Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/BF1EF46AC94111EDB0F3A06AC4F9AE02.roa
File: BF1EF46AC94111EDB0F3A06AC4F9AE02.roa (raw, json)
Hash identifier: zHcGjDsY3Q8eUl6M1E5I3jrMAbqaqN3GYVTsharG9VY=
Subject key identifier: CC:61:DB:E7:E5:EE:2A:32:DD:84:51:65:DB:F4:06:BF:6D:79:23:A0
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 0450
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/BF1EF46AC94111EDB0F3A06AC4F9AE02.roa
Signing time: Sat 25 Mar 2023 08:12:15 +0000
ROA not before: Sat 25 Mar 2023 08:12:15 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 137451
IP address blocks: 43.229.152.0/24 maxlen: 24
103.48.168.0/24 maxlen: 24
103.48.169.0/24 maxlen: 24
103.48.170.0/24 maxlen: 24
103.228.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1104 (0x450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Mar 25 08:12:15 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=641eacde-59bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:b6:60:d9:85:a7:6a:5c:1e:39:9a:f8:cc:
03:1f:6a:a9:cf:d8:fc:a8:5a:97:45:69:d8:a4:ee:
4e:1e:a3:1b:ab:85:a3:65:25:78:58:a3:91:d3:2b:
36:03:f9:9e:7d:a0:69:6e:a3:ae:2d:27:3f:6e:55:
e5:12:2d:bc:81:72:21:7a:0b:0d:5b:6d:c1:7f:4c:
77:0a:ff:be:92:c3:06:14:62:af:d0:0c:5c:d7:63:
ab:da:03:49:bf:95:7a:20:8d:af:45:bf:a6:46:4f:
96:6b:76:e5:5c:65:f7:ae:aa:c1:8c:08:45:1c:79:
86:66:94:3d:7c:80:da:43:c5:75:55:4a:9e:9f:2c:
64:26:77:73:e6:17:e8:2f:6f:2b:1c:48:be:c9:2a:
b3:63:ce:8c:ce:58:84:d4:ce:bb:47:39:0f:46:41:
05:e3:7b:04:de:90:de:36:d9:71:2d:f8:41:e6:98:
e6:62:57:c0:f8:c9:c1:ea:df:eb:88:ce:4b:00:66:
e6:e1:6c:d3:a4:1c:93:e2:39:df:38:b4:86:aa:d0:
62:5e:38:c5:a5:8d:d4:b1:58:22:21:68:96:a9:90:
d6:48:0e:4f:21:64:cd:67:f8:c8:4b:fb:2d:af:ff:
b6:b2:8d:05:ac:b8:99:78:57:f9:b1:1d:80:bb:9a:
c7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:61:DB:E7:E5:EE:2A:32:DD:84:51:65:DB:F4:06:BF:6D:79:23:A0
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/BF1EF46AC94111EDB0F3A06AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.152.0/24
103.48.168.0-103.48.170.255
103.228.64.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:1e:5e:8a:0e:38:7e:11:c9:a3:62:c1:48:7b:fb:57:f2:48:
89:26:d7:3c:6c:f4:b5:0a:79:6e:0f:7e:9e:05:65:9e:a9:7c:
f8:e8:55:11:10:3f:83:c2:e5:da:a4:b9:6c:c9:e6:e8:1f:1c:
1e:77:ce:65:17:6f:91:8c:21:25:1f:74:09:ca:db:b5:1a:a0:
b5:f2:66:81:8d:94:b9:25:bb:8b:6c:a3:b8:ec:ae:6c:31:b5:
ef:7a:a6:6f:6a:3e:79:2e:05:66:8e:5d:1a:c8:d7:1e:cb:7e:
02:5f:f1:72:04:12:6a:d8:81:bd:93:31:1b:14:1f:ba:6b:6f:
dd:21:03:a9:55:20:6c:4b:86:1e:89:bf:e4:ae:26:4a:74:9b:
8a:b0:eb:d0:d3:f4:8a:cb:96:49:28:97:1c:76:21:69:23:d3:
6b:97:2d:e1:d1:d9:34:dd:18:50:0b:d7:a0:18:be:3e:ae:d3:
f7:ac:db:43:6f:af:6e:f8:2b:d6:e7:f3:0c:26:b9:54:f2:24:
ce:d9:8a:e2:63:f4:cc:33:37:92:8a:8c:e1:4e:98:20:60:7d:
92:ce:ea:b2:0e:18:19:f5:aa:e2:ec:ca:c4:05:f6:20:4c:d7:
c6:22:f6:49:fa:68:40:f2:5d:8a:ac:7f:fe:6c:e9:f0:d8:e5:
a0:ef:4b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-ams.rpki-client.org