Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BB8191DACC0811EEB1158E36C4F9AE02.roa
File: BB8191DACC0811EEB1158E36C4F9AE02.roa (raw, json)
Hash identifier: /FtrLTnjv3LjSc5HkuOaiNcYchPc0R7Q0NEUO9N++/0=
Subject key identifier: C1:BE:33:C8:9D:17:51:8C:61:5D:F4:0B:2D:2D:E8:11:FD:92:67:17
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 830F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BB8191DACC0811EEB1158E36C4F9AE02.roa
Signing time: Thu 15 Feb 2024 13:47:18 +0000
ROA not before: Thu 15 Feb 2024 13:47:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58640
IP address blocks: 43.239.68.0/22 maxlen: 24
103.14.124.0/22 maxlen: 24
103.30.140.0/22 maxlen: 24
103.80.64.0/22 maxlen: 24
103.110.200.0/22 maxlen: 24
103.198.28.0/22 maxlen: 24
103.225.40.0/22 maxlen: 24
144.48.76.0/22 maxlen: 24
163.47.140.0/22 maxlen: 24
163.47.152.0/22 maxlen: 22
163.47.152.0/24 maxlen: 24
163.47.153.0/24 maxlen: 24
163.47.154.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 08:24:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33551 (0x830f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 15 13:47:17 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65ce15e5-73f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8a:1a:c6:f6:91:d4:f4:cd:b6:65:c5:46:31:
92:52:07:7c:2c:97:44:e8:82:c3:62:44:0c:8d:a2:
78:ef:32:fc:1b:09:de:a8:a3:43:4a:b4:71:d0:c3:
85:ab:47:43:6a:2c:26:5c:80:34:86:12:11:02:65:
bd:19:48:87:55:28:87:5e:97:d7:11:65:78:1d:3f:
28:85:e3:f5:f2:ea:ff:17:6c:ce:89:fd:4d:d1:d5:
74:28:da:6a:26:cb:8c:52:f7:40:41:7f:84:95:8a:
d4:d3:9e:84:ce:da:9e:c9:40:4c:11:dd:d9:18:68:
6c:8a:ec:4e:3a:2f:97:79:4c:f4:97:8f:7e:22:e6:
ad:02:49:e9:5e:71:9f:29:ba:62:b3:0b:a0:e6:bf:
f8:82:16:19:be:28:0a:11:c8:99:33:5f:c3:f7:7d:
96:15:c0:c1:90:8c:87:ca:56:32:81:e9:bd:9e:c7:
58:10:db:84:8b:33:31:6e:3b:85:e2:c7:a5:72:95:
0f:e8:ef:f2:bd:0c:cf:ff:ce:1c:40:94:d3:91:25:
6d:43:e6:f7:72:d3:c5:33:08:98:14:fa:6b:e1:5d:
eb:5f:6f:b3:12:23:4a:4c:87:0d:4f:23:83:5b:66:
d0:c6:31:6a:1f:98:5e:42:77:3b:10:67:fd:17:e6:
b1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BE:33:C8:9D:17:51:8C:61:5D:F4:0B:2D:2D:E8:11:FD:92:67:17
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BB8191DACC0811EEB1158E36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.68.0/22
103.14.124.0/22
103.30.140.0/22
103.80.64.0/22
103.110.200.0/22
103.198.28.0/22
103.225.40.0/22
144.48.76.0/22
163.47.140.0/22
163.47.152.0/22
Signature Algorithm: sha256WithRSAEncryption
80:56:0d:f5:4f:0d:05:4c:22:91:00:13:34:d0:cd:54:05:c3:
01:20:34:c5:36:53:56:92:67:4d:e1:9c:ca:4c:e0:b9:87:3f:
03:1e:8a:3d:9b:d6:fb:6b:cf:ca:06:74:50:3b:e7:12:59:23:
5b:26:c1:ee:6d:79:77:d3:35:51:66:9a:e3:1a:ed:7e:b1:e3:
48:d9:b3:b7:e1:34:de:7e:45:aa:0f:6e:1f:93:01:9f:ba:11:
71:8a:70:83:13:6b:d9:89:94:fc:ca:7c:98:cd:bf:e8:04:00:
1d:2a:df:22:0c:28:74:81:82:dc:20:6e:dd:d6:08:cd:76:21:
1d:4e:fb:87:65:c6:a0:c1:cf:d2:a4:69:18:13:e3:64:50:a1:
93:45:1f:3c:12:59:5b:a3:e5:24:09:cf:ea:a0:6a:81:36:2f:
84:01:6f:00:93:c7:1d:04:6e:ef:49:1d:60:e7:d2:d2:a7:a5:
34:12:c0:e2:66:7b:7a:01:d5:60:dc:f6:06:b3:07:05:9e:22:
b5:b1:2f:7c:a2:5b:14:ea:28:7e:9f:c2:5c:78:c4:c3:5b:c9:
5d:df:d6:da:33:7e:d1:55:23:95:b9:5d:3a:56:57:d4:9e:e3:
30:38:e1:54:10:33:1c:fb:2f:7f:ba:4b:07:aa:52:47:64:fe:
d2:40:e0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 12:16:53 2024 by rpki-client on console-ams.rpki-client.org