Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/69B86538379F11EFBB5CC50AC4F9AE02.roa
File: 69B86538379F11EFBB5CC50AC4F9AE02.roa (raw, json)
Hash identifier: bMciIZxTfh3tvXNZ1Wxp0z1XqPAZnwakXYf/JIo8H3Y=
Subject key identifier: B2:20:11:73:7C:48:71:86:FC:C1:30:99:C0:F1:45:FB:25:43:02:12
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2774
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/69B86538379F11EFBB5CC50AC4F9AE02.roa
Signing time: Tue 30 Jul 2024 16:04:28 +0000
ROA not before: Tue 30 Jul 2024 16:04:28 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 7489
IP address blocks: 27.100.36.0/23 maxlen: 24
45.124.64.0/22 maxlen: 24
45.249.88.0/24 maxlen: 24
45.249.91.0/24 maxlen: 24
103.192.176.0/22 maxlen: 24
103.196.20.0/23 maxlen: 24
103.196.22.0/24 maxlen: 24
103.217.252.0/22 maxlen: 22
103.217.252.0/24 maxlen: 24
103.217.253.0/24 maxlen: 24
103.217.255.0/24 maxlen: 24
2402:9e80::/48 maxlen: 48
2402:9e80:1::/48 maxlen: 48
2402:9e80:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 19 Oct 2024 12:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10100 (0x2774)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Jul 30 16:04:28 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a90f0c-deac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1d:27:dd:6a:f3:a4:57:a4:9e:8e:f6:22:40:
ba:a1:a8:fa:a1:b8:8a:14:ef:e0:2c:f5:e5:b0:ba:
99:84:74:42:a1:58:ae:c0:02:20:46:64:ee:38:15:
b9:12:3c:be:99:33:db:a4:7b:b4:4d:8e:a9:69:bb:
86:ab:4b:6d:3b:4c:65:3e:32:5a:85:25:a6:e5:a8:
a8:49:17:43:fe:94:a7:82:b7:68:a1:6d:dc:ab:60:
dc:49:07:9b:02:6b:d7:f4:49:97:70:2e:27:4d:21:
a2:52:d2:07:47:8d:d0:6d:f6:0a:d4:54:80:ae:4f:
d8:1c:ae:a6:4d:86:23:95:f3:ed:19:c7:3d:8e:35:
8e:2f:0f:34:29:13:b2:5d:8c:0d:d2:66:34:c3:b8:
6d:11:bc:8d:6e:25:28:76:5e:a4:be:b5:4a:6c:e2:
cd:26:14:9b:e6:d9:0c:f7:3a:b3:15:f0:65:f7:9b:
8b:66:6e:fd:8e:db:e6:e7:eb:8f:f3:fc:7e:0d:4a:
e6:c9:51:aa:d7:64:9c:61:d5:cf:3a:dd:cf:50:32:
7a:3e:c9:86:0e:c7:c5:6d:5c:87:16:1a:e5:64:c9:
e4:88:a6:fc:38:9b:ff:28:0c:72:c7:42:2f:79:76:
79:8b:4a:dc:46:6f:a5:c9:a0:58:2e:7d:b7:ce:cd:
f5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:20:11:73:7C:48:71:86:FC:C1:30:99:C0:F1:45:FB:25:43:02:12
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/69B86538379F11EFBB5CC50AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.100.36.0/23
45.124.64.0/22
45.249.88.0/24
45.249.91.0/24
103.192.176.0/22
103.196.20.0-103.196.22.255
103.217.252.0/22
IPv6:
2402:9e80::/47
2402:9e80:5::/48
Signature Algorithm: sha256WithRSAEncryption
91:41:56:16:3a:64:0e:05:5b:41:7f:37:ba:42:51:59:b6:fd:
a8:8a:0c:10:89:71:fa:e2:47:78:22:31:9d:42:71:c3:83:d4:
c8:82:ef:7f:0c:97:55:50:bc:5b:6c:a0:a4:61:4b:ab:ce:50:
ca:fc:07:c5:60:c9:f7:e6:5d:b8:d2:0d:1f:aa:12:47:01:00:
19:6f:54:ba:a1:65:ed:95:02:45:48:f8:60:d6:25:2d:64:a0:
4e:0a:31:28:e5:40:0b:12:09:e1:2f:d7:ac:5a:eb:aa:9c:c5:
ac:1b:4b:d6:46:cf:d6:51:b0:5a:07:70:1c:ce:7f:b5:5f:a8:
c7:89:ce:66:b9:ec:9e:13:b9:75:b0:a7:b7:d1:24:ed:9a:a8:
3c:a4:3d:7d:8d:4b:2a:7b:3f:2f:64:1d:75:b9:68:69:b1:38:
61:c3:46:6e:99:f7:a2:00:77:ca:22:78:99:b3:a9:90:7d:b6:
2b:04:30:5c:66:f9:af:63:0b:05:1e:3f:18:16:e2:5f:d1:e8:
6f:2d:9b:fd:45:d3:19:cf:c5:11:58:be:21:3e:e9:ae:a4:0a:
19:85:b2:5c:1e:13:3d:a4:36:da:e5:50:df:b5:e7:b3:63:7c:
58:5a:16:24:15:09:cf:64:a0:e9:6e:3b:cb:ea:04:c4:35:1a:
05:c0:56:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 15:10:59 2024 by rpki-client on console-ams.rpki-client.org