Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/05FE92A2E77011EAA5CF603CC4F9AE02.roa
File: 05FE92A2E77011EAA5CF603CC4F9AE02.roa (raw, json)
Hash identifier: PXjbnbgfMO8/doPiEH36ySejXtZ6c87VCm7AB+Bbhk0=
Subject key identifier: C7:09:20:72:6C:35:5C:FD:7F:0D:63:05:1A:1D:23:B5:52:8B:4E:D6
Certificate issuer: /CN=A91477C3/serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0
Certificate serial: 06C6
Authority key identifier: B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/05FE92A2E77011EAA5CF603CC4F9AE02.roa
Signing time: Mon 02 Oct 2023 21:59:06 +0000
ROA not before: Mon 02 Oct 2023 21:59:06 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 45270
IP address blocks: 43.252.0.0/22 maxlen: 22
101.234.192.0/24 maxlen: 24
101.234.193.0/24 maxlen: 24
101.234.194.0/24 maxlen: 24
101.234.195.0/24 maxlen: 24
101.234.196.0/24 maxlen: 24
103.233.16.0/22 maxlen: 22
223.25.224.0/22 maxlen: 22
223.25.228.0/23 maxlen: 23
223.25.231.0/24 maxlen: 24
2407:ab00::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 05 Mar 2024 00:14:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1734 (0x6c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91477C3/serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0
Validity
Not Before: Oct 2 21:59:06 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=651b3d2a-84af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:19:de:f5:9f:4f:dd:ec:45:dc:c8:eb:6d:
b3:1c:b4:eb:23:e7:b9:24:bf:9f:6c:ef:c1:ea:19:
b1:3a:43:11:ff:71:1d:79:0b:e4:7e:e7:50:3c:f9:
de:ed:89:77:2f:d3:f0:cd:30:88:6e:49:b2:f6:a4:
ad:4d:bf:cc:e0:e6:c8:e0:59:6e:f2:99:05:f5:47:
33:01:b2:7d:65:8b:1f:69:ed:38:a5:e6:5f:a5:db:
3f:fc:20:c1:3e:54:a9:a0:f4:e9:bb:5b:d4:4c:18:
58:33:c6:30:9c:b5:e6:ff:f0:23:ed:47:58:90:45:
18:a2:b9:5c:76:c9:a7:ca:03:74:0b:6d:fa:94:00:
04:c9:3d:7f:30:62:cb:b4:44:40:c9:4a:3f:c6:19:
dc:66:fc:79:db:ea:f6:4b:9a:1c:c4:73:18:24:b3:
4f:62:08:0e:93:a0:7d:4b:8d:79:d9:39:31:3a:a1:
5d:e2:eb:71:07:66:e3:85:91:dd:62:a7:fe:dd:c6:
47:b2:ac:df:46:3f:5a:37:d5:29:5c:9f:30:18:e8:
6c:6c:11:fe:45:88:58:6c:65:99:5b:13:97:64:8e:
e2:08:ca:66:cf:29:79:37:a7:c4:07:ee:aa:68:c5:
0e:2b:c8:c8:6c:17:64:74:af:19:2b:53:97:26:a3:
53:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:09:20:72:6C:35:5C:FD:7F:0D:63:05:1A:1D:23:B5:52:8B:4E:D6
X509v3 Authority Key Identifier:
keyid:B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/05FE92A2E77011EAA5CF603CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.252.0.0/22
101.234.192.0-101.234.196.255
103.233.16.0/22
223.25.224.0-223.25.229.255
223.25.231.0/24
IPv6:
2407:ab00::/48
Signature Algorithm: sha256WithRSAEncryption
9b:2c:5b:5b:4a:c4:58:e0:cc:61:cd:c0:3f:d6:9b:a0:99:ed:
fe:ed:a2:2f:5a:ba:39:f7:46:09:15:24:59:a7:26:29:7d:78:
34:d7:38:6e:73:bc:84:16:66:ea:c3:0d:25:1e:9e:2d:ea:3f:
6a:68:d3:bf:52:c3:d7:b2:a8:c4:26:2f:03:bc:b3:30:2e:11:
3b:e1:68:8f:9b:c7:da:08:ad:07:7c:4b:2e:d5:0b:dc:27:2c:
dd:f5:cd:1d:a1:2c:b4:dd:1f:7d:c8:16:1e:4a:70:ed:3f:2e:
ea:50:6d:1a:45:21:1e:32:33:be:40:5e:9c:64:bf:74:71:e9:
e4:12:c9:e9:d3:8c:35:c2:54:0a:da:b6:80:c8:51:54:4c:71:
ae:d4:e8:16:8e:35:1c:58:c8:d9:21:9c:38:bc:de:c3:5d:d2:
c9:36:96:66:96:bd:1c:1f:4b:74:b2:e7:21:a5:10:d4:ff:96:
1b:85:61:3b:47:7c:0b:4d:17:bf:7b:b4:6e:92:59:10:50:95:
9a:1a:8f:dd:f9:39:58:94:fa:2c:fe:23:d4:3e:da:3e:6d:67:
3b:b3:46:c4:0f:97:c7:67:8a:f0:32:f1:84:1a:3f:67:63:fd:
a7:78:2c:77:f9:43:22:36:94:d2:c7:87:2e:a7:f3:82:e1:da:
35:27:ec:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 02:48:16 2024 by rpki-client on console-fra.rpki-client.org