Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/F8D8E9DA2A3311EC99C4D25FC4F9AE02.roa
File: F8D8E9DA2A3311EC99C4D25FC4F9AE02.roa (raw, json)
Hash identifier: RaxgLGoCM1a//Orckpnxg4R4QAIeTu8yP/R2gVSvUqM=
Subject key identifier: 1A:AF:6F:A2:5E:98:D5:7B:F0:61:F0:94:97:A4:B1:03:54:EE:79:92
Certificate issuer: /CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Certificate serial: 05C7
Authority key identifier: 77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/F8D8E9DA2A3311EC99C4D25FC4F9AE02.roa
Signing time: Wed 06 Dec 2023 23:51:11 +0000
ROA not before: Wed 06 Dec 2023 23:51:11 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 21859
IP address blocks: 43.250.172.0/24 maxlen: 24
43.250.173.0/24 maxlen: 24
43.250.175.0/24 maxlen: 24
103.42.28.0/24 maxlen: 24
103.42.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 14:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1479 (0x5c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Validity
Not Before: Dec 6 23:51:11 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=657108ee-1d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5c:fe:a9:3c:c7:bd:2e:9a:77:c4:a3:09:7a:
ef:7a:9b:1d:e9:25:fd:21:c7:17:3a:b7:fd:34:a1:
97:7e:a3:37:37:18:ab:79:27:25:27:65:9f:64:25:
11:cf:a9:f9:a1:d3:10:d0:bd:6e:db:ff:92:fc:1e:
15:98:e0:5a:98:e9:7b:94:8b:51:57:b9:9d:c4:9a:
37:19:ac:9f:7c:03:2c:f5:4a:bc:5e:0d:3e:a4:97:
fe:25:36:ac:e5:1e:88:21:75:b3:e7:67:0e:62:cb:
c7:11:0f:d2:2f:65:73:10:38:ea:13:79:31:bd:5b:
5c:16:13:1a:02:d5:43:65:6b:f9:79:d3:2e:ae:e6:
08:e0:67:b9:7f:04:00:10:21:fa:62:a2:c8:1d:5a:
bb:6a:93:1a:a8:0f:30:93:ab:ad:8c:85:5b:ed:76:
54:4f:40:99:63:09:5f:af:41:3b:38:68:ca:a7:ac:
2c:af:85:4c:31:b9:2d:4a:dd:c9:9d:fd:08:29:6d:
e2:f2:bc:c4:31:82:19:b3:9f:eb:4c:71:f0:41:ce:
2d:cb:4f:16:b9:b2:55:c9:c5:c8:44:0d:34:14:19:
26:44:8d:94:b2:f1:9d:3c:fa:da:d8:91:c0:4d:82:
43:68:58:cc:dc:dc:57:26:9a:9e:26:4e:50:83:f2:
ef:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AF:6F:A2:5E:98:D5:7B:F0:61:F0:94:97:A4:B1:03:54:EE:79:92
X509v3 Authority Key Identifier:
keyid:77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/F8D8E9DA2A3311EC99C4D25FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.172.0/23
43.250.175.0/24
103.42.28.0/23
Signature Algorithm: sha256WithRSAEncryption
39:0f:c8:96:1e:0e:d8:73:31:fb:ad:8a:df:fc:35:b4:d7:b2:
39:95:dc:a4:cf:06:c3:68:9f:d5:48:98:5a:23:e3:34:b8:ab:
98:16:2d:0c:48:db:bd:db:59:6f:67:ba:87:19:ee:32:bd:12:
96:26:9a:54:fa:17:ea:6d:65:17:f7:8d:f8:b0:45:45:03:a4:
7d:f0:02:06:6f:ef:f3:a5:66:62:7e:ea:b7:61:b9:4a:e3:be:
77:c0:42:0f:df:4c:4b:79:0e:44:21:53:f8:bb:a1:38:9b:f4:
cc:a9:1e:9d:77:cf:ed:55:a3:f6:d0:a1:04:9c:22:22:c5:26:
04:03:00:e6:29:a1:c3:f9:89:5b:a0:e7:0f:b4:82:ba:13:08:
d0:5b:62:88:41:95:68:21:bc:0a:f0:86:84:08:de:d8:da:af:
fd:f9:24:1e:3d:74:f1:8b:ee:10:22:23:7f:d8:cf:c9:49:fc:
4b:e7:3e:ae:8e:be:0e:ea:e1:98:15:5a:d9:21:bf:4c:97:b9:
29:fa:1a:89:74:10:bf:e4:ea:a6:36:07:2f:2f:03:96:14:3c:
25:ef:ad:65:20:c9:87:fd:0c:b3:60:32:96:02:ff:97:eb:12:
c0:b3:d3:63:e6:8e:e0:02:b1:ca:08:a8:80:b6:d9:ac:9a:ac:
a2:f9:15:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 18:00:34 2024 by rpki-client on console-fra.rpki-client.org