Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/69B3B718DDD111E997B3043FC4F9AE02.roa
File: 69B3B718DDD111E997B3043FC4F9AE02.roa (raw, json)
Hash identifier: h2Knn9seIiVTxkthtJJoELOMmeoHUerOExndRp2v7Q8=
Subject key identifier: 74:CD:C3:40:5F:CB:A7:E5:29:D2:A9:B7:E1:82:33:0A:6B:97:74:A8
Certificate issuer: /CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Certificate serial: 1647
Authority key identifier: 22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/69B3B718DDD111E997B3043FC4F9AE02.roa
Signing time: Thu 06 Oct 2022 17:44:13 +0000
ROA not before: Thu 06 Oct 2022 17:44:13 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 134512
IP address blocks: 43.239.140.0/22 maxlen: 22
43.239.140.0/24 maxlen: 24
43.239.141.0/24 maxlen: 24
43.239.142.0/24 maxlen: 24
43.239.143.0/24 maxlen: 24
103.71.172.0/22 maxlen: 22
103.71.172.0/24 maxlen: 24
103.71.173.0/24 maxlen: 24
103.71.174.0/24 maxlen: 24
103.71.175.0/24 maxlen: 24
103.194.168.0/24 maxlen: 24
103.194.169.0/24 maxlen: 24
103.194.170.0/24 maxlen: 24
103.194.171.0/24 maxlen: 24
103.248.52.0/22 maxlen: 22
103.248.52.0/24 maxlen: 24
103.248.53.0/24 maxlen: 24
103.248.54.0/24 maxlen: 24
103.248.55.0/24 maxlen: 24
103.252.220.0/22 maxlen: 22
103.252.220.0/24 maxlen: 24
103.252.221.0/24 maxlen: 24
103.252.222.0/24 maxlen: 24
103.252.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5703 (0x1647)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Validity
Not Before: Oct 6 17:44:13 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=633f13ec-e549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a8:3f:7d:ff:6e:dc:c6:39:5f:3b:3c:c4:9c:
0d:01:5f:5a:c2:70:0c:4e:3c:74:fc:f2:49:1e:1f:
d3:d9:6c:52:2d:f6:52:d4:ef:1e:97:b6:68:16:f2:
ef:c6:2d:b7:93:d9:b7:ba:3d:78:4b:64:64:b8:64:
fc:e2:0f:34:0b:71:94:f0:fa:82:13:24:38:b1:59:
40:56:9b:3e:a6:d4:8c:94:1e:b7:06:fc:99:3c:bd:
19:a2:ea:a0:c3:42:3e:30:13:91:2a:a3:f6:ba:d6:
eb:9a:01:40:ec:e5:25:a3:98:5b:c3:e2:c9:00:0d:
75:82:11:20:0e:b7:aa:dd:ba:f2:57:b1:6f:84:99:
41:69:ab:2c:1a:bb:d4:aa:fa:0d:bf:77:58:5e:bd:
ae:d0:7b:67:e9:55:cc:b8:be:2d:50:45:ff:ed:9d:
56:40:e5:d8:3b:d6:4e:72:12:87:c9:fe:ce:5b:d8:
bb:87:46:47:e6:7d:5e:18:34:53:1a:58:26:66:09:
54:6f:fe:14:d8:c4:f3:eb:42:38:c2:50:53:de:19:
d5:61:bc:b0:45:c7:23:1d:39:74:0b:0e:14:6d:4c:
b8:05:7e:c4:85:42:92:bd:ee:96:81:88:61:72:ab:
df:1c:62:2f:a1:44:75:78:bf:f3:23:75:5f:3a:07:
f2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CD:C3:40:5F:CB:A7:E5:29:D2:A9:B7:E1:82:33:0A:6B:97:74:A8
X509v3 Authority Key Identifier:
keyid:22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/69B3B718DDD111E997B3043FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.140.0/22
103.71.172.0/22
103.194.168.0/22
103.248.52.0/22
103.252.220.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:fc:b8:54:4c:20:17:11:4b:fa:9f:93:2f:df:2f:d2:09:da:
39:f5:59:73:be:bc:7c:fd:98:da:b5:e6:ec:9e:a7:ca:84:7d:
94:64:03:ff:7e:15:b4:ca:8c:d4:04:37:7d:79:46:28:61:b5:
07:60:73:e4:d7:50:90:a3:3e:22:63:1f:0c:7a:c8:e3:ea:d1:
f7:01:5c:98:51:12:a9:ce:5e:7b:5f:b9:ee:1c:6b:7b:13:d5:
23:1f:3f:30:42:89:76:23:48:ec:5b:da:b8:5b:6d:58:d7:d3:
cd:36:88:cc:22:b6:e5:62:0e:c9:e8:cd:b1:4d:ad:48:aa:69:
26:d3:3e:54:58:24:7d:11:52:e7:c2:9a:0a:c7:a1:df:eb:53:
d9:6c:5f:72:19:66:1e:29:10:b9:26:3a:9e:f4:b0:9b:42:e0:
39:b9:08:2c:92:0e:4a:96:2c:e9:7b:8e:87:53:1c:71:a6:71:
d7:c8:3d:f6:98:d6:8a:a4:e8:9c:35:7b:02:80:0e:e3:74:6b:
9c:5d:ba:4c:09:60:0b:cf:e7:12:d9:0e:72:c9:42:f1:f1:e6:
56:9f:03:4d:cc:9e:17:f6:e2:64:db:be:fd:79:f9:9b:b0:31:
27:63:aa:6c:be:99:28:4c:1f:09:5e:d2:c3:6c:8d:b7:7b:1c:
aa:b2:68:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 13 20:54:59 2023 by rpki-client on console-ams.rpki-client.org