Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/FA0C97DE84C211EE97AF3C48C4F9AE02.roa
File: FA0C97DE84C211EE97AF3C48C4F9AE02.roa (raw, json)
Hash identifier: pnBEDmAP4oORdi8ejalN3PmrNucIDFchBb2PbPSBjLw=
Subject key identifier: 33:1A:0D:43:6D:5F:BD:68:29:64:2E:C0:68:D9:56:FC:E7:F2:68:55
Certificate issuer: /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
Certificate serial: 0567
Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/FA0C97DE84C211EE97AF3C48C4F9AE02.roa
Signing time: Thu 16 Nov 2023 20:59:05 +0000
ROA not before: Thu 16 Nov 2023 20:59:05 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 9790
IP address blocks: 131.203.0.0/16 maxlen: 20
131.203.29.0/24 maxlen: 24
131.203.48.0/24 maxlen: 24
131.203.49.0/24 maxlen: 24
131.203.78.0/24 maxlen: 24
131.203.79.0/24 maxlen: 24
158.140.224.0/20 maxlen: 24
158.140.240.0/21 maxlen: 24
158.140.248.0/22 maxlen: 24
161.29.0.0/16 maxlen: 20
161.65.0.0/19 maxlen: 20
161.65.64.0/18 maxlen: 20
161.65.128.0/19 maxlen: 19
161.65.192.0/18 maxlen: 22
Validation: Failed, certificate revoked on Fri 17 Nov 2023 02:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1383 (0x567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
Validity
Not Before: Nov 16 20:59:05 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=65568299-9e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b1:cf:a4:1d:75:2d:1a:4d:ab:df:8d:7b:d4:
72:e4:db:21:4c:84:d2:2b:f5:69:08:69:98:30:8a:
4a:c0:a2:fe:be:c7:60:d5:e2:3b:e6:1a:7e:1c:31:
26:44:07:4f:63:c9:d0:09:6a:62:dc:39:bc:fb:63:
61:8c:50:5c:00:13:64:81:55:d9:90:c2:8c:81:8f:
74:39:6b:4b:65:a5:b5:01:12:4e:83:f3:c2:fa:8a:
5d:bc:c6:d9:a8:87:ba:a1:91:09:8c:f1:c7:03:79:
ba:9a:39:a0:92:82:c6:0e:c0:db:a6:16:54:18:90:
e6:a3:f2:fa:6e:4c:30:08:56:fa:7f:7d:1d:e3:6f:
4d:f8:e7:da:b3:bf:2d:f8:f8:51:a4:72:2e:e2:7a:
ce:73:48:77:ae:e7:59:80:1c:15:fa:44:91:c2:0f:
56:78:ee:8c:36:86:6e:ed:80:ab:c2:6d:7f:5e:86:
de:64:bb:81:66:dc:d3:bb:ab:fc:c3:f9:44:ae:e8:
5d:d2:8a:44:37:b0:49:24:3f:2b:cf:1e:08:ec:fd:
3e:e4:e2:e4:b7:32:4d:63:6b:88:bb:1f:44:3a:76:
c5:20:c1:44:ee:5d:f2:d7:b7:f3:7b:f8:a4:8d:22:
9b:79:e9:07:5d:56:eb:d1:86:c3:0b:42:d1:eb:98:
22:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1A:0D:43:6D:5F:BD:68:29:64:2E:C0:68:D9:56:FC:E7:F2:68:55
X509v3 Authority Key Identifier:
keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/FA0C97DE84C211EE97AF3C48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
131.203.0.0/16
158.140.224.0-158.140.251.255
161.29.0.0/16
161.65.0.0/19
161.65.64.0-161.65.159.255
161.65.192.0/18
Signature Algorithm: sha256WithRSAEncryption
29:22:49:48:a2:78:bf:46:d7:13:99:e5:81:eb:2b:ef:ca:bb:
fb:c6:bb:e3:4e:28:dc:07:9e:3d:63:df:74:90:dd:9b:d7:c9:
4c:b0:e0:d2:85:64:88:d9:c5:95:55:e7:3b:bf:6d:c1:2a:70:
52:dd:d5:91:64:72:2c:fd:99:d8:07:aa:f7:5e:ad:cd:0e:99:
f8:48:1e:f0:34:9d:33:d6:fa:69:67:c9:7a:7b:ca:02:3f:d2:
67:a8:03:c2:bf:d1:d2:ac:ee:18:a6:c3:ea:d1:9c:7a:fc:8b:
71:80:57:5c:1b:3c:8b:d7:e4:36:8d:cf:68:42:fb:20:f0:f8:
50:1c:9f:74:25:06:8d:4d:93:b0:9f:4e:8d:df:6e:c7:87:4b:
41:ef:8c:f8:b4:de:1d:61:54:a6:5f:b1:d5:ce:c6:f9:cd:0f:
f9:cd:18:ff:e7:03:dd:d8:d9:f4:d3:68:14:f0:c0:87:b2:a6:
cd:db:64:09:be:a7:cc:62:78:47:31:37:f4:71:a9:72:56:38:
35:8a:73:b7:43:40:af:aa:99:14:13:b1:c4:88:fe:cb:40:9a:
32:f0:62:80:98:d5:8e:6e:f5:a5:70:ce:fd:31:72:95:14:08:
69:30:3c:30:23:b8:71:d2:50:99:11:c3:fa:6f:8e:13:59:02:
11:10:17:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-ams.rpki-client.org