Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/12027E54ECDD11EDBF51302FC4F9AE02.roa
File: 12027E54ECDD11EDBF51302FC4F9AE02.roa (raw, json)
Hash identifier: XWLyV6JuZ0eFwCUztFttfVD7AlYGtcnk8D7gsBv+gMg=
Subject key identifier: FF:94:77:CE:94:44:F2:C8:42:FD:D4:01:66:4A:08:19:32:0C:F8:56
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 047F
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/12027E54ECDD11EDBF51302FC4F9AE02.roa
Signing time: Sun 07 May 2023 13:42:55 +0000
ROA not before: Sun 07 May 2023 13:42:55 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 64021
IP address blocks: 43.229.152.0/24 maxlen: 24
103.48.169.0/24 maxlen: 24
103.228.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1151 (0x47f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: May 7 13:42:55 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=6457aadf-9f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:92:b4:74:01:4a:6d:bc:eb:98:90:3b:8a:
82:07:21:b7:3a:5c:de:86:d7:7d:a5:9c:70:33:1e:
f6:0e:60:14:2c:11:be:ab:8b:6c:d5:11:cb:90:5f:
d3:b1:24:b7:3a:00:60:5a:7f:78:58:b1:b1:8c:94:
ff:6a:36:66:99:6d:36:e4:45:ba:95:8e:4c:d5:64:
8c:09:1a:e0:95:66:c9:fd:7e:33:25:1f:0c:cf:6d:
7f:21:4d:dd:29:ac:89:17:cc:7e:34:06:27:ae:25:
89:d1:17:e0:a9:a0:bb:97:7a:26:6a:c5:66:9f:3e:
64:b5:09:fc:9b:59:bd:38:5d:4b:01:2b:ca:cc:9f:
11:39:61:3f:43:6f:91:f3:d6:60:bd:f0:16:66:86:
7c:86:c6:c8:e5:c6:f5:e0:fc:bb:07:be:89:b7:df:
ce:13:8c:59:bb:6d:0c:a2:9e:98:c4:ea:92:70:9d:
c5:0a:99:e1:30:dd:45:e5:b3:23:fd:43:19:b0:aa:
ad:52:3e:99:38:8e:f1:48:80:73:b7:38:91:de:f3:
4f:16:40:5f:11:40:8b:4b:0e:7c:c4:6e:ce:7f:e0:
3f:8d:d9:36:f5:61:56:f5:af:ed:5a:52:75:39:ae:
e0:6a:e8:1c:fb:3c:d4:96:94:87:7a:9f:76:be:06:
f9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:94:77:CE:94:44:F2:C8:42:FD:D4:01:66:4A:08:19:32:0C:F8:56
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/12027E54ECDD11EDBF51302FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.152.0/24
103.48.169.0/24
103.228.64.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a3:9b:ce:cd:33:63:6e:df:1a:3a:12:24:39:9e:b2:de:91:
73:7e:fe:e7:ff:5f:a3:ed:69:00:39:fd:5b:74:b2:51:c9:d3:
67:f0:b4:fc:dc:59:7a:16:b2:21:b4:ee:40:4c:93:4a:52:a1:
05:17:07:7b:26:6f:da:00:3c:ef:db:bb:88:5d:04:21:66:97:
3e:2a:ad:33:57:b1:62:01:00:b2:3c:7c:1f:d8:a5:fa:9a:df:
47:c8:af:2a:ad:cb:be:9e:f8:34:09:b5:c2:e5:14:39:f2:59:
d8:55:6f:b9:c6:71:cd:50:ae:72:95:c9:0e:4c:c8:51:01:39:
f4:86:0b:5a:1e:26:e7:ce:8a:9b:f6:70:32:6c:45:3e:e1:ec:
77:68:f2:f9:fa:fd:47:05:7b:8c:83:63:33:ad:fc:64:cc:b3:
4f:fe:de:c0:6e:f9:12:64:91:ce:36:11:ae:c6:77:d1:fe:51:
5f:4a:9b:c7:77:5a:23:b5:77:48:63:6b:31:e1:3a:64:11:2a:
87:5d:5e:21:ba:f3:ea:45:a5:18:c2:f6:13:82:42:e7:13:c5:
ca:1b:0b:1f:a1:69:21:44:d7:2b:cb:9c:98:ef:11:6d:53:49:
75:66:08:6e:f2:be:f1:df:27:0b:69:bd:2d:08:61:0c:b1:c2:
14:8d:b2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-ams.rpki-client.org