Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/D6384EA2296D11EFB222A54EC4F9AE02.roa
File: D6384EA2296D11EFB222A54EC4F9AE02.roa (raw, json)
Hash identifier: ojmJncymRGeUupyVbwTZtSQvwH9oF58McdRYLEi/b8U=
Subject key identifier: 62:7D:AF:B9:96:C1:D6:47:BC:43:4B:EF:FF:AC:E6:BC:1C:F2:9A:52
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 0600
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/D6384EA2296D11EFB222A54EC4F9AE02.roa
Signing time: Thu 13 Jun 2024 10:15:19 +0000
ROA not before: Thu 13 Jun 2024 10:15:19 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 137451
IP address blocks: 43.229.152.0/24 maxlen: 24
43.252.208.0/24 maxlen: 24
43.252.209.0/24 maxlen: 24
43.252.210.0/24 maxlen: 24
103.228.64.0/24 maxlen: 24
103.234.54.0/24 maxlen: 24
150.107.0.0/24 maxlen: 24
150.107.1.0/24 maxlen: 24
150.107.2.0/24 maxlen: 24
150.107.3.0/24 maxlen: 24
150.129.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Jun 2024 09:39:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1536 (0x600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Jun 13 10:15:19 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=666ac6b7-ed1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:07:2a:b2:ef:76:13:df:a7:ed:eb:0a:a1:f8:
32:91:ae:b0:df:03:be:e5:49:bb:2f:e8:42:ea:5e:
96:4e:77:b3:1f:f1:ab:2a:df:22:81:a2:03:1e:7a:
1c:2e:60:5f:6c:17:1b:c9:7f:d1:b1:52:45:72:3d:
da:b0:66:aa:a1:12:3f:24:e8:17:de:0e:b8:9b:fa:
1d:04:1e:ed:8e:41:81:2c:f3:8a:8c:41:1f:7d:c0:
79:2e:5c:7f:9a:eb:ee:c9:83:52:c4:3f:bc:a1:5b:
fd:f3:c2:fa:71:0f:2a:0f:e3:3d:83:9c:c7:b4:b3:
63:90:3b:d1:82:e6:74:bf:18:da:11:81:ec:22:25:
31:82:0c:d7:8f:3b:b5:5c:51:18:3c:9e:d7:ab:d9:
e3:dc:56:85:37:e6:61:71:fc:7c:48:69:c3:61:13:
95:a9:ce:b9:98:da:4c:6c:cb:ef:a4:6d:bb:18:a3:
67:4e:ee:8b:20:3c:70:3f:48:19:b7:ec:51:84:74:
02:e0:d6:5b:60:54:8a:56:05:37:1d:67:6c:b8:f9:
ec:d8:54:e5:9e:84:5a:80:01:bb:fe:7d:4a:d3:f5:
09:31:8c:54:e3:a5:bf:12:82:8a:00:0a:36:c1:b3:
f4:c1:c3:5a:93:c9:16:3c:0c:51:0e:49:6c:9e:90:
9a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7D:AF:B9:96:C1:D6:47:BC:43:4B:EF:FF:AC:E6:BC:1C:F2:9A:52
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/D6384EA2296D11EFB222A54EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.152.0/24
43.252.208.0-43.252.210.255
103.228.64.0/24
103.234.54.0/24
150.107.0.0/22
150.129.42.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:50:0d:b8:8a:90:62:66:89:47:97:7e:f9:66:d3:52:1f:16:
c2:be:c3:1d:2e:55:3c:59:de:d9:e5:97:01:e1:82:6c:98:8d:
98:c6:13:17:fd:e4:ff:04:d5:21:24:03:13:b0:d4:83:02:db:
5f:7c:4f:ef:ec:9a:be:7d:a7:f4:b9:ef:90:32:06:cd:5e:8c:
ab:6a:55:e7:cb:33:32:6c:e8:4d:5b:b5:4d:57:f1:c6:8a:4c:
a8:e3:c3:d2:00:4a:f4:a4:37:ef:bf:e5:4f:dd:a3:b9:96:69:
c8:4e:41:2c:2b:3c:ed:e6:50:07:b0:b2:04:4f:f6:e8:d5:cc:
5c:7b:dd:05:c7:f9:ae:e3:a2:06:3f:9d:f9:de:0d:48:97:e1:
38:8d:9e:fc:be:1a:ba:0a:59:5e:ae:05:34:70:c4:c7:9b:ba:
92:df:e6:d6:8e:17:85:8c:bd:ef:34:2c:11:c2:b4:6c:a6:77:
bd:b6:a5:d7:23:a1:5f:28:9d:9b:e4:17:a4:3c:35:1d:5e:7a:
e5:13:5e:7a:fe:13:0a:21:15:73:3a:ec:b0:53:14:1e:1d:64:
1d:cc:38:98:4d:ae:47:f2:8b:93:57:d7:a4:17:4a:a6:e0:2d:
ce:34:8b:8d:92:ab:83:63:9a:1a:92:a2:a2:ba:4a:1a:12:e4:
89:d2:52:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 11:38:06 2024 by rpki-client on console-fra.rpki-client.org