Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/E4A7390C087B11EF8828CF86C4F9AE02.roa
File: E4A7390C087B11EF8828CF86C4F9AE02.roa (raw, json)
Hash identifier: 46RCy+rfDZv7YpKyFvD98L+Yvf5CqsxXqWm8kqeCQfc=
Subject key identifier: AC:1A:01:52:04:EB:0B:5F:90:DD:4E:B8:B7:A3:CD:E0:82:C4:3C:5F
Certificate issuer: /CN=A915C281/serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
Certificate serial: 342B
Authority key identifier: 13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/E4A7390C087B11EF8828CF86C4F9AE02.roa
Signing time: Thu 02 May 2024 12:23:36 +0000
ROA not before: Thu 02 May 2024 12:23:36 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 45245
IP address blocks: 27.54.144.0/22 maxlen: 24
43.245.120.0/23 maxlen: 24
43.245.122.0/23 maxlen: 24
43.255.20.0/22 maxlen: 24
59.152.0.0/21 maxlen: 24
103.15.164.0/22 maxlen: 24
103.67.156.0/23 maxlen: 24
103.67.158.0/23 maxlen: 24
103.239.4.0/22 maxlen: 24
103.244.12.0/22 maxlen: 24
103.253.44.0/22 maxlen: 24
116.58.200.0/22 maxlen: 24
116.58.204.0/22 maxlen: 24
150.242.104.0/22 maxlen: 24
202.86.216.0/21 maxlen: 24
203.223.92.0/23 maxlen: 24
203.223.94.0/23 maxlen: 24
2401:1900::/32 maxlen: 36
2401:1900::/42 maxlen: 48
2401:1900:40::/42 maxlen: 42
2401:1900:80::/42 maxlen: 46
2401:1900:c0::/42 maxlen: 46
2401:1900:100::/42 maxlen: 46
2401:1900:140::/42 maxlen: 42
2401:1900:180::/42 maxlen: 42
2401:1900:1000::/42 maxlen: 48
2401:1900:1040::/42 maxlen: 42
2401:1900:1080::/42 maxlen: 42
2401:1900:2000::/42 maxlen: 48
2401:1900:2040::/42 maxlen: 42
2401:1900:2080::/42 maxlen: 42
2401:1900:8000::/42 maxlen: 48
2401:1900:8040::/42 maxlen: 46
2401:1900:8080::/42 maxlen: 46
2401:1900:80c0::/42 maxlen: 46
2401:1900:8140::/42 maxlen: 42
2401:1900:8180::/42 maxlen: 42
2401:1900:81c0::/42 maxlen: 42
2401:1900:9000::/42 maxlen: 48
Validation: Failed, certificate revoked on Sun 05 May 2024 05:39:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13355 (0x342b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C281/serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
Validity
Not Before: May 2 12:23:36 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=663385c7-dccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:17:1d:47:3a:09:76:ba:f2:9f:7d:c8:9b:
ca:1f:06:0c:39:f5:bc:7b:2f:a6:16:6e:da:09:cd:
8e:8f:4a:5f:43:79:3c:05:a3:88:d3:02:22:d1:7e:
1c:36:91:84:0c:5f:a4:85:44:4d:1d:4f:da:2e:17:
93:72:0b:fe:e7:3f:e5:8b:0d:f2:e0:21:d9:32:13:
e6:06:9e:7f:e8:23:a8:64:f1:be:5d:c6:34:c9:f6:
a1:f2:12:18:6c:3e:4e:d5:28:66:c6:a1:d5:ff:b9:
48:bf:ff:0a:2b:b2:b1:bd:08:bc:6d:e5:55:bc:6c:
16:14:4c:78:46:56:a5:b3:35:05:ef:31:d7:c7:f0:
d6:db:f7:39:f6:6d:37:1b:df:4a:1c:08:f8:1b:c6:
08:84:bf:f4:24:af:f2:ce:5e:42:a6:b8:2c:a1:83:
c1:cf:ea:2c:77:be:ac:28:ea:4d:2b:94:cf:72:d8:
6d:6b:42:e5:4b:db:7c:dc:46:3f:94:18:3c:5b:55:
6e:53:44:00:8d:08:3e:57:9c:1d:41:2f:b4:32:fa:
ba:05:c5:4c:b7:b1:e0:8d:70:07:37:18:3e:38:fb:
98:a9:67:73:75:f8:61:aa:12:1b:d8:a4:a4:37:3b:
b8:39:a5:ed:e2:42:85:6e:4a:22:5a:b2:0f:37:73:
5d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1A:01:52:04:EB:0B:5F:90:DD:4E:B8:B7:A3:CD:E0:82:C4:3C:5F
X509v3 Authority Key Identifier:
keyid:13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/E4A7390C087B11EF8828CF86C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.54.144.0/22
43.245.120.0/22
43.255.20.0/22
59.152.0.0/21
103.15.164.0/22
103.67.156.0/22
103.239.4.0/22
103.244.12.0/22
103.253.44.0/22
116.58.200.0/21
150.242.104.0/22
202.86.216.0/21
203.223.92.0/22
IPv6:
2401:1900::/32
Signature Algorithm: sha256WithRSAEncryption
2a:89:4b:32:5b:4b:6c:c0:43:7c:78:3c:65:23:20:d6:39:eb:
5a:83:33:c1:78:55:54:32:9e:a5:0d:05:1f:9b:70:b0:7a:b1:
c7:89:e9:0d:52:1f:31:12:46:6d:3b:4d:9d:fa:3b:56:e4:bb:
94:dc:86:5c:9d:68:01:7c:89:a8:ec:a4:03:97:0d:11:48:70:
b2:ed:a2:d5:e3:8f:c4:f5:a2:19:31:dc:1d:4e:8a:58:ae:57:
9e:72:c3:07:df:02:98:1b:f3:64:c7:45:8c:96:23:0c:5c:4a:
6b:1c:02:4c:08:12:3f:e0:98:80:25:19:96:ba:05:38:e4:ab:
21:36:d1:e4:4f:8c:92:7d:06:6e:05:8e:5a:7f:cd:a6:32:81:
2d:e2:c1:9d:7d:de:cc:ce:97:0e:87:66:28:89:e9:c8:a3:d8:
c5:94:58:65:70:48:13:0b:33:f0:f7:8f:51:aa:fc:57:5a:2e:
27:4a:7a:11:78:6b:d1:25:0f:dc:85:2a:21:a7:15:3e:08:12:
b8:8e:36:3c:11:ea:3c:93:02:3c:2a:4d:9d:3c:02:29:b2:e1:
a8:1f:8e:db:ef:2d:14:9e:04:8c:5f:b2:ba:c5:ff:a0:8d:dd:
63:09:e8:80:e4:7d:f6:9b:25:99:fa:8d:61:84:1b:a0:fc:5a:
9d:a7:d6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 07:32:44 2024 by rpki-client on console-ams.rpki-client.org