Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/60956A945A1511EF8A6DA460C4F9AE02.roa
File: 60956A945A1511EF8A6DA460C4F9AE02.roa (raw, json)
Hash identifier: EEkTPqh8PytEcWkDDXpPW8ToZUtCXPbclJIW1Ov07ck=
Subject key identifier: 99:EE:8E:6A:9B:A7:87:FA:81:F5:0A:C5:60:6B:05:95:D0:E3:B5:D7
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 063E
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/60956A945A1511EF8A6DA460C4F9AE02.roa
Signing time: Wed 14 Aug 2024 08:15:33 +0000
ROA not before: Wed 14 Aug 2024 08:15:33 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 132422
IP address blocks: 43.252.208.0/24 maxlen: 24
43.252.209.0/24 maxlen: 24
43.252.210.0/24 maxlen: 24
103.228.64.0/24 maxlen: 24
103.234.54.0/24 maxlen: 24
150.107.1.0/24 maxlen: 24
150.107.2.0/24 maxlen: 24
150.107.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Sep 2024 23:43:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1598 (0x63e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Aug 14 08:15:33 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=66bc67a5-c70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:34:fc:c5:02:3c:a4:0d:40:fd:a2:ac:b1:
e3:6b:c0:91:94:67:8b:10:98:34:df:ce:91:9e:cb:
83:a1:07:50:55:2e:01:a4:d7:74:e9:71:a4:5b:cf:
3c:96:0f:89:88:f1:fb:44:df:f6:7e:35:e1:4e:1b:
40:fe:65:4c:83:d6:13:cd:9d:e3:b3:4d:f5:34:24:
94:42:8e:78:0b:fb:a7:c4:82:13:11:9b:0c:45:b4:
32:ad:52:40:45:01:65:bc:44:b1:e0:70:ed:83:9a:
87:99:67:f2:43:76:84:4d:34:43:7a:5b:7a:8e:5a:
1e:42:05:db:dc:ad:3f:03:ec:a4:82:1c:96:6b:b0:
50:d5:51:5f:c7:c0:f2:79:12:e6:f2:9a:4f:22:9f:
57:16:b3:81:13:6a:78:85:74:19:a7:00:1a:3d:18:
25:8a:f1:35:e4:4b:63:a9:67:70:d3:02:09:4c:37:
42:26:1c:9d:8f:13:ca:8d:52:36:df:ed:1d:7d:b7:
14:cd:eb:10:7b:42:55:ae:d3:88:bd:f4:e0:e7:05:
25:68:d2:a4:ee:07:94:f2:7a:ac:00:72:8d:6f:70:
9c:db:fb:bf:95:57:61:43:83:ec:c2:c1:38:92:32:
53:c0:13:2e:d8:9c:c5:d4:fa:4b:2b:dd:0a:6a:ef:
f4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EE:8E:6A:9B:A7:87:FA:81:F5:0A:C5:60:6B:05:95:D0:E3:B5:D7
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/60956A945A1511EF8A6DA460C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.252.208.0-43.252.210.255
103.228.64.0/24
103.234.54.0/24
150.107.1.0-150.107.3.255
Signature Algorithm: sha256WithRSAEncryption
ae:d7:27:61:b4:5b:d3:df:5d:1d:a7:7d:ce:f3:eb:b4:69:0a:
c7:cd:be:13:8b:e3:4f:da:db:44:3f:68:e5:12:68:06:cd:19:
63:3d:a7:fa:57:5b:cd:ff:dc:f0:75:34:b9:26:48:8e:12:7f:
92:b4:e2:01:84:72:61:57:bc:19:a1:51:08:11:7b:1d:fa:d1:
aa:af:a6:03:9c:69:bd:11:2e:cc:2e:f7:2e:20:51:32:ec:66:
1a:29:1d:74:af:15:b0:f3:48:3b:a0:c2:12:e9:80:b5:9e:be:
67:ad:68:8a:78:5c:b2:d0:25:b5:60:b0:3f:e9:ee:95:de:d7:
48:39:fc:c8:13:e3:c4:a6:31:3b:a1:c2:5e:2e:05:a1:53:51:
36:36:a2:39:fe:60:77:bf:ff:b8:ca:c5:c9:e4:e9:56:d1:76:
70:01:57:a0:6c:1d:09:95:d8:3e:60:a0:7b:6a:d1:7b:8b:38:
f9:cb:80:90:d0:67:2b:8a:bc:6d:bb:67:8b:b7:9e:4f:e3:66:
96:3e:39:38:66:a9:ea:ab:8c:18:f9:51:29:4c:61:fd:53:ce:
18:3f:e7:43:d2:9d:6b:67:7e:c9:09:91:1e:fd:51:ed:47:4b:
24:73:f3:f8:e9:57:b8:9b:d6:54:97:cd:0d:44:ef:45:73:e1:
32:ee:b5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 01:46:28 2024 by rpki-client on console-fra.rpki-client.org