Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/E2ADBF4E022F11EDA851B357C4F9AE02.roa
File: E2ADBF4E022F11EDA851B357C4F9AE02.roa (raw, json)
Hash identifier: DJ9fAitzYrXHF3IunSSLVjEaj/9g7JqpjpFtVblvC94=
Subject key identifier: B8:8A:9B:4B:19:AB:FB:08:F0:59:B4:0C:9F:F4:80:09:2D:8B:16:F6
Certificate issuer: /CN=A9139555/serialNumber=4365D179D5B73E8A97EDE0505F29EF00C2D63EF9
Certificate serial: 01C5
Authority key identifier: 43:65:D1:79:D5:B7:3E:8A:97:ED:E0:50:5F:29:EF:00:C2:D6:3E:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/E2ADBF4E022F11EDA851B357C4F9AE02.roa
Signing time: Thu 11 Apr 2024 03:29:36 +0000
ROA not before: Thu 11 Apr 2024 03:29:36 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 45269
IP address blocks: 43.225.144.0/22 maxlen: 22
43.225.144.0/24 maxlen: 24
43.225.147.0/24 maxlen: 24
103.31.112.0/22 maxlen: 22
103.31.114.0/24 maxlen: 24
180.148.176.0/22 maxlen: 22
202.14.147.0/24 maxlen: 24
203.176.184.0/22 maxlen: 22
2406:c200::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 20 May 2024 09:04:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139555/serialNumber=4365D179D5B73E8A97EDE0505F29EF00C2D63EF9
Validity
Not Before: Apr 11 03:29:36 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6617591f-026f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:d7:20:29:f1:e8:ba:66:b2:26:00:e7:82:
cd:fd:d7:25:0f:89:ba:20:7c:5a:61:46:82:fb:d7:
1f:84:cd:71:83:18:e2:fc:4c:3e:a0:53:ca:02:5b:
93:49:06:f9:ea:0a:31:a9:80:1a:1e:6a:5b:c4:99:
7b:2e:74:61:6b:d1:f9:ae:18:11:24:76:93:e7:ac:
3b:ff:d3:b0:eb:68:d1:35:5a:54:5c:15:e3:18:ba:
8c:a2:78:0d:92:0e:ce:06:f9:4e:9d:ba:20:5c:0f:
6f:8b:6d:20:24:ce:1b:b2:83:4b:f0:18:fd:94:eb:
e1:b0:bb:34:ec:f9:b9:4a:a5:48:da:82:42:7f:ad:
45:b2:4d:5f:00:4a:2c:aa:5b:d5:1f:f4:18:35:e2:
ab:4e:34:4d:27:21:1d:08:f0:34:d9:11:be:cc:7e:
5c:c9:ef:e6:55:8e:99:93:43:17:0b:26:f5:69:64:
43:1f:8c:c6:73:87:4a:8c:ca:2d:f4:e4:78:bd:02:
5f:c9:66:32:cf:74:7b:c7:5e:61:79:c7:90:9d:b1:
4d:54:6e:d4:38:24:21:22:72:d6:5c:33:2e:64:b2:
64:ff:11:71:60:c1:48:52:fd:e7:4b:69:3e:d2:a8:
ca:d0:a3:3b:b7:e1:78:27:14:2e:59:7e:1b:de:15:
be:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8A:9B:4B:19:AB:FB:08:F0:59:B4:0C:9F:F4:80:09:2D:8B:16:F6
X509v3 Authority Key Identifier:
keyid:43:65:D1:79:D5:B7:3E:8A:97:ED:E0:50:5F:29:EF:00:C2:D6:3E:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/E2ADBF4E022F11EDA851B357C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.144.0/22
103.31.112.0/22
180.148.176.0/22
202.14.147.0/24
203.176.184.0/22
IPv6:
2406:c200::/32
Signature Algorithm: sha256WithRSAEncryption
57:c7:58:44:ec:66:25:bf:42:79:fd:7b:ad:3e:36:ca:fc:a7:
66:83:88:a7:ff:6e:35:8f:ba:04:97:e0:4a:19:a2:17:44:ea:
50:4e:26:9d:73:10:cd:3c:42:31:29:e5:5c:aa:c7:4e:1b:19:
4f:2d:39:fc:55:d9:20:f3:20:f4:df:cc:b6:e0:9e:9c:f3:4c:
0b:e8:d5:19:95:e3:82:aa:ab:0f:45:56:9d:32:b4:41:47:57:
08:b1:16:f0:f4:5d:0b:b6:31:a2:3e:cf:03:f6:bc:e3:09:d3:
20:a1:02:40:d2:58:d5:fd:a6:1a:81:bb:07:de:ea:63:b1:03:
4c:83:c2:93:75:ae:a7:9f:ea:61:56:f8:33:8d:cb:d8:f8:bf:
8e:db:ff:7f:0b:e9:9a:d3:92:fc:72:55:29:d4:6a:53:6b:b4:
41:44:26:40:6f:35:ea:ae:62:25:16:ea:99:3e:df:a2:f7:fd:
10:9b:ed:e5:7b:50:41:b5:4d:50:e6:a2:91:78:c8:1f:b4:cf:
11:68:91:87:11:ed:66:37:51:d7:e3:72:61:a0:6a:eb:03:86:
ba:25:3d:93:53:1e:b2:48:bc:26:e9:6c:dc:1b:8c:49:f6:aa:
e5:5f:a6:94:32:f5:a9:85:40:c8:50:7b:24:ac:b4:03:19:50:
1f:34:d4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:03 2024 by rpki-client on console-fra.rpki-client.org