Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5C834314FBBA11ED9E093480C4F9AE02.roa
File: 5C834314FBBA11ED9E093480C4F9AE02.roa (raw, json)
Hash identifier: WCuwMPsoZTBMPmvHmJJLXuuATX0YPdpAM99rAyNkZRA=
Subject key identifier: B1:9B:BE:C4:CF:32:D4:8C:42:05:63:91:47:E6:70:2E:2D:6C:81:4F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7598
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5C834314FBBA11ED9E093480C4F9AE02.roa
Signing time: Mon 17 Jul 2023 05:05:37 +0000
ROA not before: Mon 17 Jul 2023 05:05:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132296
IP address blocks: 43.248.68.0/24 maxlen: 24
43.248.69.0/24 maxlen: 24
43.248.70.0/24 maxlen: 24
43.248.71.0/24 maxlen: 24
45.119.12.0/24 maxlen: 24
45.119.13.0/24 maxlen: 24
45.119.14.0/24 maxlen: 24
45.119.15.0/24 maxlen: 24
103.57.252.0/24 maxlen: 24
103.57.253.0/24 maxlen: 24
103.57.254.0/24 maxlen: 24
103.57.255.0/24 maxlen: 24
103.116.169.0/24 maxlen: 24
103.121.4.0/23 maxlen: 24
103.147.174.0/23 maxlen: 24
103.148.138.0/23 maxlen: 24
103.155.212.0/24 maxlen: 24
103.155.213.0/24 maxlen: 24
103.157.206.0/23 maxlen: 24
103.157.230.0/24 maxlen: 24
103.157.231.0/24 maxlen: 24
103.171.126.0/23 maxlen: 24
103.174.26.0/24 maxlen: 24
103.174.27.0/24 maxlen: 24
103.176.75.0/24 maxlen: 24
103.177.58.0/23 maxlen: 24
103.177.128.0/24 maxlen: 24
103.177.129.0/24 maxlen: 24
103.181.102.0/24 maxlen: 24
103.181.103.0/24 maxlen: 24
103.182.58.0/24 maxlen: 24
103.182.59.0/24 maxlen: 24
103.201.136.0/24 maxlen: 24
103.201.137.0/24 maxlen: 24
103.204.164.0/24 maxlen: 24
103.204.166.0/24 maxlen: 24
103.255.36.0/24 maxlen: 24
103.255.37.0/24 maxlen: 24
103.255.38.0/24 maxlen: 24
103.255.39.0/24 maxlen: 24
2001:df5:ff80::/48 maxlen: 48
2402:5c80::/32 maxlen: 32
2407:6fc0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30104 (0x7598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 17 05:05:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64b4cc20-f744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:c7:0e:d7:c0:2b:45:0b:8b:50:e7:83:7b:
73:4a:20:9a:26:af:c6:4a:dd:cb:c9:29:b6:54:e6:
ed:e7:dc:0a:17:c3:d7:ac:0c:35:f0:2e:ac:58:9f:
7d:25:50:15:bd:76:fc:09:5d:32:9c:b7:8a:a8:b0:
86:09:63:7e:d5:47:2b:ad:d6:7f:40:16:99:8b:d0:
8c:16:c3:c2:46:b5:e4:d0:f2:18:75:98:ac:89:f4:
7d:58:2f:bd:79:73:a2:a7:4d:96:4a:e3:ef:b9:7f:
3a:a9:11:d4:6f:72:19:35:8c:9a:1f:69:cc:a7:c1:
ad:8c:4e:8a:1b:0f:ce:cf:7e:9a:77:48:89:c6:54:
b7:ec:87:c9:5e:1d:72:30:74:a0:1c:8c:bc:4b:dd:
75:8a:4d:98:b3:96:03:68:d2:30:48:bc:f0:04:11:
f7:54:f3:f8:b9:a3:28:1e:01:1d:35:2f:4e:51:f9:
97:3b:52:b5:2f:c1:93:f8:1a:92:a7:63:63:83:d2:
15:0c:62:03:bc:03:38:6a:a7:26:08:67:2c:9d:75:
58:20:8c:65:fe:5e:5f:1a:87:8d:04:3f:14:aa:c7:
67:89:a4:90:43:f6:76:af:db:2a:1e:cf:bd:fc:23:
48:ce:c6:71:4e:7f:e3:91:6d:0a:04:76:3e:df:b5:
ef:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9B:BE:C4:CF:32:D4:8C:42:05:63:91:47:E6:70:2E:2D:6C:81:4F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5C834314FBBA11ED9E093480C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.68.0/22
45.119.12.0/22
103.57.252.0/22
103.116.169.0/24
103.121.4.0/23
103.147.174.0/23
103.148.138.0/23
103.155.212.0/23
103.157.206.0/23
103.157.230.0/23
103.171.126.0/23
103.174.26.0/23
103.176.75.0/24
103.177.58.0/23
103.177.128.0/23
103.181.102.0/23
103.182.58.0/23
103.201.136.0/23
103.204.164.0/24
103.204.166.0/24
103.255.36.0/22
IPv6:
2001:df5:ff80::/48
2402:5c80::/32
2407:6fc0::/32
Signature Algorithm: sha256WithRSAEncryption
30:38:79:8b:23:3a:fb:ca:17:ee:02:0d:52:de:ce:ef:78:8a:
fa:54:3e:9e:fd:40:74:ed:da:76:81:e2:c6:eb:28:f9:da:dd:
48:07:14:bd:f1:e0:6e:32:75:0b:b8:77:58:e3:07:26:dc:83:
df:43:0b:1c:15:83:52:73:4b:1f:8c:7d:a5:0a:de:61:2d:a0:
58:81:4b:39:98:29:e9:dd:13:1b:0c:25:c4:2b:92:0e:1e:51:
99:20:3a:86:fc:34:e2:49:29:f7:93:a9:f4:1d:3f:cf:90:72:
1e:b7:7b:57:00:75:8d:69:39:0b:5a:8f:63:0e:c9:f5:7c:61:
64:54:1b:55:2e:41:aa:2e:15:f1:b0:9b:23:06:8f:10:f7:0d:
db:af:f0:85:a1:02:ec:36:d1:06:5a:b2:f4:5c:ac:20:21:66:
52:1d:53:c5:a3:54:aa:69:80:ee:04:16:50:9a:7a:42:2b:4b:
66:39:ef:8a:05:9a:3e:7f:50:46:82:91:b8:46:66:c3:0e:aa:
f1:c9:f7:8f:47:0c:1f:46:d1:ef:fd:4b:9a:4d:33:f0:4a:3c:
3e:34:2a:29:50:0d:e6:36:03:f6:9c:2a:26:ee:02:13:e3:d0:
7e:2f:94:4b:a6:b5:23:6d:f8:02:b4:99:7d:d4:9b:48:52:39:
93:92:4e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 25 13:17:01 2023 by rpki-client on console-ams.rpki-client.org