Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/05E15C60051A11EBBEE8836FC4F9AE02.roa
File: 05E15C60051A11EBBEE8836FC4F9AE02.roa (raw, json)
Hash identifier: 8ihX8+mC9NEgriElnOc/Kdwj4SSfMdwRwHoIoaF+Lek=
Subject key identifier: DE:EF:6D:0B:5A:4D:62:40:C1:FE:34:04:47:0F:4C:52:8E:08:1A:6F
Certificate issuer: /CN=A91B3759/serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6
Certificate serial: 066C
Authority key identifier: 86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/05E15C60051A11EBBEE8836FC4F9AE02.roa
Signing time: Sat 30 Sep 2023 22:19:23 +0000
ROA not before: Sat 30 Sep 2023 22:19:22 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 55720
IP address blocks: 43.246.172.0/24 maxlen: 24
43.246.173.0/24 maxlen: 24
43.246.174.0/24 maxlen: 24
43.246.175.0/24 maxlen: 24
103.35.148.0/24 maxlen: 24
103.35.149.0/24 maxlen: 24
103.35.150.0/24 maxlen: 24
103.35.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 01:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1644 (0x66c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3759/serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6
Validity
Not Before: Sep 30 22:19:22 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=65189eea-12d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:ab:f8:50:d5:33:9f:25:94:e7:0b:ca:5f:
b9:d9:10:bc:13:20:d0:0f:7d:b9:43:97:b1:32:db:
76:8a:47:c5:46:ce:26:49:99:9d:05:f7:c6:4b:99:
6a:6f:b7:66:de:cf:1e:09:5d:23:47:87:70:94:05:
6c:36:a1:19:5d:2d:9c:de:dc:66:ba:43:bb:66:ab:
e7:df:d1:81:6a:b9:61:be:6a:87:e6:8d:cf:99:f9:
f8:c0:23:eb:b1:61:01:84:01:3b:fc:16:34:1a:35:
8a:a0:20:9b:9e:5a:ad:31:e1:a5:91:7f:26:ac:c7:
58:c3:32:e6:7e:81:93:d6:99:67:76:32:2f:14:1a:
9c:7b:d4:30:b0:fe:c7:ca:58:22:a3:84:70:f6:2d:
4c:fa:75:9c:70:18:b8:a3:96:0e:82:a6:8a:a4:0a:
20:df:ce:d1:c9:7a:90:8a:a4:1f:20:33:f3:fe:dd:
f2:1e:61:66:f5:a0:7e:bc:d0:ea:cb:81:6e:81:95:
3c:2a:48:09:1d:ce:d0:68:11:03:62:71:e2:26:de:
a5:6f:e0:f1:ca:7f:2b:7b:36:f6:79:87:a9:7e:eb:
5a:9c:5b:44:5e:f0:1b:cb:cb:57:b4:93:8b:c7:d8:
23:f7:92:15:8a:d2:2c:82:a9:46:e2:c7:e3:3e:47:
69:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EF:6D:0B:5A:4D:62:40:C1:FE:34:04:47:0F:4C:52:8E:08:1A:6F
X509v3 Authority Key Identifier:
keyid:86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/05E15C60051A11EBBEE8836FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.246.172.0/22
103.35.148.0/22
Signature Algorithm: sha256WithRSAEncryption
01:28:1c:73:45:a3:b1:5b:28:7c:b7:e0:b3:0f:aa:b3:73:35:
01:51:a1:5d:39:80:a6:8a:b9:39:d9:86:7c:54:ad:44:8a:97:
a1:d4:83:e7:5b:d1:cc:e7:b9:b7:91:82:da:47:5a:1a:02:ec:
d7:77:81:59:a0:a1:8e:ef:17:b5:b3:91:b7:bf:2e:52:d2:0e:
7f:23:d7:ed:9e:46:54:40:3e:d7:95:1e:8a:9e:2c:7e:fe:b7:
6d:0e:61:35:d4:aa:70:57:d7:8c:77:3d:34:8e:9b:07:92:f9:
8a:cf:9e:3f:fc:ff:dd:02:14:5c:d1:d7:b2:91:e9:a1:83:82:
0f:a5:f9:9f:ed:48:d6:f4:2a:65:19:41:34:fb:42:ef:d5:16:
4a:97:89:a7:22:20:d9:f7:e0:d5:ca:0b:70:cf:34:14:9a:84:
5c:ef:27:76:96:c1:2a:c2:aa:88:18:cb:47:87:48:70:f3:cc:
b1:8c:7e:54:ba:a0:fe:8e:a5:0e:cc:f0:0c:8e:21:b6:5b:01:
1d:8c:58:ba:b8:62:b0:ca:06:ef:c1:1e:18:83:79:10:35:66:
7e:fa:93:da:94:81:30:60:0d:05:cc:1d:83:29:40:9b:9e:be:
e7:3f:b2:a1:f9:79:0e:b3:8c:e3:94:2c:f1:c5:34:b5:77:5b:
04:fe:28:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org