Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8458F9C0F51711EBA5237E58C4F9AE02.roa
File: 8458F9C0F51711EBA5237E58C4F9AE02.roa (raw, json)
Hash identifier: CS7cXNmQ7hSAgOQHmaRRkis+0wNvR4lwCaX37jQMluk=
Subject key identifier: AB:86:C8:F0:0A:B3:9E:BD:82:74:6E:A7:DF:1F:FB:6F:66:2A:31:60
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7240
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8458F9C0F51711EBA5237E58C4F9AE02.roa
Signing time: Wed 17 May 2023 09:22:07 +0000
ROA not before: Wed 17 May 2023 09:22:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132925
IP address blocks: 43.249.188.0/24 maxlen: 24
43.249.189.0/24 maxlen: 24
103.135.120.0/23 maxlen: 24
103.161.12.0/23 maxlen: 24
103.169.80.0/23 maxlen: 24
103.171.56.0/23 maxlen: 24
103.172.6.0/23 maxlen: 24
103.172.12.0/23 maxlen: 24
103.172.198.0/23 maxlen: 24
103.172.224.0/23 maxlen: 24
103.172.228.0/24 maxlen: 24
103.172.229.0/24 maxlen: 24
103.173.18.0/23 maxlen: 24
103.173.48.0/23 maxlen: 24
103.173.68.0/23 maxlen: 24
103.199.184.0/22 maxlen: 22
103.233.26.0/24 maxlen: 24
103.233.27.0/24 maxlen: 24
103.236.108.0/24 maxlen: 24
103.236.109.0/24 maxlen: 24
103.236.110.0/24 maxlen: 24
103.236.111.0/24 maxlen: 24
150.129.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29248 (0x7240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 17 09:22:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64649cbf-4199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8a:96:19:b0:45:f2:77:51:0e:76:25:26:f2:
5d:fe:a5:60:c6:54:e7:e2:47:4f:11:e9:85:81:d7:
4f:38:d7:ae:8c:74:71:0d:f4:7b:73:da:6c:8d:8c:
f3:69:97:b5:21:2e:f8:b8:6c:5b:10:0e:1b:d4:15:
59:f7:ba:cb:8a:1f:a4:8b:e1:5d:a8:45:b3:cd:ad:
bd:4f:58:c5:5f:47:f2:5e:af:86:ec:a7:9f:2f:cd:
07:35:75:0d:4c:74:54:dc:cc:e3:09:5d:21:21:34:
c1:18:a7:97:3a:c8:73:80:a5:f5:d1:50:07:3d:0d:
12:57:b0:87:cb:b6:00:7e:79:1e:a0:31:bf:fd:5d:
fc:aa:52:20:f9:46:be:29:f2:e1:e4:3f:ff:a8:ae:
38:07:27:cd:f4:45:f9:8d:e3:3a:13:cf:21:10:bd:
7c:a8:40:0b:75:bc:fc:29:27:23:4e:1d:b4:06:5d:
fc:9b:e1:a5:70:ea:62:7e:f2:96:2f:11:15:38:bd:
84:65:0c:dd:eb:8b:de:1f:86:5a:35:de:a1:70:21:
2a:c5:8b:04:3f:94:fd:b0:db:45:40:74:07:23:b0:
b0:66:62:c2:52:9b:ab:a5:58:69:e7:04:86:ea:9a:
d9:dc:76:a6:d1:ed:a8:67:6a:6e:2e:53:b4:a1:34:
5e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:86:C8:F0:0A:B3:9E:BD:82:74:6E:A7:DF:1F:FB:6F:66:2A:31:60
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8458F9C0F51711EBA5237E58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.249.188.0/23
103.135.120.0/23
103.161.12.0/23
103.169.80.0/23
103.171.56.0/23
103.172.6.0/23
103.172.12.0/23
103.172.198.0/23
103.172.224.0/23
103.172.228.0/23
103.173.18.0/23
103.173.48.0/23
103.173.68.0/23
103.199.184.0/22
103.233.26.0/23
103.236.108.0/22
150.129.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:22:eb:f1:7e:6a:66:e7:88:1e:46:5a:78:e1:6f:00:19:7d:
ff:4a:65:8d:ca:6c:f6:46:34:5a:a3:13:9b:88:08:d0:0f:eb:
25:fa:87:b8:01:70:2f:1f:4e:0c:9f:69:c8:f9:68:61:0f:a5:
c0:08:2d:38:c5:e8:f9:d9:61:a1:28:55:43:5a:c9:7f:5c:04:
15:34:d7:1f:f6:2c:c6:dc:3d:a0:6e:2d:e2:2b:7c:7b:fb:9a:
81:3e:b0:fe:11:2e:84:9b:cd:b0:98:e7:5e:8d:eb:c7:63:d1:
30:dd:c0:f2:86:4e:0f:ac:f7:84:dd:f3:8f:fb:36:ab:9a:c2:
41:a2:e6:c7:9d:36:af:10:f6:3b:c0:27:bb:f8:d6:4a:8a:99:
b1:1e:f4:4e:32:9d:2d:f6:68:dd:9c:82:12:cf:4d:51:01:a5:
e3:ce:ad:77:12:e8:22:06:40:e9:ed:e4:45:67:65:ec:d3:8e:
30:9d:c1:07:21:09:26:11:ca:4e:a1:cc:9a:5e:b2:b0:ec:5e:
11:38:23:3d:b6:6e:0b:82:db:e4:6f:c5:1e:f6:2f:5c:27:19:
98:01:75:b5:0d:68:11:8f:67:e9:0a:fe:37:0f:21:2e:c2:6c:
9f:fa:4d:70:db:6f:fd:b3:aa:07:54:bd:a6:99:02:23:26:0e:
0d:00:f8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 11 12:11:02 2023 by rpki-client on console-fra.rpki-client.org