Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B5BA148299AB11EE892E867EC4F9AE02.roa
File: B5BA148299AB11EE892E867EC4F9AE02.roa (raw, json)
Hash identifier: tWdP0MAmoh2ssWsvyZv8ccrWBML41Eots9uCXeoa52Q=
Subject key identifier: 4F:6C:EC:EF:A8:5D:C7:72:7E:92:99:9A:68:BA:8E:CC:FA:49:44:05
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7FDA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B5BA148299AB11EE892E867EC4F9AE02.roa
Signing time: Wed 13 Dec 2023 11:35:26 +0000
ROA not before: Wed 13 Dec 2023 11:35:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134014
IP address blocks: 45.126.168.0/22 maxlen: 24
103.59.200.0/22 maxlen: 24
103.66.232.0/22 maxlen: 24
103.137.94.0/24 maxlen: 24
103.185.178.0/24 maxlen: 24
103.185.236.0/23 maxlen: 23
103.185.237.0/24 maxlen: 24
103.198.100.0/22 maxlen: 24
182.54.148.0/22 maxlen: 24
2001:df0:99c0::/48 maxlen: 48
2402:fbc0::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 09 Feb 2024 08:21:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32730 (0x7fda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Dec 13 11:35:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=657996fe-4e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:0e:3e:ab:63:00:25:0b:af:d2:d4:ab:3b:
2f:50:4a:7a:c7:e3:a1:d0:8b:ed:a0:d0:c9:47:2d:
f2:5d:ae:4e:03:58:ce:79:79:44:bf:4c:11:d2:d1:
9c:38:ff:8a:84:85:14:1f:df:f3:dd:f5:38:95:ed:
64:88:9e:37:d9:d9:68:32:b7:e7:1b:62:4e:83:80:
e3:79:90:48:9f:5a:9c:ca:c0:b0:b6:4a:b0:cf:fb:
81:b6:c1:f5:75:b3:6a:fe:a7:f3:90:8b:e9:7d:0f:
f6:ed:ad:62:d3:9a:10:c1:1d:0a:be:e3:19:32:7c:
c8:d7:3c:2f:95:1b:d2:2b:11:f6:76:5e:19:ef:e9:
f4:cb:c3:fe:f8:25:9a:43:22:7d:cd:ff:01:eb:10:
bd:97:88:93:e1:bd:ac:b6:3e:9b:56:9d:cc:9b:be:
ff:c0:b3:10:f2:93:c4:5d:50:ca:5d:1f:81:60:5f:
70:c0:f8:54:60:fd:6b:2a:13:d5:49:b5:65:15:a3:
15:b1:77:62:e1:3c:ad:0b:7c:e2:60:e9:3c:53:a1:
e6:50:b0:a7:e7:85:12:11:04:3c:f3:72:7e:04:2a:
7a:33:61:f8:bb:71:91:ac:3d:eb:93:89:bd:cc:17:
44:23:1a:e2:37:4a:81:70:bb:73:8a:94:5e:38:d8:
e1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6C:EC:EF:A8:5D:C7:72:7E:92:99:9A:68:BA:8E:CC:FA:49:44:05
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B5BA148299AB11EE892E867EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.126.168.0/22
103.59.200.0/22
103.66.232.0/22
103.137.94.0/24
103.185.178.0/24
103.185.236.0/23
103.198.100.0/22
182.54.148.0/22
IPv6:
2001:df0:99c0::/48
2402:fbc0::/32
Signature Algorithm: sha256WithRSAEncryption
76:e4:cf:27:24:c9:ba:4c:55:61:bc:bd:75:75:a7:98:21:d2:
4c:42:75:51:2e:82:d6:73:51:75:50:52:a2:9a:3a:cf:b0:e4:
3a:da:8d:e4:d9:30:57:d4:6b:3c:ce:b9:31:42:06:0d:53:31:
26:9c:db:5e:eb:8c:67:3d:2b:0c:27:1e:cc:fa:fc:0d:14:ef:
5b:93:a1:2a:61:66:4f:d7:74:c9:13:d4:28:8c:04:5f:9c:c0:
90:35:88:e5:08:18:17:25:56:bd:7b:43:72:6f:93:b4:be:08:
03:3a:e7:63:c6:bd:48:ba:be:8c:6e:c1:be:35:9c:32:d8:69:
08:17:b4:9f:aa:bb:ab:e3:35:7a:16:34:27:60:85:67:17:95:
9b:1c:83:f7:26:e7:29:9a:00:14:71:b6:31:60:72:45:8c:a4:
b9:35:4a:3e:9b:1b:b1:23:41:98:02:c7:6e:4b:7b:95:85:ec:
5c:70:29:ea:97:32:45:98:9e:43:1e:fc:a1:10:40:87:40:8b:
49:9b:39:bb:8f:4a:88:ad:d6:c9:53:da:f5:f1:4c:f8:be:a4:
16:43:e9:78:fe:5b:59:80:2f:2a:40:ff:b5:95:1a:01:ec:d5:
f3:53:ba:26:40:05:6d:06:90:70:00:f8:34:4c:1c:77:92:a9:
8c:cd:58:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 12:53:18 2024 by rpki-client on console-fra.rpki-client.org