Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/CB5012460F6311EABC47D53EC4F9AE02.roa
File: CB5012460F6311EABC47D53EC4F9AE02.roa (raw, json)
Hash identifier: i7iJDKHTA4FxmKPgeR1Xs1+ytUegp4NlxMYWLSLdlkE=
Subject key identifier: 0F:AB:98:C7:97:CC:30:89:C4:1B:0C:57:D3:3F:75:56:E4:FA:81:9A
Certificate issuer: /CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663
Certificate serial: 0B64
Authority key identifier: FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/CB5012460F6311EABC47D53EC4F9AE02.roa
Signing time: Fri 31 May 2024 20:34:39 +0000
ROA not before: Fri 31 May 2024 20:34:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38026
IP address blocks: 43.240.100.0/22 maxlen: 24
103.36.100.0/22 maxlen: 22
103.36.100.0/24 maxlen: 24
103.36.101.0/24 maxlen: 24
103.36.102.0/24 maxlen: 24
103.36.103.0/24 maxlen: 24
116.193.216.0/21 maxlen: 24
202.164.208.0/21 maxlen: 24
2404:af80::/32 maxlen: 32
2404:af80::/48 maxlen: 48
2404:af80:1::/48 maxlen: 48
2404:af80:2::/48 maxlen: 48
2404:af80:3::/48 maxlen: 48
2404:af80:4::/48 maxlen: 48
2404:af80:10::/48 maxlen: 48
2404:af80:11::/48 maxlen: 48
2404:af80:12::/48 maxlen: 48
2404:af80:13::/48 maxlen: 48
2404:af80:14::/48 maxlen: 48
2404:af80:15::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 01 Aug 2024 04:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2916 (0xb64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663
Validity
Not Before: May 31 20:34:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=665a345f-6427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:40:97:1d:8e:31:0e:17:33:42:4f:4f:94:
ff:17:4f:4c:80:05:b0:09:c4:b8:7b:7a:63:25:54:
b0:ad:07:71:04:ef:22:8a:e8:6d:bb:64:e5:51:18:
72:ab:7b:64:32:0c:7b:37:64:c2:ea:75:90:14:7a:
8f:ac:0d:7b:c1:50:5a:00:33:2a:98:50:ad:1f:64:
1a:9b:4f:a9:60:54:7f:bf:e9:21:05:f9:f5:b8:95:
98:32:fc:32:a3:21:79:39:03:52:2c:de:7f:14:1e:
b0:1d:c3:f8:d9:88:02:9f:67:69:cd:dd:85:fb:28:
68:94:6d:a9:09:c8:a9:3d:7d:a8:39:f4:0b:ed:b0:
9d:e7:63:89:d1:2a:02:f7:af:6d:9c:2b:76:f7:4a:
de:b7:35:2d:c5:6b:b7:31:38:4a:ad:63:e8:66:a4:
da:81:2e:93:fd:db:37:63:e0:c5:d1:3b:d6:df:ad:
51:5a:e8:6c:85:bf:c6:27:bd:e2:77:64:42:87:cd:
c3:bd:b4:66:39:af:43:3a:d7:15:65:77:3b:64:3e:
a4:ef:4d:b0:ff:66:3f:2f:b0:45:21:61:e3:8c:ca:
79:85:a0:25:a2:b9:d6:c4:29:6f:75:40:d7:dc:4f:
ea:45:ff:1e:c2:97:04:59:ee:6f:7f:10:7b:a3:87:
8d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AB:98:C7:97:CC:30:89:C4:1B:0C:57:D3:3F:75:56:E4:FA:81:9A
X509v3 Authority Key Identifier:
keyid:FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/CB5012460F6311EABC47D53EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.240.100.0/22
103.36.100.0/22
116.193.216.0/21
202.164.208.0/21
IPv6:
2404:af80::/32
Signature Algorithm: sha256WithRSAEncryption
54:f9:30:05:f4:7a:0d:f3:fc:3c:50:36:43:60:66:be:1d:0f:
3b:50:b9:c6:38:d1:85:30:83:7a:f7:34:7b:ac:85:b1:1a:0a:
56:63:94:98:b6:b2:ec:78:96:c9:3c:9e:aa:db:f4:c1:94:2e:
e6:70:89:45:2f:a4:4e:b7:20:24:23:fd:61:3e:e6:0f:f9:b0:
d9:8d:2b:49:a3:8a:de:69:6e:da:bb:5e:31:7b:e9:2d:f7:a8:
83:49:b2:69:a8:4e:b3:94:dc:20:27:4b:53:15:6d:04:8e:60:
5a:c4:6e:2d:19:b8:4d:aa:d7:c6:9f:68:bc:a8:5f:38:63:67:
55:e1:8e:fb:4b:2c:de:6a:d2:46:fe:97:f8:93:67:91:e4:be:
71:7e:e9:5b:0c:f7:1b:54:1f:2a:20:cc:9c:f3:73:66:64:87:
ac:fc:25:4b:72:ef:12:1b:8f:fa:17:6a:1d:ad:c4:2c:62:9b:
ab:8a:44:a5:c9:58:af:56:73:91:7f:12:37:09:0c:5e:ae:c2:
27:07:cc:f7:66:b8:eb:20:04:b9:e9:08:c7:95:63:e1:1d:d7:
2c:ce:4f:02:b1:ec:2f:1d:3f:a4:03:8c:8d:26:4c:5e:e5:56:
e4:a3:a7:b9:50:24:b3:ae:cc:a6:b2:9e:b3:aa:dd:b9:8a:68:
92:1a:4a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 06:17:40 2024 by rpki-client on console-ams.rpki-client.org