Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/0B4D65CE68E211EAA535AC29C4F9AE02.roa
File: 0B4D65CE68E211EAA535AC29C4F9AE02.roa (raw, json)
Hash identifier: 8dp7Ox5ZcG8K4wBCoxLG6/n7IK3RVTE094/3Awr1EkY=
Subject key identifier: 54:4D:26:A9:F0:54:E0:20:29:C1:E3:02:E0:36:D4:D0:6E:6E:EB:56
Certificate issuer: /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Certificate serial: 2B23
Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/0B4D65CE68E211EAA535AC29C4F9AE02.roa
Signing time: Tue 16 May 2023 12:19:13 +0000
ROA not before: Tue 16 May 2023 12:19:13 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 58717
IP address blocks: 43.245.140.0/22 maxlen: 22
43.245.140.0/22 maxlen: 24
43.245.140.0/23 maxlen: 23
43.245.140.0/24 maxlen: 24
43.245.141.0/24 maxlen: 24
43.245.142.0/23 maxlen: 23
43.245.142.0/24 maxlen: 24
43.245.143.0/24 maxlen: 24
103.15.244.0/22 maxlen: 24
103.15.246.64/26 maxlen: 26
103.75.238.0/23 maxlen: 24
103.96.70.0/23 maxlen: 24
103.199.84.0/22 maxlen: 22
103.199.84.0/24 maxlen: 24
103.199.85.0/24 maxlen: 24
103.199.86.0/24 maxlen: 24
103.199.87.0/24 maxlen: 24
103.242.216.0/24 maxlen: 24
103.242.217.0/24 maxlen: 24
103.242.218.0/23 maxlen: 24
144.48.148.0/23 maxlen: 23
144.48.148.0/24 maxlen: 24
144.48.149.0/24 maxlen: 24
2405:1500::/32 maxlen: 32
2405:1500::/32 maxlen: 48
2405:1500::/48 maxlen: 48
2405:1500:30::/48 maxlen: 48
2405:1500:40::/48 maxlen: 48
2405:1500:60::/48 maxlen: 48
2405:1500:70::/48 maxlen: 48
2405:1500:80::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11043 (0x2b23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Validity
Not Before: May 16 12:19:13 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=646374c1-4468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f5:09:a6:51:f9:8f:3a:f4:93:dd:01:43:74:
a3:14:75:d1:3a:48:78:c4:58:24:94:6f:ba:e3:78:
39:31:92:bd:d0:85:9b:5c:11:7d:3a:dc:30:07:9b:
48:fb:97:f8:3b:15:14:96:31:00:66:c0:c8:4d:63:
78:88:c8:99:28:6c:a7:61:1b:27:11:1b:f8:81:6d:
5d:1a:69:3b:41:e4:89:8e:45:cb:74:c1:5c:69:5d:
74:be:a2:fa:99:e5:4e:a5:e3:7c:cd:94:20:1d:2f:
65:86:bb:e7:3a:67:02:4c:41:98:5f:b0:f0:dd:6b:
59:58:c4:f7:6b:15:4f:76:7a:64:7b:b6:bf:69:01:
27:b1:46:94:ac:c2:1f:3e:2c:e8:32:ce:7c:f0:5a:
74:13:0d:b0:4a:69:7d:c6:70:67:d3:07:2f:5c:b6:
96:d4:08:d8:c0:d3:90:6e:a3:a7:f6:72:37:d1:cf:
65:92:4b:de:9a:d0:de:3a:cc:4b:01:fa:54:ed:b1:
8d:58:aa:52:86:f8:db:01:cb:bc:2f:08:22:10:f9:
75:6c:f7:b7:45:a5:1d:bc:37:b3:80:77:0b:ec:99:
92:fa:9b:42:eb:09:a9:bf:90:ec:1c:19:f7:bd:52:
1f:cf:0f:7b:03:03:3f:65:ed:51:01:5a:54:3e:1c:
4f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4D:26:A9:F0:54:E0:20:29:C1:E3:02:E0:36:D4:D0:6E:6E:EB:56
X509v3 Authority Key Identifier:
keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/0B4D65CE68E211EAA535AC29C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.140.0/22
103.15.244.0/22
103.75.238.0/23
103.96.70.0/23
103.199.84.0/22
103.242.216.0/22
144.48.148.0/23
IPv6:
2405:1500::/32
Signature Algorithm: sha256WithRSAEncryption
12:c5:ed:cf:73:93:2b:8d:0e:49:06:89:bb:1f:a5:c7:58:b0:
79:ac:90:1e:eb:57:8f:e3:89:a1:a8:f9:7b:7d:cd:b3:98:cf:
97:4c:7c:15:df:72:93:56:a9:f2:47:46:c6:79:d3:04:ce:40:
4a:dd:eb:25:10:96:ff:3d:46:e1:63:23:49:3a:fa:2f:64:bc:
84:87:1a:8e:36:f1:be:fc:ca:7b:d5:3a:b0:87:a7:45:5d:86:
65:92:cc:df:32:6f:f1:47:a5:26:f2:cf:5c:f2:6b:40:fa:e4:
49:01:22:91:74:51:13:d5:18:ac:c3:59:cf:9a:44:ad:d5:44:
ba:9e:8c:27:99:73:28:f0:d3:64:5e:8e:eb:14:4c:7c:95:3c:
f9:7d:f6:49:73:5d:71:b5:d1:f2:3f:93:cf:39:6d:46:66:62:
56:86:98:4d:75:48:29:30:7f:34:a8:25:b0:b6:64:e5:91:46:
fb:b9:dc:1f:b4:a3:a2:e4:49:3e:18:49:0b:33:2b:d7:08:5a:
77:11:c4:73:33:f5:25:d3:03:9b:e2:1b:e3:56:f9:27:0b:a0:
40:31:61:e2:98:a0:67:44:00:82:70:21:0d:67:36:86:03:9e:
0c:97:47:1d:77:68:1c:37:2d:ed:95:0a:69:5c:f9:82:bc:a7:
e9:e8:3b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-fra.rpki-client.org