Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/338E008C33DD11EAB6057973C4F9AE02.roa
File: 338E008C33DD11EAB6057973C4F9AE02.roa (raw, json)
Hash identifier: 7+ZLULjVqPCfadW/ubEy902j24oY/POwRPTnqDmUr9w=
Subject key identifier: 67:74:C1:32:A0:A3:C7:13:CA:B2:2A:D9:DD:DE:5B:9F:64:B7:7D:48
Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Certificate serial: 0CC3
Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/338E008C33DD11EAB6057973C4F9AE02.roa
Signing time: Sun 06 Oct 2024 14:13:46 +0000
ROA not before: Sun 06 Oct 2024 14:13:46 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 134806
IP address blocks: 103.89.26.0/24 maxlen: 24
103.89.27.0/24 maxlen: 24
103.126.216.0/22 maxlen: 24
103.200.36.0/22 maxlen: 22
103.200.36.0/23 maxlen: 23
103.200.36.0/24 maxlen: 24
103.200.37.0/24 maxlen: 24
103.200.38.0/23 maxlen: 23
103.200.38.0/24 maxlen: 24
103.200.39.0/24 maxlen: 24
123.253.64.0/22 maxlen: 24
2401:1040::/32 maxlen: 32
2401:1040::/40 maxlen: 40
2401:1040::/48 maxlen: 48
2401:1040:1::/48 maxlen: 48
2401:1040:2::/48 maxlen: 48
2401:1040:3::/48 maxlen: 48
2401:1040:100::/40 maxlen: 40
2401:1040:102::/48 maxlen: 48
2401:1040:300::/40 maxlen: 40
2401:1040:301::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Dec 2024 12:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3267 (0xcc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Validity
Not Before: Oct 6 14:13:46 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=67029b1a-3b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cb:04:6b:2a:24:e0:67:87:0a:53:c4:22:92:
81:55:da:cf:98:9d:2b:9d:b6:7d:f2:11:eb:17:e4:
6f:33:e0:ef:48:c4:0d:ba:27:5d:48:23:65:d1:c5:
b4:3d:2f:6d:af:76:0b:f6:7e:d5:36:d3:df:80:0b:
79:90:f7:71:7b:45:b6:88:38:0f:91:c5:18:3f:2c:
60:2c:a8:82:7e:9b:49:da:73:7f:40:81:c2:e2:6b:
ca:43:3c:6a:a3:d0:13:aa:31:cc:b2:b3:8d:ca:d6:
f3:ee:73:4e:8b:5f:d8:c1:e1:d2:ed:2c:ec:a1:ac:
4c:41:40:bf:f5:6c:87:c7:41:40:60:9e:6f:91:41:
e1:fc:fc:7c:d0:77:d6:1e:10:af:a8:fe:7c:0d:c7:
86:2e:13:99:6b:b1:16:15:89:30:8b:91:f0:e4:34:
e3:f1:96:08:25:dc:12:32:5d:98:38:7b:f7:3d:00:
e3:f5:b8:a6:14:c3:7a:90:9d:84:3f:70:da:28:1c:
b2:04:ca:4d:c0:ae:10:d4:33:d6:5a:75:61:9c:ca:
b7:b2:82:40:df:16:5c:89:39:96:e1:b5:9f:63:75:
b2:e4:72:1e:22:52:c5:f2:32:39:10:7e:35:e8:e3:
4a:fb:ea:63:4d:4a:d1:fa:55:01:19:b8:f0:f4:2a:
1a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:74:C1:32:A0:A3:C7:13:CA:B2:2A:D9:DD:DE:5B:9F:64:B7:7D:48
X509v3 Authority Key Identifier:
keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/338E008C33DD11EAB6057973C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.89.26.0/23
103.126.216.0/22
103.200.36.0/22
123.253.64.0/22
IPv6:
2401:1040::/32
Signature Algorithm: sha256WithRSAEncryption
9f:26:c9:d5:05:a0:f8:3f:cc:da:0e:af:ae:ad:77:23:31:a2:
80:21:5f:ba:df:46:22:6c:ac:85:b6:d1:da:b9:d0:0b:38:82:
79:ee:5a:ea:41:5e:8c:20:47:9f:7f:f6:b3:cf:cd:3e:5b:e6:
72:00:4b:a4:5e:ba:38:45:9e:17:26:14:96:40:6f:93:ec:47:
df:e3:7d:e2:2f:d5:49:0b:3c:3c:c0:40:68:ad:79:da:a6:42:
00:df:31:b4:02:3a:ff:56:6a:dd:10:5e:c0:e1:5e:17:dc:71:
b0:ab:d0:1f:64:43:de:88:fb:d9:5c:78:4e:db:3f:f1:d0:73:
ad:0b:d8:b9:16:0b:69:07:7c:20:4d:c6:05:22:15:d1:55:69:
ac:31:48:85:64:de:9d:0b:3d:6f:1e:f8:ae:55:69:74:81:a1:
8f:d8:af:bf:8e:32:96:fb:c4:cf:a8:b9:55:d6:02:52:a8:d2:
f0:2e:30:25:62:b3:33:61:28:a8:f9:e7:38:ea:83:a8:d5:ad:
5f:18:de:28:34:ea:80:37:98:4c:d1:db:6f:88:73:81:64:77:
f8:d3:dc:8b:e3:75:b4:a8:7a:11:fd:c9:fd:5c:b6:1d:cf:17:
3f:28:81:3a:1c:87:aa:77:1f:a5:fc:0b:91:61:fc:96:f9:82:
8a:d4:ec:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:17 2024 by rpki-client on console.sobornost.net