Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/974153500A1511EABBF8B259C4F9AE02.roa
File: 974153500A1511EABBF8B259C4F9AE02.roa (raw, json)
Hash identifier: +A+a/IfAwabc4ZX3FIR31qxnYx7MHDtBwJGXGTBVxFU=
Subject key identifier: 6E:DE:FD:E5:CC:DB:17:94:D1:9D:16:D7:FD:FE:7B:6B:6A:E8:8A:E7
Certificate issuer: /CN=A915C281/serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
Certificate serial: 3394
Authority key identifier: 13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/974153500A1511EABBF8B259C4F9AE02.roa
Signing time: Wed 11 Oct 2023 10:23:29 +0000
ROA not before: Wed 11 Oct 2023 10:23:29 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 45245
IP address blocks: 27.54.144.0/22 maxlen: 24
43.245.120.0/23 maxlen: 24
43.245.122.0/23 maxlen: 24
103.15.164.0/22 maxlen: 24
103.67.156.0/23 maxlen: 24
103.67.158.0/23 maxlen: 24
103.244.12.0/22 maxlen: 24
103.253.44.0/22 maxlen: 24
116.58.200.0/22 maxlen: 24
116.58.204.0/22 maxlen: 24
150.242.104.0/24 maxlen: 24
150.242.105.0/24 maxlen: 24
150.242.106.0/24 maxlen: 24
150.242.107.0/24 maxlen: 24
202.86.216.0/21 maxlen: 24
203.223.92.0/23 maxlen: 24
203.223.94.0/23 maxlen: 24
2401:1900::/32 maxlen: 32
2401:1900::/40 maxlen: 48
2401:1900:100::/46 maxlen: 48
2401:1900:1000::/40 maxlen: 48
2401:1900:2000::/40 maxlen: 48
2401:1900:8000::/40 maxlen: 48
2401:1900:9000::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 05 Dec 2023 08:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13204 (0x3394)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C281/serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
Validity
Not Before: Oct 11 10:23:29 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=652677a1-af6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:5f:af:2f:55:47:8b:27:f8:97:68:36:26:
5f:21:75:7e:2d:e6:45:68:f1:03:1a:e0:9d:b6:9e:
06:cd:d1:24:b9:7f:06:34:7c:20:7a:48:b4:1b:c4:
b2:1c:13:c0:89:b8:61:dc:cc:04:2d:17:a2:c2:a9:
2d:62:17:7f:68:28:a3:70:bf:85:24:23:97:36:a0:
e4:32:ee:f7:10:a1:a2:6f:e4:cd:2d:07:ce:e7:59:
2e:9a:fd:51:61:67:30:27:4a:b4:6d:5e:17:a7:c3:
01:36:18:1c:5b:c9:7a:4c:32:02:93:fa:8b:74:f3:
3d:7b:f6:31:3e:68:4c:1b:a9:13:cd:e8:a2:af:09:
ea:dd:9c:b7:23:53:63:64:31:cd:6f:e5:01:cc:40:
d3:2d:70:c7:6a:a5:b8:3d:5d:1d:45:a2:74:22:2c:
b1:75:b2:38:6f:45:9f:21:bb:3f:e5:30:34:75:8d:
07:b3:2e:aa:79:7e:b8:e5:f0:43:a0:2c:b7:1b:95:
57:f2:4e:8b:f4:7b:ef:d4:34:d3:c6:4c:de:df:ef:
90:57:a5:b8:ba:05:5f:ab:4f:c2:56:a6:cc:aa:c8:
03:27:15:b6:ee:31:7a:88:9d:e8:e6:82:1d:7e:c0:
82:91:25:82:ee:d4:52:41:de:6b:69:e9:05:ea:5e:
c9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DE:FD:E5:CC:DB:17:94:D1:9D:16:D7:FD:FE:7B:6B:6A:E8:8A:E7
X509v3 Authority Key Identifier:
keyid:13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/974153500A1511EABBF8B259C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.54.144.0/22
43.245.120.0/22
103.15.164.0/22
103.67.156.0/22
103.244.12.0/22
103.253.44.0/22
116.58.200.0/21
150.242.104.0/22
202.86.216.0/21
203.223.92.0/22
IPv6:
2401:1900::/32
Signature Algorithm: sha256WithRSAEncryption
16:08:36:f4:82:69:46:ff:97:5a:b3:35:ae:ed:bc:b2:cc:4e:
8f:c8:f9:bd:1a:0a:e8:f0:cd:b4:1d:a3:c1:bc:f5:4c:b6:1e:
be:49:fc:1d:0a:2b:b5:91:d8:c4:98:5a:10:82:57:21:49:b6:
4f:63:fc:50:45:5a:e8:05:b1:8e:92:82:e6:66:36:15:59:0b:
96:01:b1:92:25:60:41:07:7d:16:f0:06:23:f2:df:31:1d:4c:
ac:4e:2f:8f:f5:01:5d:cf:c3:82:75:4c:fd:f5:2a:9f:97:06:
62:a3:2b:1d:9d:c2:1e:3d:71:d0:86:46:84:a7:22:46:dd:88:
46:98:e3:97:44:62:68:51:2c:80:96:9c:50:d0:5f:be:82:db:
b9:e4:1f:44:14:2e:e0:75:74:bf:ab:df:02:fe:87:88:3e:a7:
fb:58:41:46:e0:40:a6:50:7e:38:fe:2a:17:06:8a:ec:a7:8e:
54:d9:e5:71:82:36:5c:64:8a:aa:b0:4e:a9:a2:fa:82:f5:6a:
14:a6:1e:bc:93:b6:34:b6:b7:c6:11:ad:c1:98:34:fc:6f:c4:
5c:94:d1:83:ff:b8:37:dc:5c:e5:c8:9f:26:5d:08:15:de:49:
d1:66:eb:5c:fe:2a:6c:1b:eb:b6:e0:5a:fc:42:bc:1a:c8:91:
a1:e3:fa:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:08 2024 by rpki-client on console-fra.rpki-client.org