Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/CC272AC88D1311EF9895E61CC4F9AE02.roa
File: CC272AC88D1311EF9895E61CC4F9AE02.roa (raw, json)
Hash identifier: W6mRkl3QqUnoGLh6PqpUEJS59lKBU+e3I2QkhCpLj+4=
Subject key identifier: 54:22:7C:C1:C3:28:B1:DD:06:D4:19:D1:64:54:8B:57:E8:8F:80:B6
Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial: 0B72
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/CC272AC88D1311EF9895E61CC4F9AE02.roa
Signing time: Fri 18 Oct 2024 05:42:44 +0000
ROA not before: Fri 18 Oct 2024 05:42:44 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 17819
IP address blocks: 119.27.0.0/24 maxlen: 24
119.27.1.0/24 maxlen: 24
180.189.8.0/21 maxlen: 21
180.189.32.0/21 maxlen: 21
180.189.40.0/21 maxlen: 21
180.189.48.0/22 maxlen: 22
183.177.0.0/20 maxlen: 20
183.177.16.0/20 maxlen: 20
183.177.32.0/20 maxlen: 20
202.167.224.0/23 maxlen: 23
202.167.226.0/24 maxlen: 24
202.167.236.0/22 maxlen: 22
202.167.240.0/22 maxlen: 22
202.167.243.0/24 maxlen: 24
202.167.254.0/24 maxlen: 24
202.167.255.0/24 maxlen: 24
202.177.193.0/24 maxlen: 24
202.177.195.0/24 maxlen: 24
202.177.198.0/24 maxlen: 24
202.177.202.0/23 maxlen: 23
203.190.224.0/23 maxlen: 23
203.190.224.0/24 maxlen: 24
203.190.226.0/24 maxlen: 24
203.190.228.0/23 maxlen: 23
203.190.236.0/22 maxlen: 22
2407:b000::/33 maxlen: 33
Validation: Failed, certificate revoked on Fri 18 Oct 2024 06:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2930 (0xb72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E3F
Validity
Not Before: Oct 18 05:42:44 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6711f554-b7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:87:fb:70:20:b3:76:13:ac:ee:db:37:88:13:
0c:b4:a6:26:ef:8d:64:9a:88:6d:1e:e8:07:6c:52:
87:81:7e:53:4a:08:ee:8f:20:9f:47:56:dc:bc:0c:
23:50:6e:38:17:f9:cd:db:c4:c7:c6:ca:3c:45:25:
a0:a7:ad:ea:ab:19:aa:00:62:42:7c:6d:b8:74:68:
1d:57:6f:d8:1d:d3:4e:c8:df:d9:ef:8b:49:c3:6d:
1b:12:79:6a:d4:d8:c6:05:b7:13:97:f3:79:51:87:
2e:2a:f6:e1:83:b5:67:ee:dd:e1:3f:21:a3:99:19:
ea:6a:ce:53:af:9f:4f:2f:97:c2:55:ff:8e:17:7b:
e2:33:67:6b:8e:a8:c2:86:a5:06:81:b3:0c:6e:dd:
aa:90:13:ee:64:b0:0c:f5:68:1a:21:d2:65:44:83:
52:b3:72:40:da:7a:66:6c:23:a7:8b:53:33:31:05:
f6:d0:5d:46:1c:f3:48:f0:33:6a:e1:6b:7d:3e:2b:
cd:8b:2d:14:08:4a:c6:4e:97:27:27:eb:e1:07:a3:
15:db:d6:da:b1:d2:eb:7d:36:01:ec:25:cc:77:f2:
62:25:86:4a:eb:40:5a:dd:49:04:e8:a3:6e:e5:d6:
46:b1:97:28:9c:42:b9:c0:7c:a4:01:b6:db:8c:0c:
6e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:22:7C:C1:C3:28:B1:DD:06:D4:19:D1:64:54:8B:57:E8:8F:80:B6
X509v3 Authority Key Identifier:
keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/CC272AC88D1311EF9895E61CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.27.0.0/23
180.189.8.0/21
180.189.32.0-180.189.51.255
183.177.0.0-183.177.47.255
202.167.224.0-202.167.226.255
202.167.236.0-202.167.243.255
202.167.254.0/23
202.177.193.0/24
202.177.195.0/24
202.177.198.0/24
202.177.202.0/23
203.190.224.0-203.190.226.255
203.190.228.0/23
203.190.236.0/22
IPv6:
2407:b000::/33
Signature Algorithm: sha256WithRSAEncryption
76:48:00:bf:58:13:a5:d2:b7:39:b1:98:89:43:d0:89:fd:12:
ca:e8:9b:1a:48:dc:09:6c:ee:f8:8b:3f:11:d2:a8:ba:64:82:
89:5a:a7:3f:17:48:68:50:00:3a:c3:43:69:b1:4c:d8:b5:22:
61:7e:ca:18:de:d1:1b:00:8c:7e:4c:6b:97:b6:af:43:06:19:
42:2d:23:06:f5:7a:8d:9d:9b:85:45:70:8a:4c:99:b2:b4:60:
c1:9a:21:f9:d1:06:f2:46:2f:d1:be:70:4d:06:ec:9f:ca:ee:
04:13:ae:68:ea:96:07:b6:80:27:bc:0c:5e:30:b4:db:be:c1:
28:7b:d5:79:1a:10:60:b8:5b:67:76:59:ee:db:1c:ab:51:c2:
60:f1:27:c8:2d:b9:b8:b5:6e:e7:73:40:81:f1:0f:9c:a5:63:
6b:5d:40:96:42:a0:fc:2b:5f:d4:2e:0f:af:42:8a:80:1d:01:
5a:c6:6e:ef:aa:fc:62:c8:03:e4:76:ad:c3:29:f0:03:36:ad:
0b:49:a6:46:65:3c:ef:0f:f3:d6:8d:28:bf:3a:ff:e1:29:ff:
05:f1:29:18:44:f7:26:e2:e6:1a:93:b4:32:94:3f:e9:31:87:
9a:ca:73:8d:3f:9a:1f:c0:7b:b7:f9:54:2a:49:03:bb:3c:d7:
0f:25:1e:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:24:32 2025 by rpki-client