Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/C769D73088FD11EE8616C748C4F9AE02.roa
File: C769D73088FD11EE8616C748C4F9AE02.roa (raw, json)
Hash identifier: a0fjPDhgtm9PUcFJNQ615sgwP2k23xUhtm+qsxP3y/Q=
Subject key identifier: 71:FA:C4:91:0A:F3:8A:87:6D:5C:71:8A:30:38:DB:E4:3A:6B:F8:C3
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 0560
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/C769D73088FD11EE8616C748C4F9AE02.roa
Signing time: Wed 22 Nov 2023 06:10:05 +0000
ROA not before: Wed 22 Nov 2023 06:10:05 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 132422
IP address blocks: 43.252.208.0/24 maxlen: 24
43.252.209.0/24 maxlen: 24
43.252.210.0/24 maxlen: 24
103.228.64.0/24 maxlen: 24
103.234.54.0/24 maxlen: 24
150.107.0.0/24 maxlen: 24
150.107.1.0/24 maxlen: 24
150.107.2.0/24 maxlen: 24
150.107.3.0/24 maxlen: 24
150.129.42.0/24 maxlen: 24
163.53.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Jun 2024 10:15:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1376 (0x560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Nov 22 06:10:05 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=655d9b3d-e152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4b:88:b5:b3:42:fb:0d:b5:b7:43:89:fa:52:
0a:cc:b1:ba:81:1b:09:9b:b0:ea:69:c6:e3:01:1b:
00:6d:c8:cd:48:70:aa:a6:e8:1c:08:fa:63:78:65:
8b:3c:0d:50:3f:56:be:31:48:d2:e0:e6:1e:0a:d0:
ff:50:05:83:eb:4f:03:ea:d1:12:1b:bd:85:f0:d6:
98:d3:7a:34:6e:9e:0e:69:18:5c:59:a5:41:1b:37:
c0:30:1b:06:e9:d5:4e:eb:38:af:41:71:0a:d7:2f:
1a:8a:b7:9e:91:eb:a2:99:da:96:79:37:fe:34:12:
75:5c:33:6f:62:01:c8:39:72:fb:af:44:28:81:57:
84:eb:50:8f:64:b4:41:9b:3c:3c:53:cb:cc:4d:05:
80:1a:e6:ae:e9:d2:cd:91:56:82:22:6a:3b:20:eb:
5c:2a:58:e7:92:b2:51:8d:4b:1f:0d:2e:be:a1:3f:
01:72:0d:8a:5a:ab:f8:9c:fa:fb:e7:77:60:24:27:
d2:34:a5:1d:9a:a5:cc:e2:f2:bb:8c:f2:54:f9:b2:
3c:31:ae:b1:11:f8:05:55:13:82:3e:d5:b6:5c:56:
d5:7d:4f:03:27:2f:f4:05:fc:0a:d0:4a:d5:4c:d7:
27:3a:47:b0:97:ff:c3:26:29:0b:39:25:4a:7d:66:
12:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FA:C4:91:0A:F3:8A:87:6D:5C:71:8A:30:38:DB:E4:3A:6B:F8:C3
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/C769D73088FD11EE8616C748C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.252.208.0-43.252.210.255
103.228.64.0/24
103.234.54.0/24
150.107.0.0/22
150.129.42.0/24
163.53.16.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c4:4b:b0:a3:16:43:ac:e5:b7:41:41:73:18:8c:1f:8d:c7:
f5:4b:1d:b9:80:46:cc:05:22:fe:9f:6c:2f:4d:e2:c8:51:7f:
e9:15:63:51:8c:85:d4:d4:d0:78:d2:50:c6:ec:cf:ee:d9:8d:
fb:0b:2a:02:7c:ef:b3:b8:45:38:6e:60:21:68:99:c5:cb:97:
8a:28:26:bb:c7:5c:70:22:e5:fc:8b:89:30:ea:e5:4b:3e:e5:
96:82:7c:cf:fe:d6:76:d4:e9:0f:f1:8a:15:5a:02:5a:5c:34:
f8:34:5d:7b:88:81:24:f8:88:de:32:b4:00:5c:37:ee:b1:9d:
95:99:d6:01:29:09:c4:e6:71:38:39:20:f6:1c:d9:c7:c6:cb:
d0:3e:fa:1f:6e:7b:65:7b:59:a0:04:28:ae:1b:9c:82:e4:be:
52:73:ca:01:8d:10:a7:7c:ba:ef:e3:8c:53:ae:28:e2:b6:2f:
fa:f3:20:ca:7f:64:8f:9f:db:78:3f:3e:17:8a:da:7e:05:e2:
77:a2:2e:78:bb:15:ab:85:0a:76:7a:9b:7f:03:c0:f3:8b:68:
42:b6:5a:78:bb:ef:50:48:a8:29:d4:26:df:c2:12:7f:a5:49:
9b:43:67:b0:be:80:ab:f0:92:17:91:da:1a:34:66:4c:52:99:
f3:ba:7f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 12:13:56 2024 by rpki-client on console-fra.rpki-client.org