Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/35E7E856690811EFAADA3B09C4F9AE02.roa
File: 35E7E856690811EFAADA3B09C4F9AE02.roa (raw, json)
Hash identifier: IKJtKLcraHbjHblKiGKHKOhtgPgmhWjPTJkYlL6d9FE=
Subject key identifier: 86:68:FD:3A:22:5D:D4:86:77:B4:13:3A:95:C8:EC:0B:13:15:C9:31
Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial: 06A0
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/35E7E856690811EFAADA3B09C4F9AE02.roa
Signing time: Mon 02 Sep 2024 08:49:06 +0000
ROA not before: Mon 02 Sep 2024 08:49:06 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 45820
IP address blocks: 14.194.0.0/18 maxlen: 24
14.194.64.0/18 maxlen: 24
14.194.128.0/18 maxlen: 24
14.194.208.0/20 maxlen: 24
14.194.240.0/20 maxlen: 24
14.195.0.0/18 maxlen: 24
14.195.64.0/19 maxlen: 23
14.195.64.0/21 maxlen: 24
14.195.72.0/22 maxlen: 24
14.195.76.0/23 maxlen: 24
14.195.78.0/24 maxlen: 24
14.195.80.0/20 maxlen: 24
14.195.96.0/19 maxlen: 24
14.195.192.0/20 maxlen: 24
14.195.208.0/20 maxlen: 24
14.195.240.0/20 maxlen: 24
49.200.0.0/14 maxlen: 14
49.202.208.0/24 maxlen: 24
49.249.0.0/17 maxlen: 24
49.249.128.0/18 maxlen: 24
115.160.217.0/24 maxlen: 24
182.156.0.0/18 maxlen: 22
182.156.0.0/22 maxlen: 24
182.156.4.0/23 maxlen: 24
182.156.8.0/21 maxlen: 24
182.156.16.0/22 maxlen: 24
182.156.22.0/23 maxlen: 24
182.156.24.0/23 maxlen: 24
182.156.28.0/22 maxlen: 24
182.156.32.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 09:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1696 (0x6a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Validity
Not Before: Sep 2 08:49:06 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66d57c01-1366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e7:da:90:1c:3e:da:51:55:d6:a6:e7:dc:42:
a8:93:70:85:ef:96:69:89:72:03:a0:bd:68:bb:54:
1c:a0:b9:98:99:8b:c0:95:c3:cc:ef:82:f7:f2:a5:
15:5e:d3:e8:ba:37:c5:6a:96:75:09:39:58:cf:e7:
c0:d7:7d:e3:9d:4e:1e:ac:af:f5:08:5c:80:04:56:
39:ee:6e:e4:b1:49:37:9a:67:5d:e1:a8:e6:16:f8:
9f:b3:48:fd:d8:ae:c4:e9:e0:5e:fd:9b:14:19:ae:
03:0c:96:6d:cb:11:fd:ee:a1:7a:8b:db:b2:39:7b:
98:d0:19:8d:58:4b:14:ed:b9:1a:67:ec:d7:ec:6a:
31:9d:a3:77:06:7e:6d:4c:6b:70:ff:32:c3:ed:08:
7e:43:e6:a2:18:95:46:a7:1e:63:6f:dd:34:43:55:
4f:53:23:8b:a8:20:e7:9d:6b:ad:c6:27:9b:de:33:
51:f4:73:42:59:7b:4a:00:a2:32:05:0a:b4:eb:36:
7b:5e:cc:87:fd:bf:43:7c:a7:3c:df:63:ed:88:87:
dc:90:71:e8:ee:f3:54:d4:b9:a6:25:fb:80:42:34:
7d:77:d8:57:d6:eb:93:80:d1:66:cd:32:a8:33:cb:
f0:bc:a0:d2:e1:cd:30:b5:25:46:eb:ec:2c:da:cb:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:68:FD:3A:22:5D:D4:86:77:B4:13:3A:95:C8:EC:0B:13:15:C9:31
X509v3 Authority Key Identifier:
keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/35E7E856690811EFAADA3B09C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.194.0.0-14.194.191.255
14.194.208.0/20
14.194.240.0-14.195.127.255
14.195.192.0/19
14.195.240.0/20
49.200.0.0/14
49.249.0.0-49.249.191.255
115.160.217.0/24
182.156.0.0/18
Signature Algorithm: sha256WithRSAEncryption
57:ad:ca:56:8f:05:0c:b7:29:33:01:57:25:ca:49:d0:5b:05:
d4:70:d3:eb:ac:62:33:9c:f2:ab:96:7e:64:35:67:73:bb:13:
ca:ea:55:99:fa:ae:e6:25:33:5e:75:c3:89:ff:63:b2:a0:d0:
d7:79:81:f3:f3:53:78:b8:8a:ee:58:99:31:6d:ba:6b:a7:7d:
fb:11:3b:c8:53:5d:49:cf:b5:df:4a:73:6d:a5:12:a2:8e:e0:
50:b9:5a:73:4f:6c:12:74:5d:f7:f7:36:77:0e:3b:ab:e7:19:
98:5c:6f:39:de:8d:e3:7e:92:87:c3:e2:4e:c6:f3:64:c4:b1:
b5:9f:72:13:c4:03:02:7a:ec:c8:27:b4:c8:78:0b:fa:e5:ad:
14:f7:f9:c1:32:f4:c4:6b:1b:83:b0:eb:b4:f0:40:51:fd:40:
2d:dd:e4:2e:ff:22:35:d8:5c:62:07:12:16:f3:45:01:5e:39:
c0:d0:b6:44:e9:6b:af:d8:85:cc:f5:b7:38:26:c3:d9:43:88:
3a:12:20:c2:bf:db:13:00:d6:df:ad:c1:e5:d6:fa:f8:bf:d7:
93:a6:78:ce:8b:bc:50:b3:fb:d5:3d:14:b7:b8:a3:fc:c2:83:
3b:fb:28:ce:39:63:50:99:ce:c4:45:d2:de:41:b3:f9:a9:f6:
3c:5e:0a:bf
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgICBqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx
MjM5MDMzNzkwHhcNMjQwOTAyMDg0OTA2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ1N2MwMS0xMzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6+fakBw+2lFV1qbn3EKok3CF75ZpiXIDoL1ou1QcoLmYmYvAlcPM74L38qUV
XtPoujfFapZ1CTlYz+fA133jnU4erK/1CFyABFY57m7ksUk3mmdd4ajmFvifs0j9
2K7E6eBe/ZsUGa4DDJZtyxH97qF6i9uyOXuY0BmNWEsU7bkaZ+zX7GoxnaN3Bn5t
TGtw/zLD7Qh+Q+aiGJVGpx5jb900Q1VPUyOLqCDnnWutxieb3jNR9HNCWXtKAKIy
BQq06zZ7XsyH/b9DfKc832PtiIfckHHo7vNU1LmmJfuAQjR9d9hX1uuTgNFmzTKo
M8vwvKDS4c0wtSVG6+ws2stMTQIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFIZo/Toi
XdSGd7QTOpXI7AsTFckxMB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5
MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN
M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTdEN0EvNUREQ0NDQzY5OTE1MTFFQjk2NzI3MjQzQzRGOUFFMDIvMzVFN0U4NTY2
OTA4MTFFRkFBREEzQjA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZAYIKwYBBQUHAQcBAf8E
VTBTMFEEAgABMEswCwMDAQ7CAwQGDsKAAwQEDsLQMAwDBAQOwvADBAcOwwADBAUO
w8ADBAQOw/ADAwIxyDALAwMAMfkDBAYx+YADBABzoNkDBAa2nAAwDQYJKoZIhvcN
AQELBQADggEBAFetylaPBQy3KTMBVyXKSdBbBdRw0+usYjOc8quWfmQ1Z3O7E8rq
VZn6ruYlM151w4n/Y7Kg0Nd5gfPzU3i4iu5YmTFtumunffsRO8hTXUnPtd9Kc22l
EqKO4FC5WnNPbBJ0Xff3NncOO6vnGZhcbznejeN+kofD4k7G82TEsbWfchPEAwJ6
7MgntMh4C/rlrRT3+cEy9MRrG4Ow67TwQFH9QC3d5C7/IjXYXGIHEhbzRQFeOcDQ
tkTpa6/Yhcz1tzgmw9lDiDoSIMK/2xMA1t+tweXW+vi/15OmeM6LvFCz+9U9FLe4
o/zCgzv7KM45Y1CZzsRF0t5Bs/mp9jxeCr8=
-----END CERTIFICATE-----
Generated at Mon Sep 2 12:49:59 2024 by rpki-client on console-ams.rpki-client.org