Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/FE765936C70311EDA68DA958C4F9AE02.roa
File: FE765936C70311EDA68DA958C4F9AE02.roa (raw, json)
Hash identifier: J6SJkdjt4mKZZeiugoFGn9yaiacUktec7W53gE2+DfI=
Subject key identifier: 55:4D:23:7C:AB:E0:FD:72:2C:34:07:0D:BB:B9:8E:E2:09:F4:46:AC
Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Certificate serial: 0DA7
Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/FE765936C70311EDA68DA958C4F9AE02.roa
Signing time: Fri 02 Jun 2023 19:29:39 +0000
ROA not before: Fri 02 Jun 2023 19:29:39 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 54197
IP address blocks: 43.250.107.0/24 maxlen: 24
103.232.212.0/24 maxlen: 24
103.232.213.0/24 maxlen: 24
2402:3180:8::/45 maxlen: 48
Validation: Failed, certificate revoked on Thu 11 Jan 2024 00:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3495 (0xda7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Validity
Not Before: Jun 2 19:29:39 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=647a4323-5b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:aa:f2:c0:6a:fc:3e:e3:5d:1d:12:0b:f2:
72:68:3f:9c:6b:53:b9:82:0a:b9:40:e3:d4:b5:db:
ac:eb:89:ff:d3:70:d1:89:81:be:12:78:be:b8:cf:
39:a8:23:a8:99:fa:ff:c0:65:e6:46:d6:5e:a2:54:
a8:6e:e0:09:e4:b5:7b:e4:c1:ad:60:68:00:ea:27:
9d:c9:ab:a7:2b:fc:27:1a:85:ab:86:e9:b9:3b:1d:
56:c0:b8:8b:fe:91:fc:93:3f:39:58:3a:c3:68:ee:
c9:13:4c:0b:2e:34:e9:f6:67:b5:6c:02:0e:05:d7:
28:12:47:ca:51:66:25:c7:ac:04:94:53:98:51:38:
aa:72:48:7b:92:6a:a7:50:28:8c:a4:71:45:3f:c7:
f0:27:cd:b4:49:52:f0:40:05:cc:da:f1:ee:95:d6:
1c:29:e9:a7:87:5b:83:e2:89:f0:27:a4:eb:b8:fc:
be:d9:55:ec:70:49:ec:c2:e3:f0:96:42:59:e7:29:
6a:d5:a4:0e:f5:9d:a0:c0:05:c1:ed:37:f3:6b:29:
93:5f:67:f4:37:34:7a:09:3b:52:10:76:57:b8:3c:
1b:43:e2:42:1f:32:1a:5c:94:09:7a:5e:e5:a8:30:
cb:0e:30:ae:bd:91:16:06:73:c3:3e:30:cf:bc:e2:
eb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4D:23:7C:AB:E0:FD:72:2C:34:07:0D:BB:B9:8E:E2:09:F4:46:AC
X509v3 Authority Key Identifier:
keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/FE765936C70311EDA68DA958C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.107.0/24
103.232.212.0/23
IPv6:
2402:3180:8::/45
Signature Algorithm: sha256WithRSAEncryption
58:8d:9b:17:c7:9a:1d:ba:76:e9:7c:af:74:21:84:a1:03:21:
df:47:ed:4f:5b:eb:a2:c1:1e:c7:f7:45:b8:64:c4:c9:9e:1f:
4c:d4:14:f7:fb:2c:c4:15:0f:9f:af:c6:e9:4a:3f:2c:10:7c:
23:ad:ba:78:76:d7:3d:25:cd:e7:e2:bf:84:a8:06:94:2d:24:
2f:aa:e3:2d:58:a7:b3:94:16:35:c0:64:3b:93:b8:f2:09:e7:
a7:a9:85:d5:a4:a3:6a:2d:ca:dc:81:21:dc:92:58:07:05:22:
c3:41:a1:8b:0f:1f:6c:cf:e6:f8:0a:03:6b:63:f6:71:7c:5c:
65:17:e4:71:18:de:73:45:77:f8:3d:09:13:c9:2a:17:e4:cf:
43:66:c4:9d:cc:23:c8:c3:c4:73:f0:df:a7:03:39:c2:0e:6d:
fb:5a:dc:e5:2a:0c:c3:63:1f:9c:44:a1:78:01:5f:0f:5f:4d:
f3:71:5f:95:90:91:64:88:3f:73:b4:19:3a:73:de:5a:57:9f:
c5:6c:3d:2d:89:2f:51:a4:57:3e:0f:22:68:42:c4:69:de:46:
a4:3d:11:c2:ae:77:4a:e6:a8:92:75:24:fe:3e:31:80:e6:9d:
ef:b9:0b:23:e5:8b:44:3b:34:c0:bc:98:85:12:ef:9a:33:a9:
fd:20:00:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 03:40:41 2024 by rpki-client on console-fra.rpki-client.org