Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/48EDB5C00C2011EE8884CE62C4F9AE02.roa
File: 48EDB5C00C2011EE8884CE62C4F9AE02.roa (raw, json)
Hash identifier: 76ghIGWaR6upnkwxJUEGBQuq11qOvhVMo/Brhu9jhhU=
Subject key identifier: BD:E9:ED:12:5B:22:D0:E4:60:F3:7F:BA:46:0F:B6:C6:56:0E:BD:AB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7417
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/48EDB5C00C2011EE8884CE62C4F9AE02.roa
Signing time: Fri 16 Jun 2023 08:32:10 +0000
ROA not before: Fri 16 Jun 2023 08:32:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58906
IP address blocks: 43.240.5.0/24 maxlen: 24
45.64.9.0/24 maxlen: 24
45.248.25.0/24 maxlen: 24
103.47.14.0/24 maxlen: 24
103.62.147.0/24 maxlen: 24
103.101.117.0/24 maxlen: 24
103.182.160.0/23 maxlen: 24
103.211.190.0/23 maxlen: 24
103.225.204.0/24 maxlen: 24
103.248.120.0/24 maxlen: 24
103.248.122.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29719 (0x7417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 16 08:32:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=648c1e0a-37e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:96:a4:c9:85:99:4f:7a:aa:b0:f7:39:ec:
eb:23:5d:6a:96:d9:8f:df:5b:d3:eb:52:b5:c8:14:
de:a0:ff:b2:17:23:76:ec:41:d6:d8:a4:97:f9:25:
57:2e:a6:21:eb:3a:6a:0b:c4:0b:1a:0c:2f:34:d9:
4e:49:86:c1:a3:de:97:71:8b:38:5f:0d:8e:47:16:
01:75:5e:9f:e5:cf:3c:1f:2a:cf:0c:00:20:9e:18:
3b:e0:a6:c4:29:fc:16:8d:68:05:e5:a3:07:07:8c:
09:24:f4:b3:46:da:f8:8c:6a:52:8a:59:fb:b3:3f:
f6:7e:11:33:67:bb:40:11:7f:86:fb:86:ab:5b:70:
7a:ad:bc:93:a3:bc:7c:1f:52:25:88:e7:88:8c:5e:
90:c3:15:26:43:f7:88:51:78:e8:56:77:d3:77:d0:
24:9d:2a:fb:c4:ec:b8:28:b4:b7:f7:88:81:f9:77:
5f:be:7b:a2:78:ff:87:26:39:c8:19:22:b8:c2:61:
8c:4f:7a:17:3c:ea:ed:0e:39:51:0a:44:a8:b8:08:
9d:8b:77:b9:7a:2a:46:86:2e:e8:24:17:78:4c:60:
ab:d8:99:62:45:3e:ba:31:c2:ed:2f:14:28:59:e7:
5c:fb:44:5a:6f:99:9e:06:8e:41:6e:48:2f:d1:54:
51:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E9:ED:12:5B:22:D0:E4:60:F3:7F:BA:46:0F:B6:C6:56:0E:BD:AB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/48EDB5C00C2011EE8884CE62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.240.5.0/24
45.64.9.0/24
45.248.25.0/24
103.47.14.0/24
103.62.147.0/24
103.101.117.0/24
103.182.160.0/23
103.211.190.0/23
103.225.204.0/24
103.248.120.0/24
103.248.122.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:02:2c:ff:e5:4e:63:ee:4d:1a:73:0d:c3:a7:e9:c5:40:a4:
cc:cc:06:ce:59:a3:09:02:49:3c:c3:05:34:3e:78:0a:11:6f:
1a:03:79:05:1f:18:2a:de:98:9b:ef:19:a4:5d:d9:08:ea:c2:
b2:e6:25:e9:5a:8c:0c:e9:c5:bd:5d:68:59:35:0b:ea:4d:3d:
47:02:a5:75:da:c5:09:05:ba:13:a9:a5:4c:2a:ac:88:f8:47:
1d:37:a0:0a:17:7b:de:c8:7f:3d:c7:6f:29:14:69:8d:7d:56:
2f:68:4e:0f:df:ef:f4:43:96:3f:84:7e:1c:8b:ec:15:63:0f:
c4:33:11:fb:21:38:cd:10:27:64:95:18:83:98:d2:81:68:6b:
5b:44:71:90:d8:91:c7:7c:3f:80:50:47:d8:8f:91:a4:b3:33:
06:36:f3:5c:2d:a3:39:7a:0a:a7:bd:35:e0:7b:c4:57:21:9f:
0a:9a:38:06:d9:8e:9f:ed:23:dd:70:b5:02:55:d0:10:a4:f4:
eb:05:b0:ee:52:3c:41:99:3f:fe:7a:2c:e0:99:cd:28:94:e8:
6a:2a:ed:61:07:b9:6f:41:3b:c8:dc:bc:d4:4e:a3:74:96:64:
2e:8a:9d:52:e2:85:09:c4:b1:c9:e0:d5:e5:93:09:a9:fc:15:
76:28:c6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 4 12:56:20 2023 by rpki-client on console-fra.rpki-client.org