Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/C648183A253311EFAC435E1FC4F9AE02.roa
File: C648183A253311EFAC435E1FC4F9AE02.roa (raw, json)
Hash identifier: DlRNfOKd5muHMZuEs3ugoEa4OFmgSVDWCm+EB/C3anI=
Subject key identifier: 8D:CD:1C:0B:1A:BF:E7:C9:45:C4:21:C5:27:86:BA:4B:B9:FA:17:C1
Certificate issuer: /CN=A912DD36/serialNumber=04DEDACBDBAFA5C1C14F92817B96F7F503100A28
Certificate serial: 02
Authority key identifier: 04:DE:DA:CB:DB:AF:A5:C1:C1:4F:92:81:7B:96:F7:F5:03:10:0A:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/C648183A253311EFAC435E1FC4F9AE02.roa
Signing time: Sat 08 Jun 2024 01:09:37 +0000
ROA not before: Sat 08 Jun 2024 01:09:37 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 56106
IP address blocks: 45.124.212.0/22 maxlen: 22
45.124.212.0/24 maxlen: 24
45.124.213.0/24 maxlen: 24
45.124.214.0/24 maxlen: 24
45.124.215.0/24 maxlen: 24
103.193.80.0/22 maxlen: 22
103.193.80.0/24 maxlen: 24
103.193.81.0/24 maxlen: 24
103.193.82.0/24 maxlen: 24
103.193.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Aug 2024 16:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DD36/serialNumber=04DEDACBDBAFA5C1C14F92817B96F7F503100A28
Validity
Not Before: Jun 8 01:09:37 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=6663af51-a52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:e0:e1:68:c9:a6:6a:fe:69:49:3a:ce:0b:
06:ec:72:75:6b:2e:fc:83:9e:0a:c0:14:e7:fc:66:
df:5f:87:90:40:85:b6:39:41:fb:72:97:53:58:6d:
c1:46:92:c8:8d:23:4d:37:13:3e:c2:b8:e4:6f:c3:
81:9e:ee:b9:27:19:61:cc:95:b8:cb:0d:5e:c8:c2:
c6:c9:81:27:11:01:67:83:d8:b2:30:b2:cf:33:06:
7f:a0:73:fd:ae:22:ea:42:a1:a0:1f:e5:03:df:57:
f7:a5:8c:c4:8e:9e:95:95:52:58:70:eb:6e:4d:de:
75:b1:8e:cc:dc:76:03:f2:66:fc:b0:7e:b9:7f:7b:
5b:00:07:e2:ec:70:66:2b:ff:61:64:b7:98:27:20:
de:db:ef:cc:f3:2b:39:0d:6b:ed:f9:14:32:a0:52:
ce:6e:d7:cf:00:74:7c:24:df:12:72:0a:27:2f:7e:
ff:06:e0:8d:7a:d0:e3:7d:26:78:17:d4:d3:ce:05:
c5:4c:1f:a4:78:36:04:8c:7b:65:3f:a4:5e:6d:c3:
40:50:7f:65:13:b6:27:a9:ab:15:b5:d7:5a:f2:ed:
2d:77:74:65:8f:8c:03:90:b8:86:7a:9d:c5:cb:2f:
71:92:ec:f9:9f:99:67:b9:d7:28:83:34:75:73:c1:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CD:1C:0B:1A:BF:E7:C9:45:C4:21:C5:27:86:BA:4B:B9:FA:17:C1
X509v3 Authority Key Identifier:
keyid:04:DE:DA:CB:DB:AF:A5:C1:C1:4F:92:81:7B:96:F7:F5:03:10:0A:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/C648183A253311EFAC435E1FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.124.212.0/22
103.193.80.0/22
Signature Algorithm: sha256WithRSAEncryption
46:a0:9c:b3:dd:04:e0:3f:48:b0:81:01:13:e6:53:31:92:35:
71:6a:bb:0a:31:bd:c4:3f:32:3d:3b:26:5a:fa:b1:37:58:40:
a8:83:e4:54:37:68:8e:8f:be:ab:14:61:b9:97:31:8c:17:cd:
5f:d7:52:e1:6e:89:b7:d8:f4:9b:7d:41:b4:44:3c:39:7e:8a:
4d:a0:7b:af:ff:91:1d:0b:ab:a4:05:89:fa:de:50:cc:c1:16:
2e:b9:f8:f3:0d:dd:b0:61:c7:75:8d:05:66:0b:09:07:43:fc:
2a:be:b6:8d:fa:63:b4:58:26:b9:97:5b:7d:45:12:c3:10:30:
4a:89:aa:e0:24:37:f8:3b:13:20:01:8e:a1:a4:b6:52:92:c6:
b6:9f:ae:1c:04:36:d7:89:2b:bd:d1:fa:79:e2:4b:91:9f:77:
76:62:77:68:bd:cc:35:dd:bf:02:e6:11:a8:c0:7c:76:fc:16:
9f:78:11:8c:eb:57:a3:30:57:72:81:cb:89:a3:d0:8b:d2:94:
30:25:31:35:9a:f6:a3:6a:74:08:9b:da:c2:68:7b:f7:1f:05:
d0:27:8b:66:92:bd:8c:51:0d:f6:84:cc:2d:b7:ae:93:8b:d7:
85:af:a2:83:7c:22:b6:f7:90:79:a3:23:d4:89:30:c8:2d:02:
5b:f8:92:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 18:06:28 2024 by rpki-client on console-fra.rpki-client.org