:3a:f1:40:12:4a:6d:6d:b1:
fe:31:66:b2:5f:9c:f0:ec:ef:9a:e8:f1:15:d1:18:
ca:5e:76:44:bf:ed:32:e1:f3:bd:10:eb:75:d3:19:
69:28:34:bc:6e:eb:50:6b:1d:24:8c:63:19:28:d2:
0f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:54:D6:D2:8F:A3:1F:CE:2A:BA:65:FF:DC:D4:E2:75:DF:AF:9E:54
X509v3 Authority Key Identifier:
keyid:44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/B391A3F23BCD11EC8086E031C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.242.200.0/22
103.38.80.0/22
Signature Algorithm: sha256WithRSAEncryption
37:4e:ed:cc:4d:d1:27:d1:35:80:d1:71:e2:47:b0:0d:8c:f2:
30:b4:34:9a:1f:0e:31:4e:f3:0b:f5:8c:ec:35:e8:98:e6:4f:
69:f1:25:34:0c:c2:5b:2b:b8:96:80:d0:d8:34:64:ae:3a:04:
10:54:06:01:e1:ae:f4:34:71:f3:04:81:81:24:61:d0:af:63:
65:73:db:04:b5:21:13:23:d9:ed:c4:4c:8b:2e:25:e8:12:aa:
f3:2c:19:ff:74:b8:b0:23:fc:1d:85:20:4d:66:25:58:84:60:
92:8d:ea:34:d8:9b:d3:f4:ca:d9:a2:57:54:44:48:22:26:65:
72:23:ad:4e:70:de:e0:fa:3f:69:3c:d5:27:7b:3e:7d:b1:36:
ce:2a:65:48:5c:31:0c:67:98:c1:0c:fa:be:ef:d0:d9:80:8c:
91:0f:3e:af:b3:e1:ed:0a:e7:02:06:f5:97:6c:11:16:4e:b1:
c8:f6:7b:ea:be:3c:7b:ab:67:73:12:2e:b1:c7:63:0c:37:a4:
c0:de:1f:b0:b7:4a:2c:20:f1:96:da:7d:a4:22:63:d6:25:0c:
46:6b:75:30:b2:b3:a2:79:76:11:00:7d:ac:2c:a4:58:89:45:
e6:f9:53:eb:44:55:97:a9:1c:a2:96:de:62:11:46:08:c9:98:
d0:97:e0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:37 2024 by rpki-client on console-fra.rpki-client.org