Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/69C8722C7CA911EE87D1573AC4F9AE02.roa
File: 69C8722C7CA911EE87D1573AC4F9AE02.roa (raw, json)
Hash identifier: 7SXz0EFjv2CjiCr2exUnaosPoupvU2mg/d2EWFWpnT0=
Subject key identifier: 7F:6A:94:52:63:2E:8C:AE:43:1D:4A:6C:00:DA:FF:46:24:50:77:B2
Certificate issuer: /CN=A915177C/serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF
Certificate serial: 2EB8
Authority key identifier: 22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/69C8722C7CA911EE87D1573AC4F9AE02.roa
Signing time: Mon 06 Nov 2023 13:38:09 +0000
ROA not before: Mon 06 Nov 2023 13:38:09 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 32590
IP address blocks: 45.121.184.0/22 maxlen: 24
103.10.124.0/23 maxlen: 24
103.28.54.0/23 maxlen: 24
2404:3fc0::/48 maxlen: 48
2404:3fc0:1::/48 maxlen: 48
2404:3fc0:2::/48 maxlen: 48
2404:3fc0:3::/48 maxlen: 48
2404:3fc0:4::/47 maxlen: 48
2404:3fc0:7::/48 maxlen: 48
2404:3fc0:8::/48 maxlen: 48
2404:3fc0:a::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 06 Nov 2023 21:11:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11960 (0x2eb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915177C/serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF
Validity
Not Before: Nov 6 13:38:09 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=6548ec41-57ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f5:da:f8:58:e7:9c:4f:7b:c9:5b:82:08:cc:
cb:dc:bb:58:ed:1f:87:6e:c6:af:73:3d:ff:51:be:
68:4a:10:d0:2a:92:8f:25:1b:3a:0d:a1:ce:2f:75:
c5:dd:3b:8e:4c:31:2e:f5:60:35:79:87:be:00:3a:
d1:72:16:8f:1a:97:45:db:e4:38:16:3c:52:6e:70:
8f:5a:40:80:e9:4b:2b:d3:69:ba:a6:12:2d:b8:38:
bf:cf:4b:a8:9d:eb:79:cb:3e:e7:72:60:eb:90:fd:
7b:aa:11:03:69:58:14:7d:1a:4d:f9:84:f8:bb:9f:
e5:91:2c:7e:22:54:79:96:49:f9:cb:e3:2c:7d:01:
87:95:cc:ca:f6:55:f3:f0:24:12:ee:80:22:a4:ed:
c7:a2:75:cd:d0:29:0c:60:89:1e:24:ba:3f:22:9c:
1c:b7:9c:0b:48:80:7d:b7:2a:7b:eb:13:a1:d2:e1:
aa:a6:4c:35:57:83:c2:31:72:47:09:0b:50:9e:74:
93:fd:69:0f:57:35:e2:d6:df:71:58:16:de:f3:73:
25:3a:c5:94:94:99:f8:f6:49:d4:86:b1:c4:45:bc:
aa:bb:49:e5:14:b2:ae:ce:d6:e8:c9:ff:e5:2f:44:
61:ea:71:9c:dd:32:ed:32:fe:ce:de:a7:47:f7:98:
2b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6A:94:52:63:2E:8C:AE:43:1D:4A:6C:00:DA:FF:46:24:50:77:B2
X509v3 Authority Key Identifier:
keyid:22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/69C8722C7CA911EE87D1573AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.121.184.0/22
103.10.124.0/23
103.28.54.0/23
IPv6:
2404:3fc0::-2404:3fc0:5:ffff:ffff:ffff:ffff:ffff
2404:3fc0:7::-2404:3fc0:8:ffff:ffff:ffff:ffff:ffff
2404:3fc0:a::/48
Signature Algorithm: sha256WithRSAEncryption
73:47:ed:d9:88:a1:c5:f1:96:5c:65:31:56:f0:14:09:e1:89:
db:bf:13:bb:3d:22:a4:e7:47:16:12:d5:95:2f:48:c8:23:11:
7f:8f:ce:86:bd:7d:3c:3c:6f:9a:72:c8:46:5f:f4:66:3f:92:
2b:6f:01:ba:f8:d5:2d:e9:a2:33:28:42:9b:36:ac:bd:e5:69:
9d:eb:54:bd:d2:64:ad:b4:f6:ea:10:a6:d8:0a:99:74:b8:a3:
fb:90:ea:a1:be:a9:16:47:98:c6:ac:be:98:4e:56:ae:1c:29:
1d:e2:88:66:2e:ab:a5:1c:2c:3d:fd:2d:d1:e7:31:17:0f:c2:
8d:e5:47:c8:fb:19:c6:68:64:f3:2b:c8:9c:33:9b:79:14:9f:
30:46:f6:e5:69:70:5a:51:59:ab:61:f8:d7:57:98:d8:e7:e3:
d0:53:e0:e9:bd:a4:21:fc:9c:d9:be:51:50:1e:cd:e5:fa:29:
99:a5:12:4c:f4:84:f4:7a:44:0d:7c:e8:3d:c8:d4:44:40:37:
f7:e0:9b:80:a3:f4:69:85:55:cc:fe:bd:53:e9:03:10:a4:46:
b1:e0:38:24:3a:22:db:b5:f3:28:28:ad:4b:cf:bb:a5:89:d9:
b1:46:7d:e7:cc:f5:d3:53:36:4d:e7:b3:69:77:54:20:9f:2a:
49:0c:a7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:06 2024 by rpki-client on console-fra.rpki-client.org