Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/7630844C4FBB11EFA1239F2CC4F9AE02.roa
File: 7630844C4FBB11EFA1239F2CC4F9AE02.roa (raw, json)
Hash identifier: tp87i7ru24HOkFuXypDXM96VysXvVf9pEvHftVuLNdI=
Subject key identifier: 24:DC:4A:C3:B7:EF:28:E4:F5:21:0A:48:7E:E9:A3:3D:93:9F:ED:52
Certificate issuer: /CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663
Certificate serial: 0B85
Authority key identifier: FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/7630844C4FBB11EFA1239F2CC4F9AE02.roa
Signing time: Thu 01 Aug 2024 04:06:43 +0000
ROA not before: Thu 01 Aug 2024 04:06:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38026
IP address blocks: 43.240.100.0/22 maxlen: 24
103.36.100.0/22 maxlen: 22
103.36.100.0/24 maxlen: 24
103.36.101.0/24 maxlen: 24
103.36.102.0/24 maxlen: 24
103.36.103.0/24 maxlen: 24
202.164.208.0/21 maxlen: 24
2404:af80::/32 maxlen: 32
2404:af80::/48 maxlen: 48
2404:af80:1::/48 maxlen: 48
2404:af80:2::/48 maxlen: 48
2404:af80:3::/48 maxlen: 48
2404:af80:4::/48 maxlen: 48
2404:af80:10::/48 maxlen: 48
2404:af80:11::/48 maxlen: 48
2404:af80:12::/48 maxlen: 48
2404:af80:13::/48 maxlen: 48
2404:af80:14::/48 maxlen: 48
2404:af80:15::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 12 Aug 2024 07:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2949 (0xb85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663
Validity
Not Before: Aug 1 04:06:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66ab09d3-ae2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a4:7b:e4:a0:65:70:54:46:fa:ff:74:2b:02:
89:bb:d6:09:f2:70:01:26:d5:70:2a:c4:bd:dd:fb:
b4:6c:ee:f1:88:9e:2c:54:f8:af:6c:89:7d:66:46:
62:5a:0b:c6:cb:d4:9f:1b:0d:e6:f1:8c:d6:46:58:
c7:56:16:50:47:f4:cf:d2:f9:41:67:d1:7a:ca:8e:
93:32:bf:22:af:e5:7a:38:c5:c8:a3:eb:4e:d3:8e:
41:7e:54:5b:8f:51:69:b1:c4:0c:8c:0f:fe:5b:ed:
09:54:70:cd:ad:dd:6e:8a:df:53:75:0d:09:16:4f:
f3:0d:9f:64:c0:d8:71:9b:45:2a:d7:ef:8a:0b:9a:
67:22:b8:12:22:54:7e:98:cf:1e:25:c9:f9:39:6d:
39:c2:84:4e:05:0b:af:44:2e:64:c1:29:8b:07:6c:
84:3b:cd:f8:9b:75:65:2a:0b:b3:81:b7:d0:1b:7f:
e8:9f:41:75:79:a9:28:36:7e:3a:a4:5d:2f:88:df:
1f:72:12:6a:dd:e4:c4:25:d0:09:94:96:e7:ee:e0:
d3:66:12:93:e6:81:d4:de:b2:6c:66:9c:dd:12:a6:
c1:b0:e0:41:15:39:03:be:99:44:8b:c2:c9:0e:56:
b0:4d:ae:90:6e:b3:7f:73:f7:35:a2:c5:59:7c:20:
62:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DC:4A:C3:B7:EF:28:E4:F5:21:0A:48:7E:E9:A3:3D:93:9F:ED:52
X509v3 Authority Key Identifier:
keyid:FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/7630844C4FBB11EFA1239F2CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.240.100.0/22
103.36.100.0/22
202.164.208.0/21
IPv6:
2404:af80::/32
Signature Algorithm: sha256WithRSAEncryption
67:0a:24:1b:fb:9b:ee:82:7e:a1:a3:54:8b:95:d9:2d:37:48:
7e:55:59:26:69:75:6d:2b:1c:b4:e4:98:d7:96:ce:d9:bc:8b:
40:79:c2:d5:39:3f:80:61:85:3f:e1:b5:1d:6b:a1:0f:ea:32:
4b:03:99:e2:31:c1:d6:f9:d9:b4:78:85:ad:a8:13:de:f1:19:
b7:90:59:19:77:ae:72:33:8e:14:11:48:9f:ac:4e:6d:d0:3a:
ae:da:2e:9f:3b:88:f8:34:9b:06:2b:0c:38:ab:45:6c:91:3f:
71:5f:c3:ac:e1:3d:f6:d7:b6:d8:cb:9e:5d:05:94:6e:92:ee:
e3:f5:c5:58:b2:89:d8:01:5d:37:15:30:dc:5a:06:a5:33:3b:
9f:97:16:45:2e:ff:be:34:72:7d:12:bf:6e:66:b2:27:f9:02:
4e:a9:0b:03:bd:43:6d:fe:fd:94:77:d6:b2:03:3b:ab:28:80:
88:85:91:e8:58:11:f1:75:c3:28:78:9c:57:b5:59:02:8f:32:
d6:8f:56:09:43:aa:66:e4:70:6f:25:49:ed:46:30:4a:6b:56:
f8:ab:ed:5d:0c:37:1e:29:b1:76:f2:ff:e1:8f:32:8b:53:ea:
f5:c3:e3:52:19:9a:14:f5:91:18:c2:a0:98:6d:ae:16:f9:41:
89:fe:df:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 10:21:00 2024 by rpki-client on console-fra.rpki-client.org