Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/623146E4106811EFA467B42FC4F9AE02.roa
File: 623146E4106811EFA467B42FC4F9AE02.roa (raw, json)
Hash identifier: kbA5rrACFvqrrt+YDdctJqpjhbqA9OirjYFmUg1LsnM=
Subject key identifier: 99:9E:16:E6:0E:0A:76:96:2A:47:51:E0:74:78:C6:07:B6:F0:37:6D
Certificate issuer: /CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
Certificate serial: 0BE6
Authority key identifier: 54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/623146E4106811EFA467B42FC4F9AE02.roa
Signing time: Mon 13 May 2024 10:20:36 +0000
ROA not before: Mon 13 May 2024 10:20:36 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 43260
IP address blocks: 59.152.60.0/24 maxlen: 24
59.152.61.0/24 maxlen: 24
59.152.62.0/24 maxlen: 24
59.152.63.0/24 maxlen: 24
103.205.180.0/24 maxlen: 24
103.205.181.0/24 maxlen: 24
103.205.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 May 2024 06:56:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3046 (0xbe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
Validity
Not Before: May 13 10:20:36 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6641e974-da8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ae:9e:ea:d6:43:77:56:06:93:1c:8d:93:82:
23:ac:49:dd:75:fe:33:06:9a:d5:fd:09:89:37:a9:
11:80:da:89:74:24:a9:6f:45:39:06:46:bd:03:2a:
9c:5d:46:a7:21:8c:e2:36:9d:48:1b:e4:6c:0a:88:
f5:3f:87:2a:da:7c:4b:90:ac:2d:3b:67:37:eb:80:
53:9f:63:5f:b3:15:51:ea:88:45:c8:42:ac:49:f8:
7f:69:68:ad:c9:20:bd:31:b5:da:a2:71:7b:58:56:
ff:ec:f9:16:69:04:fe:d7:3a:35:4a:9d:56:a9:ab:
b1:ec:1a:25:5b:24:d9:04:8f:91:ba:c8:0b:af:88:
a0:0a:5c:16:48:24:64:b6:05:c4:ed:89:6c:d8:f4:
3c:f8:db:27:85:07:92:dd:6f:2b:f8:38:69:eb:f5:
b7:8b:5e:59:c0:f1:2b:cd:2c:cc:d8:79:4b:92:e8:
ea:26:8a:6e:c8:e4:87:f0:0e:f3:86:4e:54:ff:0e:
79:81:de:ec:34:cd:de:3d:88:21:b7:d3:af:bc:56:
c3:3a:86:9f:44:a9:85:50:35:0b:91:a7:24:fe:ef:
3b:b3:e6:a2:77:cd:b2:49:d8:43:12:dd:94:f5:26:
0e:1c:74:b4:ef:63:72:7f:9e:65:f0:67:de:ed:76:
20:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9E:16:E6:0E:0A:76:96:2A:47:51:E0:74:78:C6:07:B6:F0:37:6D
X509v3 Authority Key Identifier:
keyid:54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/623146E4106811EFA467B42FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.152.60.0/22
103.205.180.0/23
103.205.183.0/24
Signature Algorithm: sha256WithRSAEncryption
65:0c:10:73:d4:ad:f7:4f:a6:ba:ff:36:be:45:de:b9:e8:c0:
24:23:1a:ac:34:03:d5:14:63:96:53:af:7e:0b:81:89:8a:51:
d8:de:c7:be:35:c2:74:0a:b3:51:15:58:eb:b5:cd:ad:b7:c7:
f1:9d:ba:f7:7a:5f:c1:90:50:4b:32:89:bd:66:59:9c:7e:b2:
17:96:6f:af:3b:4a:af:5d:2c:47:f5:56:04:80:e9:3c:83:22:
88:86:52:4a:08:5b:b2:81:cb:cc:ad:51:59:c7:8a:c9:e7:49:
f1:62:f4:f0:59:f5:75:ac:fe:43:6e:b9:fb:c3:5e:1c:4b:78:
d2:e1:88:d5:31:bf:cc:18:67:69:2d:9b:df:f7:df:9b:8b:97:
8e:7e:0b:d8:92:73:80:b1:c3:cd:a6:84:76:28:31:09:18:11:
50:1c:6b:9d:aa:16:48:c6:20:cb:e2:6c:a1:a4:e9:a7:b9:ec:
36:ee:7b:cf:3a:4c:34:d1:cd:d6:ed:bc:86:13:d8:38:7a:55:
ad:0c:d7:b2:07:56:38:44:cb:aa:f9:ea:ca:dc:7d:e2:25:4f:
67:70:2f:14:50:b9:4f:bd:e6:77:e7:86:a9:a6:31:f9:8a:06:
da:74:14:b9:c3:92:57:59:6c:a0:f9:6b:64:b0:5f:c7:c6:2e:
64:3b:be:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:41 2024 by rpki-client on console-fra.rpki-client.org