Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/47E0AF821E0111E9A590C837C4F9AE02.roa
File: 47E0AF821E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier: hqeCM5COO0ZSnrN8G1lX44YNMp5G4EeCbkpRf975i2A=
Subject key identifier: 5F:DB:63:9A:36:56:AB:3C:EC:F9:FB:F6:9F:DC:D4:27:FC:F1:48:54
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 35D3
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/47E0AF821E0111E9A590C837C4F9AE02.roa
Signing time: Mon 28 Nov 2022 03:20:11 +0000
ROA not before: Mon 28 Nov 2022 03:20:11 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 38082
IP address blocks: 27.123.16.0/22 maxlen: 22
27.123.16.0/24 maxlen: 24
27.123.17.0/24 maxlen: 24
27.123.18.0/24 maxlen: 24
27.123.19.0/24 maxlen: 24
58.97.24.0/24 maxlen: 24
61.91.221.0/24 maxlen: 24
113.21.240.0/22 maxlen: 22
113.21.240.0/24 maxlen: 24
113.21.241.0/24 maxlen: 24
113.21.242.0/24 maxlen: 24
113.21.243.0/24 maxlen: 24
113.21.244.0/22 maxlen: 22
113.21.244.0/24 maxlen: 24
113.21.245.0/24 maxlen: 24
113.21.247.0/24 maxlen: 24
122.144.24.0/22 maxlen: 22
122.144.24.0/24 maxlen: 24
122.144.25.0/24 maxlen: 24
122.144.26.0/24 maxlen: 24
122.144.27.0/24 maxlen: 24
122.144.28.0/23 maxlen: 23
171.102.10.0/24 maxlen: 24
171.102.221.0/24 maxlen: 24
171.102.236.0/24 maxlen: 24
171.102.237.0/24 maxlen: 24
171.102.238.0/24 maxlen: 24
171.102.239.0/24 maxlen: 24
2405:4000::/32 maxlen: 32
2405:4000:800::/48 maxlen: 48
2405:4000:800:6::/64 maxlen: 64
2405:4000:800:7::/64 maxlen: 64
2405:4000:800:8::/64 maxlen: 64
2405:4000:800:8::200/120 maxlen: 120
2405:4000:800:9::/64 maxlen: 64
2405:4000:800:a::/64 maxlen: 64
2405:4000:800:b::/64 maxlen: 64
2405:4000:800:d::/64 maxlen: 64
2405:4000:800:e::/64 maxlen: 64
2405:4000:800:f::/64 maxlen: 64
2405:4000:801::/48 maxlen: 48
2405:4000:801::/64 maxlen: 64
2405:4000:801:1::/64 maxlen: 64
2405:4000:801:2::/64 maxlen: 64
2405:4000:801:3::/64 maxlen: 64
2405:4000:801:4::/64 maxlen: 64
2405:4000:801:5::/64 maxlen: 64
2405:4000:900::/40 maxlen: 40
2405:4000:a00::/40 maxlen: 40
2405:4000:aaa::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13779 (0x35d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Nov 28 03:20:11 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=638428ea-a92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1f:ec:fa:c8:73:d0:74:c3:a8:09:e7:eb:42:
37:60:45:01:83:ce:eb:f5:dd:f8:36:08:0b:5d:b6:
30:22:c0:51:6a:b1:e7:cc:fb:d8:db:9b:39:7c:70:
a0:93:ec:c3:ae:75:7a:8f:dc:89:b6:83:c4:fe:89:
f8:65:16:cd:2e:a2:da:e8:ac:df:38:02:ba:e3:bb:
01:72:65:d5:6e:88:e8:ff:14:64:1a:f4:ec:72:33:
6d:35:83:b0:96:44:34:09:08:f0:99:5f:e7:92:93:
10:c6:ac:c1:8e:f6:b8:88:26:d8:98:aa:88:b1:c8:
3f:70:32:ff:59:60:01:f0:81:d8:df:3f:50:e2:50:
20:84:df:fd:5c:05:a8:72:4c:9a:63:e0:64:cf:a0:
51:f2:a2:f9:b7:63:58:cc:20:69:0a:30:f2:bb:c0:
0c:01:04:d2:be:75:8d:a3:3b:21:77:31:94:d0:5b:
10:c9:4f:bd:db:31:11:83:65:44:f6:c9:cd:7a:f8:
bc:b5:74:44:91:af:82:30:6e:ac:3d:d2:e7:04:e9:
bf:9f:e7:77:1f:de:fa:19:0a:3f:7b:b6:b9:76:d5:
1a:63:ba:af:61:ac:2a:3e:f4:26:70:33:1b:82:23:
55:27:65:dd:05:82:91:50:04:8c:eb:e8:28:42:8e:
2d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DB:63:9A:36:56:AB:3C:EC:F9:FB:F6:9F:DC:D4:27:FC:F1:48:54
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/47E0AF821E0111E9A590C837C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.123.16.0/22
58.97.24.0/24
61.91.221.0/24
113.21.240.0/21
122.144.24.0-122.144.29.255
171.102.10.0/24
171.102.221.0/24
171.102.236.0/22
IPv6:
2405:4000::/32
Signature Algorithm: sha256WithRSAEncryption
00:ea:6a:17:61:dc:eb:67:56:98:bd:99:c5:d8:fd:f1:f0:06:
49:15:65:1b:c9:d2:fd:24:cf:47:69:98:ce:05:67:43:08:6a:
ae:43:60:69:d4:5e:ac:f3:e6:d1:61:b5:5d:2a:6d:e0:0f:e8:
7a:6e:13:38:11:a0:fa:b9:74:a8:16:1a:44:bc:eb:39:41:79:
ba:1b:a6:4b:de:21:82:16:cc:85:75:6e:d0:92:06:2b:d3:06:
3a:df:56:17:00:90:aa:6f:6f:7d:23:45:89:4b:ab:88:fc:93:
bf:46:7c:3b:8d:82:cf:a3:76:b3:b6:2b:29:ea:87:27:49:b5:
de:fc:36:a0:61:a3:03:5f:92:7c:b1:79:29:1d:2e:56:2d:e8:
25:55:06:b7:c6:e4:f3:bc:93:5f:65:6b:b9:40:cb:d9:fb:d8:
7f:0c:0b:99:a0:3e:18:27:0b:1e:61:0e:21:05:6c:ff:27:23:
9d:27:39:1c:4e:0a:f3:dd:70:63:d3:65:88:5f:7f:1b:f9:a6:
31:cf:b1:2a:dd:f2:b1:97:76:7d:29:56:cc:53:f4:31:35:cc:
72:f0:4e:51:8a:c4:6a:a7:28:5e:fc:5b:65:f3:07:3c:f9:bc:
d1:ba:1b:59:83:e8:34:fa:61:69:a9:9f:41:b9:e8:de:45:38:
de:4e:9e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 11 10:05:07 2023 by rpki-client on console-fra.rpki-client.org