Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/BAA9E5AC04D311E9A6452047C4F9AE02.roa
File: BAA9E5AC04D311E9A6452047C4F9AE02.roa (raw, json)
Hash identifier: ofIk4v+ISfHb5ByHLd9YoxBp+fhGNIXSdsAJqlFEjw4=
Subject key identifier: F6:A5:BA:1A:E4:3A:AB:0C:DB:59:3F:7A:7E:5F:94:94:48:4C:6F:73
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 1B33
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/BAA9E5AC04D311E9A6452047C4F9AE02.roa
Signing time: Fri 26 Aug 2022 05:13:57 +0000
ROA not before: Fri 26 Aug 2022 05:13:57 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 58466
IP address blocks: 121.14.0.0/19 maxlen: 19
121.14.32.0/22 maxlen: 22
121.14.36.0/22 maxlen: 22
121.14.40.0/21 maxlen: 21
121.14.48.0/20 maxlen: 20
121.14.64.0/21 maxlen: 21
121.14.192.0/20 maxlen: 20
125.88.31.0/24 maxlen: 24
125.88.64.0/23 maxlen: 23
125.88.168.0/21 maxlen: 21
125.88.192.0/18 maxlen: 18
125.94.32.0/19 maxlen: 19
125.94.212.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6963 (0x1b33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: Aug 26 05:13:57 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63085694-f0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:47:60:84:40:f9:ae:f2:f1:3d:9f:f4:60:
a5:52:64:34:73:9e:b8:3f:61:71:07:9d:36:c4:0c:
39:1a:5f:7e:f5:7b:1c:ef:24:e2:6c:b8:2b:b2:85:
f3:c5:18:c4:7c:28:62:f4:22:e2:91:d4:88:e4:60:
62:df:af:b0:32:54:78:cd:c1:28:5d:02:b0:e7:67:
36:06:da:ca:b6:93:aa:59:95:75:9d:ec:df:47:03:
95:c8:77:06:12:64:dc:91:a2:62:97:4c:ae:39:df:
37:bc:61:fc:89:f5:a7:d2:63:a5:35:a1:43:b8:bd:
16:1d:cf:0e:c2:11:b0:7a:ce:06:be:bf:ae:bd:a0:
45:b7:2e:24:e9:f3:18:6f:62:35:aa:d4:d9:b9:96:
4f:fc:38:30:1b:af:8c:b9:ea:09:c4:c3:11:8a:28:
14:38:8a:66:e6:b4:21:40:8d:92:15:cf:23:3c:eb:
79:c4:4f:38:ff:ca:8f:47:17:8a:2b:15:5b:77:12:
7d:53:1c:70:04:8e:20:2d:1d:c6:5a:74:1d:4c:05:
08:00:a4:72:25:ee:21:74:1c:a6:b6:47:94:af:8c:
e6:8f:ee:b9:6f:13:58:bf:38:91:22:f4:8a:a5:96:
4a:c0:6c:09:8a:c0:69:1b:cb:97:e1:b5:bc:1d:30:
f5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A5:BA:1A:E4:3A:AB:0C:DB:59:3F:7A:7E:5F:94:94:48:4C:6F:73
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/BAA9E5AC04D311E9A6452047C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.14.0.0-121.14.71.255
121.14.192.0/20
125.88.31.0/24
125.88.64.0/23
125.88.168.0/21
125.88.192.0/18
125.94.32.0/19
125.94.212.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:8c:6f:10:a8:4c:87:26:60:c0:b7:74:1d:43:00:e0:d2:3d:
af:6a:90:2d:51:aa:5b:5e:8f:1a:50:70:cd:cc:d4:d3:fe:e0:
fc:06:a2:58:09:2e:dc:bf:62:e4:f0:fb:5f:dd:e6:e6:9e:16:
54:67:7f:00:a6:df:e6:2d:c4:f4:78:61:b5:59:b0:27:ce:ce:
61:a9:b1:35:3b:06:ac:40:88:f2:09:7d:18:52:0e:e6:91:6e:
a3:f1:75:12:63:46:e9:3c:99:ce:0c:76:10:85:bc:c7:d3:dd:
d6:6b:27:dc:d7:0f:38:d9:1e:1c:28:67:3c:b2:8c:6a:8e:ee:
71:35:58:bd:05:cd:de:92:a3:1d:69:7b:5e:f8:78:57:a9:b1:
27:a3:a7:9b:ff:c6:83:1e:01:dc:61:0c:e7:f4:dc:57:6f:2c:
99:1d:e3:85:66:84:3a:14:ae:c8:f9:fe:40:5a:7f:00:1b:39:
61:97:f5:12:3b:c2:12:ac:c9:b2:80:02:86:02:70:87:d3:20:
4f:d7:2a:f2:54:11:90:f5:1b:ae:c8:b5:63:67:34:25:6a:cd:
9f:d7:ed:7d:93:3a:84:9b:3c:b7:f2:eb:e3:52:9a:17:91:67:
e0:cb:bd:9a:4d:84:5b:52:7b:85:fd:97:1f:94:7c:a8:ab:6b:
f3:02:55:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:39 2023 by rpki-client on console-ams.rpki-client.org