Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3DCC6DDE507311EE8F01C378C4F9AE02.roa
File: 3DCC6DDE507311EE8F01C378C4F9AE02.roa (raw, json)
Hash identifier: it1XITvux1Sq3oBi01TB/CJsKTfIsjJOhbOc2Il5bsU=
Subject key identifier: 19:38:97:17:D2:0A:61:1F:AA:25:DC:4B:E9:BD:A2:BF:64:5A:AE:EA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 79E7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3DCC6DDE507311EE8F01C378C4F9AE02.roa
Signing time: Mon 11 Sep 2023 07:20:43 +0000
ROA not before: Mon 11 Sep 2023 07:20:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58640
IP address blocks: 43.239.68.0/22 maxlen: 24
103.14.124.0/22 maxlen: 24
103.30.140.0/22 maxlen: 24
103.80.64.0/22 maxlen: 24
103.110.200.0/22 maxlen: 24
103.198.28.0/22 maxlen: 24
103.220.220.0/22 maxlen: 24
103.225.40.0/22 maxlen: 24
103.245.116.0/22 maxlen: 24
144.48.76.0/22 maxlen: 24
163.47.140.0/22 maxlen: 24
163.47.152.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 11:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31207 (0x79e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 11 07:20:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64febfca-2df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:dd:a5:2c:e1:f1:ef:50:fb:15:04:01:11:41:
8a:a7:47:c3:3e:5a:95:76:f0:1f:c8:05:04:fa:36:
77:ee:44:96:cd:50:cb:13:fa:09:40:5e:8d:18:7f:
16:07:87:c9:d5:b8:35:97:48:53:ed:a3:94:50:54:
a6:7e:6a:67:b4:92:88:88:25:f4:a4:cd:ee:79:d8:
5b:3e:15:59:30:fb:49:2e:3c:de:b1:a9:26:66:ea:
ec:9c:7f:5d:00:73:03:5f:33:91:7f:c0:ad:96:0c:
33:95:64:f1:82:af:c8:f2:ee:3d:44:4a:8f:36:28:
25:bd:c6:29:c8:66:2f:2b:84:4c:14:e4:50:16:02:
f1:d9:27:a3:7b:f9:6a:6a:f5:7f:e5:de:c9:f6:c4:
11:14:1e:51:aa:d6:5e:ae:01:8e:d7:9b:fa:3b:26:
13:44:4f:8c:5a:8f:2c:45:2a:6d:a1:49:23:64:c6:
a6:39:07:c3:67:c1:da:39:0a:f4:82:1e:e7:25:bf:
91:8f:20:c4:fd:0b:30:56:e3:c4:b6:4e:62:8a:bd:
5f:9a:66:94:81:8c:15:5f:5e:2c:94:86:54:3d:83:
1a:be:2b:69:28:d8:d8:3c:36:7c:f0:2a:b2:ef:40:
a7:2b:eb:85:ac:3b:1e:ce:3c:2e:69:a7:11:7b:8d:
9e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:38:97:17:D2:0A:61:1F:AA:25:DC:4B:E9:BD:A2:BF:64:5A:AE:EA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3DCC6DDE507311EE8F01C378C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.68.0/22
103.14.124.0/22
103.30.140.0/22
103.80.64.0/22
103.110.200.0/22
103.198.28.0/22
103.220.220.0/22
103.225.40.0/22
103.245.116.0/22
144.48.76.0/22
163.47.140.0/22
163.47.152.0/22
Signature Algorithm: sha256WithRSAEncryption
87:4f:f7:c2:bd:b9:22:b4:43:99:13:01:33:44:15:49:88:d5:
59:2a:7b:8f:15:30:47:05:c5:86:d7:63:e0:0b:d4:80:d6:e3:
fd:d2:dc:b9:c2:7a:d4:4f:8d:00:fa:d4:1f:26:15:50:58:bb:
d1:51:78:9c:e7:2d:04:95:74:85:74:00:3c:a2:7b:3c:50:34:
56:76:ad:45:ce:25:e4:cf:5d:db:15:8b:8e:3a:ea:87:22:39:
dc:fb:0e:bd:ec:98:6d:13:fc:3b:85:c9:11:da:4e:ee:87:f0:
7e:1f:c7:cb:ee:fe:9f:79:8b:0f:f3:09:fa:92:64:10:ac:03:
09:1b:7f:08:3c:76:74:b6:1b:aa:bd:d8:7f:5e:c4:ae:37:36:
d6:37:c5:79:19:df:01:0d:45:9d:e7:9f:fa:94:d5:cb:33:5b:
cb:71:59:3b:a8:5f:db:06:12:19:c3:3d:97:e8:dd:f8:61:a4:
2b:47:33:15:c2:d5:67:7a:29:d4:eb:dc:c6:fd:48:9c:95:5b:
5a:dc:be:ef:5d:91:21:fe:e8:c9:15:f3:09:4a:0c:bb:11:17:
27:fd:89:2b:fe:c2:e6:a7:7f:33:64:dd:3e:30:db:7d:f5:26:
dd:c4:a5:b2:c6:b7:1d:a1:d4:ff:a1:12:7d:66:32:6a:c1:e4:
7a:b2:a4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 14:56:03 2024 by rpki-client on console-ams.rpki-client.org