Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/00B2998A576911EEA54BD978C4F9AE02.roa
File: 00B2998A576911EEA54BD978C4F9AE02.roa (raw, json)
Hash identifier: fYF9F6t/2Mf4J9f6R/sH9Hy1SL5rrNBPFCOabLhVzBA=
Subject key identifier: 74:31:EB:9E:02:62:73:47:39:AE:35:84:51:13:E2:6E:18:06:9B:CE
Certificate issuer: /CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04
Certificate serial: 0119
Authority key identifier: 87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/00B2998A576911EEA54BD978C4F9AE02.roa
Signing time: Tue 31 Dec 2024 03:56:52 +0000
ROA not before: Tue 31 Dec 2024 03:56:52 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 151326
IP address blocks: 101.1.4.0/24 maxlen: 24
101.1.5.0/24 maxlen: 24
101.1.6.0/24 maxlen: 24
101.1.7.0/24 maxlen: 24
101.101.98.0/24 maxlen: 24
101.101.99.0/24 maxlen: 24
2401:44c0::/32 maxlen: 32
2401:44c0:1::/48 maxlen: 48
2401:44c0:2::/48 maxlen: 48
2401:44c0:3::/48 maxlen: 48
2401:44c0:4::/48 maxlen: 48
2401:44c0:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 07 Jan 2025 06:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A294
Validity
Not Before: Dec 31 03:56:52 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67736b84-4447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8b:06:8a:a8:6e:bd:cd:3e:15:a8:a2:83:89:
7d:f2:1d:d8:2a:44:45:46:ff:67:e6:2c:63:01:9f:
09:1f:9b:93:78:7b:73:37:dd:da:e5:5c:3b:77:2f:
c1:4f:19:b3:65:87:51:1d:0d:ef:4f:eb:01:14:0c:
e8:0f:6c:39:d3:88:fe:71:fe:d3:2b:56:49:85:11:
af:1f:1a:fa:1f:fd:b9:62:88:e2:e7:7b:6d:1b:8e:
04:45:96:bb:eb:7a:b7:b3:bf:ea:61:37:2b:55:b8:
61:5b:20:ee:40:19:ec:ed:89:f9:f4:9e:ac:3b:7a:
17:85:cf:79:4e:99:ad:95:69:51:4e:ec:bf:55:3d:
90:a5:ce:bf:16:1f:76:3e:43:4c:e2:81:84:13:28:
fe:0d:a7:f5:33:6b:85:d8:ea:c9:3b:cd:22:66:91:
bf:bf:bd:b9:60:d4:d2:f6:60:35:ef:87:2e:66:65:
95:7f:9a:0b:57:43:bb:24:84:50:bd:40:9a:49:2e:
cd:1a:e4:58:44:b5:8f:92:d5:29:35:51:7c:ca:05:
16:51:24:04:15:b4:a0:e3:8b:0d:c9:4d:38:60:66:
e3:1e:b9:ca:fa:ac:2d:27:25:75:14:c4:94:40:63:
7a:37:59:59:32:42:35:96:69:b0:70:85:54:0f:63:
e0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:31:EB:9E:02:62:73:47:39:AE:35:84:51:13:E2:6E:18:06:9B:CE
X509v3 Authority Key Identifier:
keyid:87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/00B2998A576911EEA54BD978C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.1.4.0/22
101.101.98.0/23
IPv6:
2401:44c0::/32
Signature Algorithm: sha256WithRSAEncryption
58:dd:4d:9a:87:26:10:0a:32:7d:d0:63:3c:11:eb:31:16:fb:
32:b7:84:d3:64:f1:76:2f:86:d4:4d:c9:8a:2b:e5:16:68:cc:
b9:75:89:dc:e3:3e:b2:1d:8d:a5:22:cc:5e:b6:10:de:3d:cf:
4c:81:5c:6b:b8:a8:41:ad:28:db:fe:e9:97:d4:55:34:2c:b2:
ef:28:f4:03:e3:f0:4d:7b:16:04:21:54:c1:8d:e4:f5:88:1a:
1a:ac:4b:f9:40:df:48:37:c5:7a:e4:80:ce:de:f8:22:ff:a7:
b6:af:51:04:0e:52:45:bb:60:79:b2:d0:0d:f6:43:a9:fb:f6:
68:fb:0c:b2:3f:89:06:4a:98:e4:08:ae:cc:fb:ee:68:ca:71:
f1:e6:53:5d:95:bf:4b:99:99:51:fc:86:95:3c:70:d5:6a:01:
04:87:ae:37:a1:35:dd:e7:31:85:81:6c:32:bb:6a:58:67:39:
f4:fa:86:a0:c9:f8:cd:ef:71:61:21:17:de:7e:29:5f:48:f9:
29:88:df:cb:fa:4f:07:bb:13:8a:9d:1a:51:58:5a:8b:f8:3c:
0d:3e:f5:63:19:d6:62:a2:40:cd:3a:70:c5:00:aa:17:5a:d1:
8a:0c:c0:02:5c:b4:55:42:79:76:38:17:fd:96:57:ac:4b:fc:
3b:5a:f1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:06:52 2025 by rpki-client