Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/4296CB72931111EDB92FFC5FC4F9AE02.roa
File: 4296CB72931111EDB92FFC5FC4F9AE02.roa (raw, json)
Hash identifier: mU/Ds1iM2xWWyc3/Ue3lgYmnlTA6PIlhf8u2WQEwCPU=
Subject key identifier: 1C:17:F5:AD:B6:AF:9A:49:CC:77:87:3D:46:6C:59:58:53:AA:7B:AB
Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Certificate serial: 0A11
Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/4296CB72931111EDB92FFC5FC4F9AE02.roa
Signing time: Sat 02 Dec 2023 20:28:14 +0000
ROA not before: Sat 02 Dec 2023 20:28:14 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 9311
IP address blocks: 43.239.107.0/24 maxlen: 24
45.124.204.0/24 maxlen: 24
45.124.206.0/24 maxlen: 24
103.244.221.0/24 maxlen: 24
103.244.223.0/24 maxlen: 24
103.249.184.0/24 maxlen: 24
103.249.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 05:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2577 (0xa11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Validity
Not Before: Dec 2 20:28:14 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=656b935d-8ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bc:1f:95:40:ea:3c:6c:a1:cb:59:6a:40:43:
c7:a3:29:5d:2e:b3:02:38:e1:35:53:35:fa:f7:39:
3d:76:87:ca:ff:f9:f7:80:84:7c:a4:68:c0:59:34:
25:b3:a1:a6:0d:1f:3c:7f:c4:59:78:6b:aa:6c:00:
ac:4a:c2:71:98:ac:f5:e0:e9:1c:1d:53:27:78:de:
b1:a8:dd:41:6c:5f:97:a5:ba:bf:09:1c:53:50:04:
c2:31:0b:1e:e5:6f:35:92:27:f9:eb:59:a1:05:ef:
94:e4:39:86:02:ed:1f:b5:1a:39:9a:fc:73:1a:6b:
65:c3:46:d9:d2:b3:a7:ad:a5:2f:78:6b:9a:d3:ab:
7e:93:7b:92:ae:3f:e7:e7:bf:ef:d4:d4:09:31:96:
e5:87:ca:1f:d8:26:0b:06:4f:86:86:fe:82:3d:c3:
d1:91:e9:9d:28:76:c1:2d:c7:7c:ac:31:85:af:19:
7a:c0:2a:1f:c7:17:9b:ad:53:66:b7:32:9d:86:89:
e4:c1:07:87:56:da:98:87:da:b0:80:84:76:2c:cd:
82:3f:76:c5:5f:2d:88:5a:3d:83:f9:88:5f:39:ea:
ab:b3:87:24:83:79:f7:53:c9:44:bd:66:7c:4c:55:
8e:dc:a1:3e:80:90:a6:ff:2e:5a:4c:89:c9:fe:f4:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:17:F5:AD:B6:AF:9A:49:CC:77:87:3D:46:6C:59:58:53:AA:7B:AB
X509v3 Authority Key Identifier:
keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/4296CB72931111EDB92FFC5FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.107.0/24
45.124.204.0/24
45.124.206.0/24
103.244.221.0/24
103.244.223.0/24
103.249.184.0/24
103.249.186.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:a0:b9:36:f2:84:6d:86:2f:6a:35:4b:6b:ed:03:af:42:88:
52:90:2c:c6:06:7d:53:89:f2:c7:5f:ea:9c:d0:63:fd:4a:86:
13:84:e7:b4:27:8b:95:59:0b:ba:51:78:a6:e4:c5:59:7e:9c:
e7:8c:dd:18:39:9f:03:3e:65:7d:d1:d4:91:60:3c:68:01:bc:
87:4d:e1:30:79:77:38:4d:c5:3e:80:93:11:5e:b6:3c:54:40:
e5:32:cf:a9:ff:be:7f:a0:bd:15:6c:4d:b0:80:67:21:95:8d:
a6:62:33:39:94:64:cc:18:e5:d9:c7:8d:95:41:bb:98:bc:2c:
19:85:f9:80:38:2f:88:96:17:c0:5f:9b:67:f1:5b:3e:af:a5:
90:68:a3:22:b7:6e:e6:ed:2e:97:e3:82:2f:ed:35:76:1f:be:
0d:17:21:b6:31:a7:0f:18:ae:60:3d:8d:dd:5a:bc:b1:36:8b:
3b:95:63:ef:53:4e:33:d4:43:c1:4c:87:7f:c6:d7:6e:99:6e:
17:01:68:2a:e3:d3:6a:15:49:f6:e4:74:0c:49:e2:5c:13:c5:
37:5e:be:36:77:ec:77:64:5a:33:f3:7f:44:d9:36:ac:1f:55:
a3:6d:99:6e:2e:bc:40:a5:50:22:ea:a9:51:5e:b2:c4:20:73:
f1:62:7a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 07:27:13 2024 by rpki-client on console-ams.rpki-client.org