Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/186CE7C2F30C11ED94750772C4F9AE02.roa
File: 186CE7C2F30C11ED94750772C4F9AE02.roa (raw, json)
Hash identifier: cvb1XBlIJzxYGmS3HKkodyUe1YnJZd2U6INIdjhM2bU=
Subject key identifier: E2:52:99:70:07:8E:D3:3A:22:CC:56:4F:89:56:EE:5C:52:27:F1:58
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 0488
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/186CE7C2F30C11ED94750772C4F9AE02.roa
Signing time: Mon 15 May 2023 10:34:39 +0000
ROA not before: Mon 15 May 2023 10:34:39 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 132422
IP address blocks: 43.229.152.0/24 maxlen: 24
103.228.64.0/24 maxlen: 24
150.107.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1160 (0x488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: May 15 10:34:39 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=64620abf-ed84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fc:2c:45:de:59:00:4f:9d:68:8d:af:fc:64:
e1:80:9f:d5:c3:67:e9:44:53:70:e8:07:e2:64:8f:
69:f1:89:f5:ad:93:bf:20:7e:fa:6d:9a:88:e0:09:
bc:bf:21:21:52:ce:1d:2e:65:0a:d6:ed:01:fd:9c:
2f:57:56:cb:87:d8:a0:62:8f:4e:0a:b9:48:1b:f7:
24:ca:d8:10:fc:bd:8e:5e:2b:27:22:41:24:b5:65:
8b:2c:ab:29:1f:10:60:07:11:2a:6a:0b:9b:91:4e:
9a:7e:d3:04:d9:40:dd:aa:35:92:17:fd:d5:2b:49:
25:cf:e0:61:ef:d1:d0:0f:d8:33:59:73:14:48:bc:
af:0c:ea:ec:25:74:b3:59:08:04:53:0c:fb:1d:eb:
9b:5c:02:52:d0:43:1b:62:6e:15:db:b4:c2:d8:df:
ee:de:a7:b1:a9:d5:cc:4a:5b:96:7b:6d:3c:36:a0:
6d:c6:d9:a9:27:76:76:a5:e1:ad:55:27:39:a8:fa:
35:58:78:43:65:62:16:92:93:aa:dc:c8:9d:26:23:
d2:47:89:f8:48:c9:5f:db:f1:24:1a:a2:40:18:eb:
3f:3d:84:53:dc:9c:24:b2:eb:40:93:18:a7:ef:0c:
fe:71:d0:e5:8b:1e:cd:e8:ae:a7:c4:52:76:0a:7f:
c3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:52:99:70:07:8E:D3:3A:22:CC:56:4F:89:56:EE:5C:52:27:F1:58
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/186CE7C2F30C11ED94750772C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.152.0/24
103.228.64.0/24
150.107.0.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:b6:5b:dc:f6:9a:b4:d4:25:d5:ac:58:3f:c9:af:61:bd:79:
67:2f:70:77:be:c1:fd:d5:a6:da:65:04:57:fd:17:35:7f:fd:
1b:9f:e6:57:34:5b:c0:46:45:5d:4f:86:d8:84:66:4f:65:bd:
d3:ab:9f:71:c8:96:f8:72:c2:00:1b:ad:5c:99:4a:9c:ae:4e:
b9:3d:a7:e7:7a:ad:83:79:ee:f4:c5:99:58:ab:04:f0:7f:67:
4f:0e:4d:4a:1b:23:2a:a6:94:c6:01:f4:8b:96:79:4d:27:5f:
91:33:92:72:b9:cc:e9:d3:43:be:f2:6d:b7:fd:29:49:bf:b2:
4e:39:d3:55:4f:61:cb:e8:10:0c:7b:56:75:94:29:7d:b0:70:
bb:1e:57:6e:ef:90:66:95:0f:cb:c0:af:09:df:d1:44:44:02:
78:d2:af:c7:17:40:ed:ff:b5:f2:81:d5:63:31:56:a4:c1:a5:
ba:36:ac:6f:7c:ec:01:3e:86:15:30:00:22:d6:21:31:06:14:
ea:d6:ae:9f:4e:29:6e:f3:fb:24:29:79:2a:c2:49:c4:b4:85:
fa:30:bf:43:69:3d:24:ec:b2:b2:d6:bb:3c:0e:27:7d:23:31:
36:a5:14:9e:71:2c:60:27:e5:1a:ef:4a:aa:f5:d6:0a:9c:fd:
a3:56:12:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 19 14:16:52 2023 by rpki-client on console-fra.rpki-client.org