Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/FC65D47CF6C011E8B316140AC4F9AE02.roa
File: FC65D47CF6C011E8B316140AC4F9AE02.roa (raw, json)
Hash identifier: Evne/lLU5FuDaYB+Ki8/M/UpHkazCOb7DnYNsNsaXIs=
Subject key identifier: FD:77:76:A7:F6:07:EB:49:6E:7C:64:39:92:73:D8:D4:4B:07:CF:84
Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial: 123B
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/FC65D47CF6C011E8B316140AC4F9AE02.roa
Signing time: Thu 18 Apr 2024 04:24:17 +0000
ROA not before: Thu 18 Apr 2024 04:24:17 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 19905
IP address blocks: 1.120.0.0/13 maxlen: 13
1.128.0.0/11 maxlen: 11
101.103.0.0/16 maxlen: 16
101.160.0.0/11 maxlen: 11
203.36.128.0/24 maxlen: 24
203.38.12.0/24 maxlen: 24
203.38.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 05:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4667 (0x123b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Validity
Not Before: Apr 18 04:24:17 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=6620a070-1547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:45:2a:75:fb:d4:6c:13:d5:c0:d5:0b:75:
c5:32:f6:7c:e2:3f:c8:0c:41:b3:50:ab:c0:d4:8d:
b3:ce:5c:ba:06:95:38:5d:cc:43:68:ae:24:11:ca:
f3:ac:84:c5:55:2e:1e:68:42:d2:68:a8:07:fb:fc:
a5:63:f3:19:6f:56:d3:fd:62:4a:55:e3:91:4a:6f:
61:a3:2d:1c:e9:b6:d5:2d:fc:c4:e7:48:cb:57:b3:
b7:23:ff:27:2e:9c:c2:d6:d6:d5:9d:d9:6e:a0:2f:
13:8c:3f:64:33:fd:f6:8f:17:85:c9:d5:0d:8e:6a:
08:68:77:23:97:d5:5e:c0:ef:25:9a:7c:4e:bf:6e:
7e:69:ea:a4:c7:a5:16:e4:6f:f8:e0:ab:51:07:7a:
e2:96:50:1e:0f:82:ee:f5:50:4e:e8:51:27:e4:b2:
14:e2:22:a3:84:0c:a9:c4:7f:10:e9:f8:b2:f3:bd:
eb:50:d5:1f:a4:ac:6b:91:3d:46:a9:49:6d:2b:d9:
dd:ad:70:19:a1:1d:51:c2:fe:8a:ce:92:99:87:b4:
e4:5c:c6:be:fd:11:6f:f4:d0:b0:34:97:e1:79:95:
3f:7a:30:57:73:77:71:0d:9d:44:06:49:83:14:0d:
5d:3a:1a:4e:9e:b1:74:49:34:16:d3:52:e6:5f:e9:
94:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:77:76:A7:F6:07:EB:49:6E:7C:64:39:92:73:D8:D4:4B:07:CF:84
X509v3 Authority Key Identifier:
keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/FC65D47CF6C011E8B316140AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.120.0.0-1.159.255.255
101.103.0.0/16
101.160.0.0/11
203.36.128.0/24
203.38.12.0/24
203.38.183.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:e9:11:84:f4:50:b7:a6:80:c8:4f:a0:17:95:51:ca:90:7d:
d6:a7:0f:6f:62:8e:c0:46:41:b5:38:f3:2c:29:cc:cd:19:61:
86:4e:48:75:af:24:13:10:fb:4c:29:6e:3a:73:26:ae:88:55:
a6:49:ca:91:f5:52:be:97:35:e7:da:6d:c0:7a:b3:70:dc:75:
39:9f:14:89:c0:05:d8:6d:d7:c7:d1:c4:c3:5f:a0:8d:75:9b:
6e:b0:9c:87:2f:41:bf:d1:62:d8:70:12:f7:13:47:4e:8e:01:
9b:86:db:88:a9:59:7e:9b:f2:55:ff:f4:66:c7:2e:8f:90:ed:
ce:2a:33:34:fc:31:cd:2e:52:bb:7a:df:99:16:e2:0d:1a:7c:
8a:83:29:df:b0:a8:4f:7d:ba:66:4b:bf:59:22:3a:42:78:3a:
fd:87:12:e0:46:c2:81:bc:25:b2:ba:2c:5e:45:cc:2a:2b:8c:
1a:bc:68:71:35:7f:4e:f3:89:a8:e1:b9:2f:3d:a4:34:dc:0d:
e6:64:53:b5:2a:6f:e9:f2:9e:56:bb:a1:4d:0c:1f:3c:a6:63:
6f:87:85:10:2d:bf:2d:ff:22:94:29:0c:1c:b5:84:04:a8:87:
68:41:20:43:db:7b:c4:27:af:ca:13:6c:64:6d:45:a0:65:29:
93:ca:1a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:10 2024 by rpki-client on console-fra.rpki-client.org