Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/8335CDC6589111EF8805FC50C4F9AE02.roa
File: 8335CDC6589111EF8805FC50C4F9AE02.roa (raw, json)
Hash identifier: 5QrZAnxpsarqVpi0lvI/qMatWo6QczHdLSn2JFJlSV0=
Subject key identifier: DA:00:8A:9A:26:27:D8:25:5A:7E:8E:8A:4D:7C:95:3A:F5:15:32:49
Certificate issuer: /CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663
Certificate serial: 0BB8
Authority key identifier: FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/8335CDC6589111EF8805FC50C4F9AE02.roa
Signing time: Mon 12 Aug 2024 10:01:29 +0000
ROA not before: Mon 12 Aug 2024 10:01:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38026
IP address blocks: 43.240.100.0/24 maxlen: 24
43.240.101.0/24 maxlen: 24
43.240.102.0/24 maxlen: 24
43.240.103.0/24 maxlen: 24
103.36.100.0/22 maxlen: 22
103.36.100.0/24 maxlen: 24
103.36.101.0/24 maxlen: 24
103.36.102.0/24 maxlen: 24
103.36.103.0/24 maxlen: 24
116.193.216.0/24 maxlen: 24
116.193.217.0/24 maxlen: 24
116.193.219.0/24 maxlen: 24
116.193.220.0/24 maxlen: 24
116.193.221.0/24 maxlen: 24
116.193.222.0/24 maxlen: 24
116.193.223.0/24 maxlen: 24
202.164.208.0/21 maxlen: 24
2404:af80::/32 maxlen: 32
2404:af80::/48 maxlen: 48
2404:af80:1::/48 maxlen: 48
2404:af80:2::/48 maxlen: 48
2404:af80:3::/48 maxlen: 48
2404:af80:4::/48 maxlen: 48
2404:af80:10::/48 maxlen: 48
2404:af80:11::/48 maxlen: 48
2404:af80:12::/48 maxlen: 48
2404:af80:13::/48 maxlen: 48
2404:af80:14::/48 maxlen: 48
2404:af80:15::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 02 Oct 2024 06:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3000 (0xbb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663
Validity
Not Before: Aug 12 10:01:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66b9dd79-d3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:29:aa:d2:af:2f:ef:9b:46:8c:da:4b:cc:
30:d7:95:37:bf:14:c6:c1:e5:27:1d:3c:09:84:ca:
a3:6a:5e:09:b1:c0:56:56:05:8a:50:2b:af:5f:0e:
15:bd:53:62:2b:a6:e3:f6:de:b0:35:0c:56:91:4a:
3b:37:ee:fc:1f:0d:dc:b7:c7:bf:ec:e8:f8:04:37:
9a:79:ae:a1:2b:2a:46:97:2e:70:41:d6:f3:a6:25:
f0:f6:d9:5d:1e:57:c3:b3:07:cf:86:24:09:8f:a3:
d5:3b:fc:f7:40:db:1b:22:6d:77:57:1a:a5:a3:6b:
e2:60:11:6d:ed:5f:c3:c1:27:40:81:3c:f6:7a:cd:
69:9f:1c:a6:65:51:ed:50:42:8f:0b:ef:47:c8:73:
f3:81:a9:c1:1e:ae:84:15:82:6e:c6:2e:55:1a:a7:
ab:aa:af:62:21:81:02:bd:b0:79:f2:92:df:b1:39:
43:65:54:1e:5e:de:9b:a6:46:5f:89:1c:a9:0d:bb:
9d:cf:36:4c:82:ac:6a:56:ca:ba:f0:88:e2:38:8e:
48:61:43:d1:82:95:28:ea:f7:28:e8:04:23:8f:1f:
90:8a:21:7b:a6:11:bd:46:0b:da:57:0c:08:e3:25:
47:dc:94:c7:74:4c:be:8f:8e:24:79:cf:87:d7:fc:
1d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:00:8A:9A:26:27:D8:25:5A:7E:8E:8A:4D:7C:95:3A:F5:15:32:49
X509v3 Authority Key Identifier:
keyid:FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/8335CDC6589111EF8805FC50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.240.100.0/22
103.36.100.0/22
116.193.216.0/23
116.193.219.0-116.193.223.255
202.164.208.0/21
IPv6:
2404:af80::/32
Signature Algorithm: sha256WithRSAEncryption
2e:3b:14:61:5f:23:56:7a:a0:36:97:3e:d5:ac:72:2d:28:94:
e6:a7:dd:47:fa:40:2e:62:ef:2d:eb:0f:1a:92:ed:a7:ef:34:
0a:fc:20:c8:1e:44:66:60:2b:9d:8f:0a:5a:1d:74:e0:91:8a:
86:cf:0f:02:5e:46:74:1c:a6:89:1f:8c:c5:ce:48:9c:fe:81:
c9:32:99:0e:c3:4b:a9:e6:c8:e1:2b:3c:b2:60:02:7a:b9:99:
41:55:d5:17:d2:fc:13:ac:93:41:cf:53:61:90:07:39:38:ff:
7d:3e:13:d7:26:04:41:5f:2a:22:1c:62:c0:db:77:8b:6f:33:
6f:93:cb:02:86:aa:3b:0e:70:a2:b6:28:e9:6f:1c:c3:25:ae:
e3:90:c7:f6:73:67:1c:93:4b:7c:bb:fa:97:8d:22:1e:4e:29:
71:fc:82:d0:ab:67:5d:b7:44:94:a0:a8:a6:a7:20:05:f9:3e:
4c:e6:a1:97:1f:44:6e:99:b0:ec:f9:38:08:1e:a0:78:dc:cd:
77:0e:89:92:24:c1:44:0e:d1:2d:e4:11:be:53:b2:e0:87:e7:
c1:c5:37:14:50:19:07:d5:ef:75:96:96:88:3e:30:d0:f1:14:
cd:bd:10:3d:2b:38:8b:5f:c0:11:ff:99:7b:eb:72:9a:64:30:
ee:14:94:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 08:41:20 2024 by rpki-client on console-ams.rpki-client.org