Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/072A789C1FD711EEA6877138C4F9AE02.roa
File: 072A789C1FD711EEA6877138C4F9AE02.roa (raw, json)
Hash identifier: MPIh/FLbqm1Ej9UAhSPto751GLmdeKmMtW1kbiDYLxU=
Subject key identifier: 41:15:50:29:8C:87:FD:5E:CA:CE:94:A9:65:3A:98:2C:DD:C4:71:38
Certificate issuer: /CN=A913C627/serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF
Certificate serial: 06E1
Authority key identifier: 6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/072A789C1FD711EEA6877138C4F9AE02.roa
Signing time: Tue 11 Jul 2023 10:38:09 +0000
ROA not before: Tue 11 Jul 2023 10:38:09 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 9738
IP address blocks: 61.14.96.0/19 maxlen: 19
61.14.104.0/24 maxlen: 24
61.14.105.0/24 maxlen: 24
61.14.106.0/24 maxlen: 24
61.14.107.0/24 maxlen: 24
61.14.116.0/24 maxlen: 24
61.14.117.0/24 maxlen: 24
61.14.121.0/24 maxlen: 24
61.14.123.0/24 maxlen: 24
103.28.196.0/23 maxlen: 23
103.28.198.0/23 maxlen: 23
202.148.224.0/21 maxlen: 21
202.148.232.0/24 maxlen: 24
202.148.233.0/24 maxlen: 24
202.148.234.0/23 maxlen: 23
202.148.236.0/22 maxlen: 22
202.148.238.0/24 maxlen: 24
202.148.239.0/24 maxlen: 24
203.19.157.0/24 maxlen: 24
210.18.192.0/22 maxlen: 24
210.18.196.0/24 maxlen: 24
210.18.197.0/24 maxlen: 24
210.18.198.0/24 maxlen: 24
210.18.199.0/24 maxlen: 24
210.18.200.0/24 maxlen: 24
210.18.201.0/24 maxlen: 24
210.18.202.0/23 maxlen: 23
210.18.202.0/24 maxlen: 24
210.18.203.0/24 maxlen: 24
210.18.204.0/22 maxlen: 22
210.18.208.0/20 maxlen: 24
210.18.224.0/20 maxlen: 20
210.18.224.0/21 maxlen: 21
210.18.232.0/24 maxlen: 24
210.18.233.0/24 maxlen: 24
210.18.234.0/23 maxlen: 23
210.18.236.0/22 maxlen: 22
210.18.240.0/24 maxlen: 24
210.18.241.0/24 maxlen: 24
210.18.242.0/24 maxlen: 24
210.18.243.0/24 maxlen: 24
210.18.244.0/22 maxlen: 22
210.18.248.0/23 maxlen: 23
210.18.250.0/23 maxlen: 23
210.18.251.0/24 maxlen: 24
210.18.252.0/24 maxlen: 24
210.18.253.0/24 maxlen: 24
210.18.254.0/24 maxlen: 24
210.18.255.0/24 maxlen: 24
2403:c800::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1761 (0x6e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C627/serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF
Validity
Not Before: Jul 11 10:38:09 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=64ad3111-75ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:51:dd:a6:61:88:d6:49:95:91:80:ee:a8:
ba:35:f8:36:4b:a5:47:ec:21:42:9b:95:b3:f4:fc:
e4:05:23:f5:b3:90:3f:d4:f1:9a:2e:19:16:ee:e0:
24:60:4e:cb:7b:82:69:78:f3:09:8d:0c:8f:a6:2d:
f0:0f:44:ec:4e:6a:3d:37:e4:0c:f6:e2:96:fe:da:
e7:7f:b0:34:5c:d8:08:7c:28:e4:a5:8f:d9:72:e0:
a3:d0:90:21:74:93:f5:8a:a3:ab:b0:77:40:f1:8e:
f1:ff:0a:4a:e2:59:f5:1f:15:50:ad:54:41:a3:a5:
a7:38:a7:6a:70:81:5e:6f:8c:47:03:da:bd:1c:5e:
62:b4:6b:20:bc:05:48:80:fe:75:57:75:b4:c8:fa:
80:80:84:8b:82:31:f7:70:95:50:65:3a:7a:bc:f5:
e9:1e:03:83:b7:8f:5c:cd:54:01:c7:3b:1f:81:c7:
f3:8d:49:d2:27:52:48:33:c2:e4:c2:7e:a4:94:6b:
ba:1d:7c:1f:3f:70:ce:75:99:b9:67:66:8b:65:b1:
e6:a9:4f:68:4d:cd:06:02:18:1b:cc:fd:8d:6c:df:
b8:6f:70:7f:4f:30:c8:50:82:03:eb:94:dc:e5:77:
1a:b9:07:f2:30:7e:a4:74:11:e2:2e:c0:02:a4:b9:
d1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:15:50:29:8C:87:FD:5E:CA:CE:94:A9:65:3A:98:2C:DD:C4:71:38
X509v3 Authority Key Identifier:
keyid:6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/072A789C1FD711EEA6877138C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.14.96.0/19
103.28.196.0/22
202.148.224.0/20
203.19.157.0/24
210.18.192.0/18
IPv6:
2403:c800::/32
Signature Algorithm: sha256WithRSAEncryption
91:97:7d:e7:af:aa:2b:f2:c8:28:c8:43:2f:9d:2d:74:b1:ab:
65:63:1a:68:36:bb:a9:e7:2d:ac:4d:69:fb:3c:c9:b2:6d:50:
44:bb:b3:68:51:bb:b5:d1:24:5e:6b:f6:0c:cb:7d:9a:91:14:
f7:c1:21:fc:22:7e:67:c0:e7:6d:04:69:76:58:64:d6:05:c1:
ca:9d:0a:65:07:e6:d8:2a:0e:81:22:75:fd:fa:f0:70:a8:88:
de:69:f0:85:ce:ac:10:b4:4d:76:e7:18:64:5c:19:61:81:87:
3f:01:f3:7b:01:c0:1f:a9:19:48:db:79:18:a9:1c:1f:bf:1f:
e1:45:ac:68:ea:e6:b0:be:b6:40:34:3b:94:3e:19:d9:f0:35:
38:21:96:25:2f:cb:4c:7e:57:eb:13:99:75:ab:59:7a:3f:9a:
4b:88:12:b9:ef:5f:8a:c5:2a:6c:39:f3:f0:a8:7b:2e:e3:2a:
2e:78:7f:14:5c:8a:72:bd:8e:5b:84:5b:d1:52:8a:13:f2:89:
32:68:ab:ac:42:6e:c9:f1:02:a3:d5:6c:7b:63:1b:e5:e3:e3:
a7:45:00:05:6d:6c:6f:ba:a8:10:f9:86:25:b6:b1:dc:1b:5b:
1b:a0:38:b9:44:19:30:1d:a3:93:1e:45:c4:db:5b:19:ca:b6:
00:f4:18:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-ams.rpki-client.org