Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C309EEC228A11EB8BBA4B7EC4F9AE02.roa
File: 3C309EEC228A11EB8BBA4B7EC4F9AE02.roa (raw, json)
Hash identifier: YI2DQK/ucEpXB3gGyjkc69IpcDBY+ywQ8t5KKcrHViA=
Subject key identifier: 52:AA:1F:0B:91:54:D3:0A:49:3C:90:24:65:E2:6F:3F:91:A2:DE:EF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6B19
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C309EEC228A11EB8BBA4B7EC4F9AE02.roa
Signing time: Wed 10 May 2023 16:17:59 +0000
ROA not before: Wed 10 May 2023 16:17:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134293
IP address blocks: 36.255.240.0/22 maxlen: 24
103.30.224.0/22 maxlen: 24
103.108.0.0/23 maxlen: 24
2400:8ee0:1::/48 maxlen: 48
2400:8ee0:2::/48 maxlen: 48
2400:8ee0:3::/48 maxlen: 48
2400:8ee0:4::/48 maxlen: 48
2400:8ee0:5::/48 maxlen: 48
2400:8ee0:6::/48 maxlen: 48
2400:8ee0:7::/48 maxlen: 48
2400:8ee0:8::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 15 Mar 2024 07:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27417 (0x6b19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:17:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc3b7-824b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:09:0a:77:56:ff:49:1e:17:e1:48:9b:b5:
ec:c6:52:db:56:31:ac:f0:c0:d7:82:be:c4:bb:91:
79:83:31:bc:9d:60:60:d2:29:92:ba:e4:17:50:20:
a6:b1:51:0b:70:7b:ce:19:6e:6c:aa:f4:ff:32:db:
db:e6:0f:54:87:66:84:98:7d:79:67:8d:9b:73:19:
ff:7f:9b:b4:ef:49:0c:c2:7f:94:3d:4f:73:1e:cd:
ef:bf:f3:7f:ed:16:40:36:1e:e9:b6:e8:3a:94:ae:
d2:2f:c0:98:4a:57:6b:b6:24:6d:50:77:55:c3:af:
ab:5d:24:7e:80:94:6f:71:d5:5a:0a:8a:97:d5:69:
5f:e5:11:e9:58:92:51:4b:6f:01:f9:75:cc:47:59:
a7:9b:bf:a3:dd:8a:23:b0:2a:6d:10:59:4f:15:8e:
4d:ba:cc:25:86:62:15:77:68:0d:94:5e:7f:6e:b7:
15:b0:fe:c4:c5:9a:58:97:39:b0:4b:d2:69:0b:86:
83:c6:de:36:f0:95:0e:ad:6e:2c:a0:9f:4c:12:c3:
ea:a3:e2:1f:31:31:dc:ee:71:25:b8:27:6e:b8:83:
32:5c:c0:47:d1:ef:80:3f:ff:f0:a8:bd:5a:00:80:
66:6f:bb:a6:00:e1:65:5b:dd:ae:c6:6b:24:ea:83:
98:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AA:1F:0B:91:54:D3:0A:49:3C:90:24:65:E2:6F:3F:91:A2:DE:EF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C309EEC228A11EB8BBA4B7EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.240.0/22
103.30.224.0/22
103.108.0.0/23
IPv6:
2400:8ee0:1::-2400:8ee0:8:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0e:46:95:34:0b:8e:43:97:77:99:b2:0e:1a:91:7a:4d:a6:ab:
58:32:51:63:55:10:8e:67:76:b3:6b:bc:62:f8:bd:85:45:11:
0a:a6:14:8b:35:10:fe:0d:a9:21:ad:a0:2d:54:df:a6:69:4b:
4c:19:e8:cb:81:82:e4:23:0c:da:61:ab:d7:e1:47:38:b8:8d:
c2:91:e0:cb:bd:b4:c0:96:45:1c:be:6d:e3:11:0b:6d:97:6a:
9c:30:17:b9:53:81:bb:40:20:77:f5:03:ee:7e:bc:7f:03:82:
fc:5c:eb:49:8c:ab:cf:56:0d:bd:56:43:77:b4:05:b3:0a:5d:
6e:27:4b:d6:d5:1a:15:f2:74:eb:73:95:c6:c1:94:7f:7e:00:
77:f4:9f:b8:60:a6:ed:8f:84:8a:20:85:1b:db:9e:e5:2d:50:
a9:47:05:69:10:b7:ff:a2:21:08:2f:d1:1d:c0:89:9a:de:e9:
a6:8c:bf:4b:53:a4:b4:b7:f0:2e:53:4c:6d:2c:22:22:1d:4d:
d8:69:f7:85:96:77:84:9a:4e:8a:fe:d3:8a:31:f5:c4:6e:e7:
d0:60:31:0b:e2:6b:00:0d:06:47:5a:87:f5:77:d6:1d:db:02:
db:32:34:91:69:76:9f:90:43:79:2d:2c:48:a8:b5:d0:56:57:
1e:1c:a7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 10:42:50 2024 by rpki-client on console-fra.rpki-client.org