Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/485309C4806111EF9349D23DC4F9AE02.roa
File: 485309C4806111EF9349D23DC4F9AE02.roa (raw, json)
Hash identifier: IclYroGdhR47KhhwhuViY2LoGvCLh7dlMOvXlFNMFmQ=
Subject key identifier: 44:0E:E6:7E:E2:6D:87:10:EB:29:5C:08:52:DF:98:4E:FD:8A:90:6F
Certificate issuer: /CN=A914D6FC/serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2
Certificate serial: 0183
Authority key identifier: A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/485309C4806111EF9349D23DC4F9AE02.roa
Signing time: Wed 02 Oct 2024 01:54:39 +0000
ROA not before: Wed 02 Oct 2024 01:54:39 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 4658
IP address blocks: 202.81.224.0/19 maxlen: 22
202.81.226.0/23 maxlen: 24
202.81.228.0/22 maxlen: 24
202.81.232.0/21 maxlen: 24
202.81.240.0/20 maxlen: 24
2401:300::/35 maxlen: 35
2401:300:2000::/35 maxlen: 35
2401:300:4000::/35 maxlen: 35
2401:300:6000::/35 maxlen: 35
2401:300:8000::/35 maxlen: 35
2401:300:a000::/35 maxlen: 35
2401:300:c000::/35 maxlen: 35
2401:300:e000::/35 maxlen: 35
Validation: Failed, certificate revoked on Wed 16 Oct 2024 07:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D6FC/serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2
Validity
Not Before: Oct 2 01:54:39 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66fca7de-42e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:c2:2f:b4:48:ae:b8:aa:8f:49:b4:5c:e1:
6b:94:a5:50:0a:38:46:8b:3c:85:19:07:86:ec:bf:
fe:ca:2d:53:c5:8d:92:ef:88:63:e1:31:9e:1d:ca:
4a:91:51:ae:51:b3:fd:86:0a:3a:e0:9b:26:4a:06:
40:73:8b:1b:cc:2d:45:28:83:f5:6a:b6:80:11:ba:
0a:54:d9:5a:82:a0:14:d7:d9:6d:b8:a8:ab:b5:61:
41:1c:ee:b3:22:62:41:7c:ad:8f:d6:7a:95:1e:7a:
d0:65:d3:e1:98:8a:d2:e4:c3:14:6a:fe:04:a0:ec:
9f:de:3f:7f:b6:c3:a2:59:a5:ab:0d:fe:0f:1b:a1:
81:e5:5f:78:f3:98:f2:9a:66:c7:7e:ac:d1:3f:06:
a1:a9:4b:a2:ca:cf:d9:48:36:29:b3:67:5c:e9:36:
e9:fd:d2:4d:f3:cb:6e:5d:72:3d:63:d5:f1:c8:b7:
db:4e:ff:bb:36:0f:d1:74:80:2c:10:1e:97:ce:79:
1d:13:67:7f:79:68:39:06:1c:4f:27:7c:fa:a7:0a:
98:f9:af:81:83:0a:b1:f3:cc:62:1a:0f:c6:7c:cd:
84:c3:68:da:39:cb:b3:f8:cf:45:41:15:29:ef:76:
42:88:56:b2:30:0a:63:32:f7:67:5f:cb:a6:a7:30:
89:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0E:E6:7E:E2:6D:87:10:EB:29:5C:08:52:DF:98:4E:FD:8A:90:6F
X509v3 Authority Key Identifier:
keyid:A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/485309C4806111EF9349D23DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.81.224.0/19
IPv6:
2401:300::/32
Signature Algorithm: sha256WithRSAEncryption
83:c6:ab:20:39:68:6b:49:03:10:50:38:c6:f1:53:2c:7e:ff:
d5:12:5e:34:1e:0b:66:e3:1b:9c:5c:5f:d8:80:60:27:4b:23:
2c:91:3e:2f:c7:05:e5:c3:40:da:87:10:69:83:6c:81:ae:33:
e1:cc:3a:1b:73:2e:bf:9c:a9:0f:e9:b1:ae:46:ec:5f:70:95:
26:95:e0:fc:8f:27:4e:07:af:88:10:df:bb:05:cf:e7:f0:69:
d4:c6:ac:74:b0:5f:cc:ca:96:6b:bc:24:03:28:fd:09:1e:15:
71:49:f8:9b:bb:87:a3:6c:c6:b6:41:87:44:9a:9b:be:28:8a:
3c:cf:94:9a:ef:27:44:17:87:e7:3b:de:09:4a:eb:fb:e8:e9:
8b:91:62:24:d8:2c:96:ca:63:55:95:d5:66:42:d2:56:8e:62:
cd:a5:d1:fa:85:fa:fb:41:b9:c5:5f:2e:20:2a:11:27:de:0f:
0d:54:d8:40:2f:64:15:d7:ce:24:98:fb:6a:33:72:88:52:1e:
f0:96:44:e5:7c:f5:24:d8:49:ae:3d:6b:87:d7:e5:e6:e6:b7:
23:05:28:5e:44:86:27:92:6b:30:24:54:38:f1:e4:21:84:0e:
69:63:27:3d:c8:fb:db:76:ad:25:eb:1f:81:c8:4a:67:24:d8:
97:a4:12:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 10:45:13 2024 by rpki-client on console-ams.rpki-client.org