Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6C436A8940311EEA4BB7726C4F9AE02.roa
File: B6C436A8940311EEA4BB7726C4F9AE02.roa (raw, json)
Hash identifier: DU42izzn+6iYRhOcLsXLexBVd+fRC8Q14dtKoauykRQ=
Subject key identifier: 71:B9:73:C7:A1:B6:55:3D:B2:00:E6:69:E9:E8:43:78:F8:EB:9F:E4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7F91
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6C436A8940311EEA4BB7726C4F9AE02.roa
Signing time: Wed 06 Dec 2023 06:50:17 +0000
ROA not before: Wed 06 Dec 2023 06:50:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58906
IP address blocks: 43.240.5.0/24 maxlen: 24
45.248.25.0/24 maxlen: 24
103.47.14.0/24 maxlen: 24
103.101.117.0/24 maxlen: 24
103.182.160.0/23 maxlen: 24
103.211.190.0/23 maxlen: 24
103.225.204.0/24 maxlen: 24
103.248.122.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32657 (0x7f91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Dec 6 06:50:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=657019a9-1518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a0:dc:c1:88:9c:9d:18:a3:fa:2f:d8:43:3d:
bf:eb:54:64:dd:94:bb:41:6b:8d:fe:d9:bb:6d:57:
f6:14:48:fc:1f:22:2f:aa:a4:b5:d7:7a:0e:1a:b9:
9d:92:4f:50:9f:63:3d:b8:6d:97:4a:53:7c:3b:a3:
dc:44:cc:aa:39:c5:f7:d5:6c:86:09:0c:7f:7f:51:
e3:34:9d:a4:43:5f:5c:33:5f:e0:36:db:a5:22:bc:
d0:5d:f0:d0:02:ed:ef:5f:2b:c9:da:c2:ef:e3:81:
79:c1:f9:36:15:70:ed:d2:f3:ea:42:a9:8c:22:54:
57:b6:ab:50:ca:78:29:e2:7c:92:b8:84:1e:a7:e1:
c0:fd:90:b3:fc:60:af:41:29:d4:33:22:bb:38:d4:
db:7d:69:df:94:29:11:ce:9f:79:9a:40:02:08:71:
4e:cb:e1:39:7e:a1:fc:3e:b4:fe:49:51:2b:3c:de:
88:3d:52:75:15:98:fd:a6:01:8e:4e:cc:21:bb:89:
5a:80:09:ea:72:28:7d:40:57:6c:b0:86:93:8f:32:
ed:c7:0f:b7:23:7a:1e:fa:e0:0f:8f:cf:44:75:e0:
75:97:30:dc:79:a4:69:1b:46:c6:cc:c3:6b:a6:f0:
3e:df:8d:23:48:74:58:22:69:1f:7c:f7:39:29:bd:
8a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B9:73:C7:A1:B6:55:3D:B2:00:E6:69:E9:E8:43:78:F8:EB:9F:E4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6C436A8940311EEA4BB7726C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.240.5.0/24
45.248.25.0/24
103.47.14.0/24
103.101.117.0/24
103.182.160.0/23
103.211.190.0/23
103.225.204.0/24
103.248.122.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:f8:f2:ad:b6:91:38:e8:46:02:95:09:b9:76:32:5b:6d:a4:
b6:f5:c5:6b:b4:d5:83:ad:3d:39:bf:c9:bd:3e:40:93:36:89:
ed:b5:5e:a4:3a:7c:df:4f:77:a7:96:a2:f6:00:48:1d:ae:50:
2c:9f:d2:23:f3:84:1d:5b:40:06:cc:65:3a:7d:fa:21:28:ec:
36:37:12:a2:9f:9e:5a:e3:b5:33:45:98:5d:16:5e:9c:35:b2:
81:c5:43:53:dd:b3:d2:ca:d9:0f:bd:03:61:52:2e:b6:30:0e:
be:fc:74:3d:6a:d4:d1:cc:b7:8f:1b:5b:aa:a9:29:76:b3:9f:
71:34:51:f2:41:99:cf:82:f2:e9:13:d4:48:d1:e6:73:32:13:
42:56:7f:27:8b:24:cd:2c:e6:cc:e1:81:74:8e:13:69:c6:1c:
ba:88:c2:b4:1f:65:59:09:2e:5f:16:65:18:71:26:05:f8:dd:
9c:91:ab:78:09:38:03:10:d5:0d:5e:90:cf:78:58:d3:d9:2f:
ac:ed:7a:d5:ba:52:e0:ce:79:ae:32:c1:19:b1:12:2f:ee:cb:
5d:3f:fc:dd:1a:cf:3e:92:aa:f9:4f:30:ed:78:a3:3d:e2:2d:
85:d3:b2:b8:fb:10:2c:49:8b:c6:3c:14:c1:2f:40:66:cf:78:
03:ee:34:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 6 08:23:47 2023 by rpki-client on console-fra.rpki-client.org