Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/D7BA40025D1C11ECA5897B66C4F9AE02.roa
File: D7BA40025D1C11ECA5897B66C4F9AE02.roa (raw, json)
Hash identifier: RxM4TbI0tqO6u3qbZJcQCmOEkkZ5mq6rLMXH3ZSgK/A=
Subject key identifier: AA:7C:F3:B0:FB:7E:BC:74:73:50:05:7A:E0:5D:AA:79:EE:B4:E1:EA
Certificate issuer: /CN=A915177C/serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF
Certificate serial: 2E71
Authority key identifier: 22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/D7BA40025D1C11ECA5897B66C4F9AE02.roa
Signing time: Thu 06 Jul 2023 15:54:13 +0000
ROA not before: Thu 06 Jul 2023 15:54:13 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 32590
IP address blocks: 45.121.184.0/23 maxlen: 23
45.121.186.0/23 maxlen: 23
103.10.124.0/23 maxlen: 24
103.28.54.0/23 maxlen: 24
2404:3fc0::/48 maxlen: 48
2404:3fc0:1::/48 maxlen: 48
2404:3fc0:2::/48 maxlen: 48
2404:3fc0:3::/48 maxlen: 48
2404:3fc0:4::/47 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11889 (0x2e71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915177C/serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF
Validity
Not Before: Jul 6 15:54:13 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64a6e3a5-ec94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:f7:6b:52:ac:33:bf:5a:02:8c:78:23:c6:
a4:ac:21:15:3d:77:e2:3b:ca:b6:19:e8:2d:3d:09:
c3:55:74:af:11:3b:37:2d:7c:0f:69:69:8e:66:62:
c3:1e:86:0d:be:6d:2a:b3:e4:97:19:3e:0c:22:df:
a7:c2:18:bc:81:3a:6e:db:83:8e:6d:6b:5d:ee:ef:
ed:6d:a3:3c:55:21:8f:57:6e:80:88:60:47:91:7f:
d2:d0:46:c2:6e:03:df:7e:1e:4e:24:97:69:7e:2a:
85:bb:b6:56:65:fa:43:df:de:22:dd:d3:00:b3:8d:
6b:e7:9d:3d:e0:b5:ba:65:0a:58:4b:c9:9c:da:cc:
dc:cb:55:91:62:05:c1:ff:86:d3:f6:66:07:5a:3d:
96:9c:a9:d7:31:bf:1d:25:78:bb:1f:8d:e0:cc:9b:
68:41:da:bb:8c:05:c1:e6:43:4a:3c:40:4b:9e:8e:
2e:55:7f:11:dd:5f:dc:d9:54:dd:6e:5f:cc:51:c8:
3a:32:76:63:2b:42:28:5e:4c:73:4a:d5:f7:cc:c2:
5a:d1:49:80:18:e4:69:e9:a5:28:16:75:17:69:1c:
74:3d:49:82:6f:7b:6f:3f:d2:e0:dc:ef:d0:5a:a2:
f2:5c:be:7b:9d:71:e3:df:28:1b:40:0b:31:bf:b2:
41:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7C:F3:B0:FB:7E:BC:74:73:50:05:7A:E0:5D:AA:79:EE:B4:E1:EA
X509v3 Authority Key Identifier:
keyid:22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/D7BA40025D1C11ECA5897B66C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.121.184.0/22
103.10.124.0/23
103.28.54.0/23
IPv6:
2404:3fc0::-2404:3fc0:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
21:04:2d:0c:05:15:12:b8:d2:d6:75:ee:78:98:29:b1:1b:36:
8b:a2:ac:41:b1:66:0b:00:b4:46:ec:30:17:47:49:00:8b:fe:
bd:ec:e5:64:87:ef:48:07:f8:85:44:6b:69:05:3e:8e:df:4f:
45:f4:be:3c:76:1d:00:9b:ed:22:c0:b8:bb:51:12:f2:0a:4d:
74:f2:59:c6:f0:63:42:30:d3:a1:5a:63:21:a2:f9:ab:9b:ba:
a4:62:a6:a6:62:7e:c5:07:30:99:2a:90:4e:c2:da:31:4b:b8:
9a:17:93:62:2b:c5:90:b4:26:93:37:42:23:9f:8d:74:f9:2a:
81:15:4e:f7:10:c9:a3:f9:0b:fe:88:e8:d9:77:0d:ed:41:81:
0d:f3:cb:14:ae:94:5c:24:65:13:f7:87:da:23:ea:b3:0c:7b:
2a:7c:ec:1b:b0:d6:4c:a3:a6:ab:dd:44:35:8c:54:a8:c8:a3:
75:20:9a:16:0a:ab:54:81:0e:51:6f:0c:f2:f7:dd:d1:7c:ee:
ed:4e:60:41:ba:54:ff:79:8f:d5:2d:3f:f9:ae:61:85:c1:51:
93:13:ee:55:98:0f:c2:08:dd:42:9c:ba:d6:5c:c3:e3:d5:28:
4a:28:7d:08:a6:1c:c1:11:f0:ba:7a:14:c3:f5:19:ef:81:83:
89:93:c8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 6 14:29:45 2023 by rpki-client on console-ams.rpki-client.org