Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/1FF145B4419F11EA8B12587CC4F9AE02.roa
File: 1FF145B4419F11EA8B12587CC4F9AE02.roa (raw, json)
Hash identifier: 7ZZ7kYUjqUZ0CBQjkPYTwWNdxtlROjsi9/6RD45BrL8=
Subject key identifier: 47:8E:73:73:EA:A1:DC:98:62:7F:00:0E:5F:29:28:80:4F:0E:4B:1C
Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
Certificate serial: 0A5C
Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/1FF145B4419F11EA8B12587CC4F9AE02.roa
Signing time: Sun 02 Jun 2024 21:06:04 +0000
ROA not before: Sun 02 Jun 2024 21:06:04 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 17408
IP address blocks: 45.126.84.0/24 maxlen: 24
45.126.86.0/24 maxlen: 24
103.18.228.0/24 maxlen: 24
103.18.230.0/24 maxlen: 24
103.231.36.0/24 maxlen: 24
103.231.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 05:22:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2652 (0xa5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
Validity
Not Before: Jun 2 21:06:04 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=665cdebc-ae2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:63:f2:c0:1d:c3:75:c9:55:77:38:fd:31:
72:78:32:37:86:59:f6:71:2d:ec:a5:5e:13:bc:b1:
5a:bf:87:fa:f8:5b:fe:b3:d7:4b:63:15:1f:bf:52:
b9:d2:7c:ef:f1:14:72:03:e6:29:47:6a:5d:5e:0c:
f0:42:c0:f2:06:6d:94:4d:1f:7b:58:8e:7d:fc:e5:
b9:1b:42:80:2a:3c:c6:71:4f:8e:f4:4d:7f:48:0f:
d1:66:e3:bb:23:88:0b:d5:96:57:68:5e:c2:9d:33:
99:db:81:ea:8b:ef:ab:67:10:a4:6e:a1:b2:d6:5e:
82:69:4e:c8:57:fc:88:b8:94:b7:91:40:47:e7:0e:
f5:30:5a:85:de:fd:16:29:66:e5:31:48:24:04:fc:
61:a7:26:30:7c:3b:16:70:1a:19:3f:84:9d:88:f0:
46:e2:01:62:73:02:d7:0d:a8:15:ef:df:6a:ae:ff:
27:5f:36:f3:80:26:2a:a2:7d:cf:8d:21:55:14:d0:
33:4c:8a:b2:32:ad:2d:b3:5e:23:14:15:b8:28:3d:
1b:16:34:92:73:8c:d8:95:30:19:99:9f:e7:aa:64:
4f:a1:db:f9:2d:6c:f0:31:4d:29:5a:c8:54:a9:9b:
a2:6d:13:3f:e8:e2:d5:3e:d3:49:c7:0f:08:99:a1:
7c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8E:73:73:EA:A1:DC:98:62:7F:00:0E:5F:29:28:80:4F:0E:4B:1C
X509v3 Authority Key Identifier:
keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/1FF145B4419F11EA8B12587CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.126.84.0/24
45.126.86.0/24
103.18.228.0/24
103.18.230.0/24
103.231.36.0/24
103.231.38.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:67:39:22:0b:70:99:40:3c:3a:63:32:dd:ff:0c:e7:eb:34:
04:4d:dc:74:48:99:b7:55:5b:d0:65:98:9c:21:c5:01:b0:0f:
1c:15:3e:ac:e7:df:fa:ef:c9:59:48:10:7e:3d:d7:b0:14:f8:
61:72:17:3c:68:0c:82:95:c6:94:8c:6f:49:c2:13:df:bd:17:
8c:ca:77:d1:36:9f:ef:5a:7a:8b:44:0c:7c:04:81:57:d9:fe:
b7:f9:29:2b:e6:bf:f0:92:a5:8e:72:41:46:2f:1f:94:4a:2a:
d7:56:2e:3f:ea:a2:12:29:9e:2a:5a:76:d3:5c:be:3b:20:3f:
4d:29:70:4a:f4:cb:b6:7b:d4:7a:82:4d:6b:35:9f:ba:d8:aa:
12:70:0a:87:23:24:a5:51:d4:0c:d2:cb:4b:ac:0f:f3:18:13:
af:3e:b7:61:96:35:33:62:1f:d2:8c:c0:e3:00:0c:ab:86:37:
a9:d6:0b:37:54:3c:a0:83:2f:8e:50:01:8b:e6:66:fa:b6:2a:
3a:c0:0d:06:21:c8:8d:f1:1c:ca:fb:a0:0e:36:90:7a:13:42:
ca:ac:db:cc:9f:3a:36:96:1a:56:f4:e4:dd:32:3f:e2:86:dd:
8b:84:a1:7c:80:76:a3:9c:d7:7b:ec:3b:74:fb:1b:1b:c3:21:
33:4a:b7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 07:53:20 2024 by rpki-client on console-fra.rpki-client.org