Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/54ACB83A91B311ED92AB0679C4F9AE02.roa
File: 54ACB83A91B311ED92AB0679C4F9AE02.roa (raw, json)
Hash identifier: ZGdIM11c7VsKzqC5yVR6081lZIRJnx/c85ISq8i6h5c=
Subject key identifier: 57:E8:33:FC:71:0B:4D:39:4B:A4:DE:74:C9:D2:C7:B3:BD:74:AE:39
Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial: 59
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/54ACB83A91B311ED92AB0679C4F9AE02.roa
Signing time: Thu 27 Apr 2023 09:26:15 +0000
ROA not before: Thu 27 Apr 2023 09:26:14 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 133499
IP address blocks: 43.225.80.0/22 maxlen: 22
103.240.164.0/22 maxlen: 22
103.241.52.0/22 maxlen: 22
103.241.52.0/24 maxlen: 24
103.241.53.0/24 maxlen: 24
103.241.54.0/24 maxlen: 24
103.241.55.0/24 maxlen: 24
150.107.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Validity
Not Before: Apr 27 09:26:14 2023 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=644a3fb6-330a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:cb:63:4a:cc:12:aa:98:3c:6d:f6:e0:cb:
c5:34:20:83:fb:b2:26:d6:03:34:9f:f3:a6:4d:b1:
f9:4e:8e:91:a0:6f:e3:f6:c3:a1:86:5a:e3:b9:50:
5b:8f:74:ba:87:ff:00:88:b8:f3:44:e7:7e:4c:5d:
3c:be:9a:4b:f1:2d:d5:93:aa:a0:b8:90:91:5d:7a:
2b:7c:49:ec:0c:3a:a5:28:15:7f:c7:9a:41:c5:1e:
f6:fe:aa:57:f9:de:99:29:1b:87:40:43:e8:92:18:
05:a3:54:10:69:02:73:5e:fb:a3:92:26:e3:11:f8:
0f:e5:a1:da:d8:8c:5c:31:d8:d6:bb:9e:c4:eb:ca:
93:a6:52:1a:70:4c:ad:12:9b:51:73:ed:07:29:34:
b8:ad:ad:da:f7:af:dd:eb:1e:9a:0e:a3:7e:66:84:
64:83:d4:db:c0:60:3d:03:80:28:01:0a:6d:a1:6e:
c6:1a:49:64:49:a0:8e:74:81:98:cf:86:ad:76:58:
3a:aa:17:b7:d8:fb:a9:be:44:d3:b2:b6:bc:07:80:
50:65:2e:d6:c6:11:fd:be:5e:95:37:00:ff:47:b2:
f5:ea:e2:f7:bb:00:f9:4b:f7:4d:1f:30:21:6c:2f:
22:5c:89:30:68:5a:25:06:9a:c0:5e:fb:19:97:d4:
ed:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E8:33:FC:71:0B:4D:39:4B:A4:DE:74:C9:D2:C7:B3:BD:74:AE:39
X509v3 Authority Key Identifier:
keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/54ACB83A91B311ED92AB0679C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.80.0/22
103.240.164.0/22
103.241.52.0/22
150.107.226.0/24
Signature Algorithm: sha256WithRSAEncryption
57:26:ba:11:02:5e:ce:f6:01:78:33:e2:09:ec:27:03:e7:7e:
e1:48:27:28:4c:97:26:dc:52:0e:c2:6b:32:a1:be:9a:14:8e:
f9:3f:5c:cb:a0:75:3e:1f:8d:ee:8e:4b:67:d1:2c:be:1c:00:
5d:50:4e:bf:0e:a7:22:e7:ee:cc:eb:ea:dc:89:fd:6c:32:59:
6d:43:e1:f5:65:b9:3c:d1:b8:73:99:16:74:d3:83:4d:2c:4b:
f1:54:2c:f4:c4:bf:08:06:f0:7c:5f:97:55:0b:a4:bb:7d:a5:
42:de:16:1a:4d:da:77:ad:92:97:41:51:55:b7:e6:70:eb:e7:
79:5e:67:03:2c:fb:0c:b7:b6:ac:22:60:05:89:83:9a:f5:0f:
aa:7f:a4:d5:63:98:ea:e9:38:63:ef:b1:3b:32:e7:b6:78:3d:
c1:1a:f6:6e:c2:ca:06:b2:86:3b:58:76:16:ad:31:36:f5:dc:
ba:3e:52:82:cd:24:29:91:4a:2c:6d:b4:c0:92:54:db:7d:ad:
27:98:78:fb:3d:25:c0:9f:22:99:5e:bf:eb:bc:e0:23:fd:cc:
3a:0b:38:77:6d:c0:fe:eb:06:52:3c:89:db:ae:25:93:fc:89:
03:c6:d7:da:c0:78:f0:1d:1a:4b:0f:52:23:15:54:54:0a:cb:
9f:64:c6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-ams.rpki-client.org