Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/8AADFB547D6E11EE88CBA548C4F9AE02.roa
File: 8AADFB547D6E11EE88CBA548C4F9AE02.roa (raw, json)
Hash identifier: NUz2V1RjSU6+AuSixZwPVu7ehoggwc9PEWn82xg1dSs=
Subject key identifier: DB:9F:D8:66:C3:4B:9E:21:F7:FA:06:88:49:0D:2A:8A:64:29:EB:E2
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 054F
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/8AADFB547D6E11EE88CBA548C4F9AE02.roa
Signing time: Tue 07 Nov 2023 13:07:02 +0000
ROA not before: Tue 07 Nov 2023 13:07:02 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 64021
IP address blocks: 43.252.208.0/24 maxlen: 24
43.252.209.0/24 maxlen: 24
43.252.210.0/24 maxlen: 24
43.252.211.0/24 maxlen: 24
103.228.64.0/24 maxlen: 24
103.228.66.0/23 maxlen: 23
103.234.54.0/24 maxlen: 24
150.107.0.0/24 maxlen: 24
150.107.1.0/24 maxlen: 24
150.107.2.0/24 maxlen: 24
150.107.3.0/24 maxlen: 24
150.129.42.0/24 maxlen: 24
163.53.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Nov 2023 06:10:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1359 (0x54f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Nov 7 13:07:02 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=654a3676-fb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:19:f5:61:f0:ae:3e:d2:6e:a8:16:91:e9:
e0:6e:f3:4c:58:19:a1:20:e4:6d:c1:90:4f:24:26:
4c:e9:26:65:3f:3d:40:5d:8f:48:de:a9:f8:45:89:
72:38:15:87:2a:3a:d2:39:d6:4d:e9:b0:c9:d1:ef:
c5:29:7c:88:85:f7:8e:6f:a2:0e:2d:72:b6:46:d7:
30:37:fc:00:2b:9b:ed:1e:a1:cc:43:db:2f:a7:37:
6e:d2:b8:b3:5f:a1:cc:ea:a7:d6:f2:5a:3f:14:23:
94:a1:77:91:02:1c:9d:25:12:29:ea:fe:2b:b7:d1:
95:c0:a3:af:8a:b6:c9:51:71:c3:68:66:2e:3b:81:
1a:45:29:5f:21:77:d9:89:20:73:af:d1:ca:19:f1:
98:f6:38:58:e7:0b:57:4f:18:7e:27:9b:18:26:77:
94:ea:d5:22:a8:f3:5b:08:11:f7:ed:d9:95:77:3b:
15:ae:1d:f5:cf:26:92:70:a4:97:89:e3:ca:d2:6a:
77:d5:f3:bd:51:12:68:35:a1:15:91:85:9b:81:fc:
92:50:c2:40:3f:02:0d:fc:10:9e:af:25:bd:01:bb:
8e:d5:a1:8a:60:3f:b4:b0:3e:f3:b4:be:67:2a:a2:
5b:92:a4:85:54:27:49:49:fc:f1:a5:ac:cd:85:fa:
d7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9F:D8:66:C3:4B:9E:21:F7:FA:06:88:49:0D:2A:8A:64:29:EB:E2
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/8AADFB547D6E11EE88CBA548C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.252.208.0/22
103.228.64.0/24
103.228.66.0/23
103.234.54.0/24
150.107.0.0/22
150.129.42.0/24
163.53.16.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:6a:b0:03:86:be:12:4c:f1:11:01:bc:27:24:f3:28:e4:a7:
b9:65:cf:80:b8:9c:b6:e7:90:2a:0d:06:b8:11:28:47:d9:c1:
a6:56:45:99:d0:f6:46:e6:b9:4d:dc:84:a5:8e:2b:3f:6f:06:
07:a7:2e:b5:c2:05:b7:de:2e:7f:b0:03:a5:1d:89:f4:93:ec:
2c:12:b6:a3:cc:43:94:8e:63:c8:e5:ab:52:aa:b9:e3:29:01:
02:f3:f3:17:fa:2c:46:cc:cc:da:69:4a:cb:dc:d9:63:38:d2:
f3:00:0a:b3:a8:26:fa:57:b0:42:f2:4a:90:a3:fa:79:67:84:
c6:38:d3:69:96:55:6d:22:f6:49:23:6e:68:a8:ac:b0:88:b6:
a1:f5:55:d0:9b:88:be:6c:c5:4c:ae:cc:22:2c:60:48:85:58:
cb:9b:39:34:7c:c6:16:57:41:b1:2a:0b:91:29:8e:28:e0:2d:
9f:b8:51:75:6f:cf:b9:2a:c6:9e:7c:0b:2d:98:6c:c5:10:f8:
1e:b4:7d:0d:5d:d4:ab:2b:52:71:46:06:8e:55:93:b5:59:11:
73:de:bb:47:d6:13:2c:e1:c8:2d:5d:8a:43:33:31:ff:52:f4:
aa:ae:c4:5b:91:7b:59:9a:22:38:e1:a7:02:f6:e0:ed:e3:88:
35:43:b4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-ams.rpki-client.org