Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/F40E670A88B911ED85D4F75CC4F9AE02.roa
File: F40E670A88B911ED85D4F75CC4F9AE02.roa (raw, json)
Hash identifier: mVOwZ4wJys8rAWd+fNY2a+zRzFHT+YrIH4r2gV3dyxQ=
Subject key identifier: CD:B5:14:FA:34:FB:6B:0B:1E:F1:2B:AE:40:F1:16:60:44:28:79:21
Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320
Certificate serial: 05F8
Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/F40E670A88B911ED85D4F75CC4F9AE02.roa
Signing time: Fri 10 Mar 2023 02:30:06 +0000
ROA not before: Fri 10 Mar 2023 02:30:06 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 133929
IP address blocks: 43.225.59.0/24 maxlen: 24
103.252.16.0/22 maxlen: 22
103.252.16.0/23 maxlen: 23
103.252.18.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1528 (0x5f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320
Validity
Not Before: Mar 10 02:30:06 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=640a962d-d09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b0:ce:84:02:98:44:ef:dd:fe:5c:4c:56:3b:
db:8b:fe:1b:78:b7:63:b1:eb:90:94:2b:3b:03:35:
4c:63:9a:17:3b:f6:ab:f2:85:7a:72:ee:bb:d8:a2:
b7:88:3e:67:0c:45:f0:5c:cb:2e:e4:8d:13:03:3d:
f9:f0:c7:c6:59:73:3e:23:9b:65:10:cb:7f:26:0d:
e0:54:d5:1b:0a:1b:00:01:18:28:a0:c3:17:e8:5f:
ad:42:93:7e:ca:08:7a:82:04:ff:b4:c8:3d:e8:16:
82:08:1d:33:8f:f3:0a:56:46:e4:b9:3f:5d:92:ee:
1a:36:a4:e2:49:69:1c:8a:18:d9:56:cf:21:7e:67:
7c:7a:a1:51:c3:e5:e5:23:66:f9:55:a0:98:a0:c0:
7a:e8:c1:aa:0e:93:ee:07:d5:3a:ce:7c:cc:82:86:
99:78:f0:69:41:e5:73:8f:ce:68:d1:e2:e8:44:08:
2b:44:71:e5:ff:81:dd:b6:50:56:7a:4c:b3:58:fb:
6b:be:2c:6d:48:85:7e:b5:64:f0:d5:e0:08:bb:53:
89:44:38:d2:d8:d2:5a:e9:81:49:d9:2c:4e:9e:14:
46:d3:1f:cb:15:b4:1a:68:51:48:10:9f:71:b7:44:
38:8a:9b:fb:a1:41:3b:ce:2f:db:05:11:aa:b1:ca:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B5:14:FA:34:FB:6B:0B:1E:F1:2B:AE:40:F1:16:60:44:28:79:21
X509v3 Authority Key Identifier:
keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/F40E670A88B911ED85D4F75CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.59.0/24
103.252.16.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:f5:4a:64:9d:64:7f:e9:38:fa:f0:86:1c:a8:20:fb:5d:65:
f1:ab:a8:89:30:96:05:1a:65:a3:d8:21:d3:b4:d8:91:bf:fd:
14:b4:ac:e4:06:4a:c7:73:16:4c:c8:ea:09:3f:e3:71:d3:2a:
1e:7a:c6:f0:ed:0a:18:dc:f8:02:a6:ec:35:76:12:ed:8b:ee:
73:38:45:0e:0f:19:15:bd:6e:a6:52:73:7e:34:28:96:c8:fc:
e5:1e:cd:6f:87:a6:26:8b:ec:36:57:6f:56:16:b4:7a:68:04:
bc:ed:99:7b:29:f8:79:ef:a2:6c:96:a6:e8:1e:7e:dd:c6:03:
03:a8:63:5e:3e:68:40:89:1f:59:06:65:a0:3b:ec:26:5a:ef:
a3:23:00:0f:d6:4f:8c:16:eb:ad:6d:64:7d:51:61:c4:4c:35:
86:95:75:9f:a9:ae:47:43:2c:d7:32:14:5f:40:32:1a:0c:20:
09:85:8a:b3:19:86:e0:49:37:88:6a:a8:01:24:fa:9c:5a:a9:
3d:fa:52:1f:54:9e:0a:70:6f:a4:06:5c:7d:04:77:69:77:60:
58:66:ea:c0:0c:da:fa:7a:f3:04:07:56:66:29:a8:e9:e5:e1:
02:e3:65:23:63:89:6e:00:78:66:0e:e1:1e:3c:6c:9b:0e:37:
f5:67:6e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:47 2023 by rpki-client on console-fra.rpki-client.org