Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/10EB4B681E4111EF90807059C4F9AE02.roa
File: 10EB4B681E4111EF90807059C4F9AE02.roa (raw, json)
Hash identifier: XqvcoruT+Ln2WBOuS/+R8PQm7osrljo9L6u9u5oWUEw=
Subject key identifier: 9A:37:13:49:4E:7C:9B:06:63:58:2E:00:ED:7E:44:34:64:71:33:7E
Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial: 093A
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/10EB4B681E4111EF90807059C4F9AE02.roa
Signing time: Thu 30 May 2024 04:57:08 +0000
ROA not before: Thu 30 May 2024 04:57:08 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 24093
IP address blocks: 125.63.12.0/24 maxlen: 24
125.63.15.0/24 maxlen: 24
125.63.19.0/24 maxlen: 24
125.253.0.0/18 maxlen: 18
125.253.8.0/24 maxlen: 24
125.253.11.0/24 maxlen: 24
125.253.16.0/24 maxlen: 24
125.253.25.0/24 maxlen: 24
125.253.28.0/23 maxlen: 23
125.253.28.0/24 maxlen: 24
125.253.29.0/24 maxlen: 24
125.253.32.0/24 maxlen: 24
125.253.33.0/24 maxlen: 24
125.253.34.0/24 maxlen: 24
125.253.35.0/24 maxlen: 24
125.253.41.0/24 maxlen: 24
125.253.43.0/24 maxlen: 24
125.253.44.0/24 maxlen: 24
125.253.45.0/24 maxlen: 24
125.253.46.0/24 maxlen: 24
125.253.47.0/24 maxlen: 24
125.253.48.0/24 maxlen: 24
125.253.50.0/23 maxlen: 23
125.253.50.0/24 maxlen: 24
125.253.51.0/24 maxlen: 24
125.253.60.0/24 maxlen: 24
125.253.61.0/24 maxlen: 24
125.253.96.0/20 maxlen: 20
125.253.97.0/24 maxlen: 24
125.253.98.0/24 maxlen: 24
125.253.99.0/24 maxlen: 24
125.253.101.0/24 maxlen: 24
125.253.102.0/24 maxlen: 24
125.253.103.0/24 maxlen: 24
125.253.106.0/24 maxlen: 24
125.253.107.0/24 maxlen: 24
125.253.109.0/24 maxlen: 24
125.253.110.0/24 maxlen: 24
202.171.160.0/19 maxlen: 19
202.171.160.0/24 maxlen: 24
202.171.164.0/24 maxlen: 24
202.171.165.0/24 maxlen: 24
202.171.169.0/24 maxlen: 24
202.171.170.0/24 maxlen: 24
202.171.175.0/24 maxlen: 24
202.171.177.0/24 maxlen: 24
202.171.178.0/24 maxlen: 24
202.171.179.0/24 maxlen: 24
202.171.184.0/23 maxlen: 23
202.171.186.0/23 maxlen: 23
202.171.189.0/24 maxlen: 24
202.171.190.0/24 maxlen: 24
202.171.191.0/24 maxlen: 24
203.25.102.0/24 maxlen: 24
223.27.66.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 31 May 2024 01:53:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2362 (0x93a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Validity
Not Before: May 30 04:57:08 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=66580724-3fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:c7:93:02:50:e3:cb:83:9d:56:f3:ce:7d:
e2:da:39:6f:54:66:bb:83:d4:08:ff:df:84:f7:81:
f1:5c:af:c8:29:9f:3b:42:60:9e:61:0d:b1:15:42:
c1:9b:24:6e:04:b8:50:9c:61:fd:78:62:8f:a3:3d:
69:56:d9:d0:f9:73:17:ee:b7:78:33:e4:df:87:eb:
fb:f6:02:11:47:c8:5c:d6:f9:07:03:3f:9b:e5:13:
83:56:64:2c:10:31:3b:29:8c:8c:15:c9:34:ce:cf:
99:79:0e:7b:e8:b2:16:7e:e9:5e:16:e8:19:8a:b6:
de:50:9f:17:ef:f7:68:9b:55:bc:07:9e:ff:5e:d8:
f8:e8:4a:42:24:4e:b6:5e:0c:36:27:20:fc:c2:4b:
18:17:a4:e1:5e:99:2b:f8:59:3a:39:15:2d:7f:8f:
90:d5:da:6a:cb:8c:1e:e9:09:87:c1:ca:2a:48:1a:
45:f7:ae:17:77:5d:68:0d:f2:1f:6f:6e:ae:80:2e:
8a:af:53:83:b7:86:12:e6:ee:d2:87:e8:cc:28:e8:
45:49:6c:da:5f:e4:42:5e:57:61:a3:99:03:b3:a5:
43:f8:12:4d:b4:27:71:eb:03:af:2a:7e:bf:2e:e9:
b3:01:61:27:76:4f:3b:75:bf:0c:a4:49:32:96:df:
36:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:37:13:49:4E:7C:9B:06:63:58:2E:00:ED:7E:44:34:64:71:33:7E
X509v3 Authority Key Identifier:
keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/10EB4B681E4111EF90807059C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.63.12.0/24
125.63.15.0/24
125.63.19.0/24
125.253.0.0/18
125.253.96.0/20
202.171.160.0/19
203.25.102.0/24
223.27.66.0/23
Signature Algorithm: sha256WithRSAEncryption
44:5d:3a:50:10:a1:c3:07:a7:93:87:be:e0:5e:37:49:76:7c:
5a:93:b3:ca:a8:d8:31:89:94:15:5b:e9:d3:74:34:f7:80:ae:
01:a9:4b:5b:e0:78:2e:87:c3:82:1f:cb:3e:f7:5b:d4:41:4a:
ac:7d:24:7e:8e:a3:4f:22:36:69:1c:34:04:af:67:93:55:a9:
06:5e:f4:f5:e9:93:96:25:08:15:a3:60:1b:e4:15:d8:0e:54:
b3:18:9c:82:fe:0f:b0:7d:01:4e:ea:ed:99:1f:17:5d:d8:c1:
ba:04:d1:9f:f4:e5:26:cf:ee:0a:be:1c:5c:24:f5:cc:e9:a3:
68:2d:fb:df:ab:b6:34:3d:12:44:76:7c:88:ff:a1:2e:e0:c7:
c9:cc:df:60:7b:9e:9b:cf:e7:0b:e5:c0:af:db:3e:85:30:15:
9a:98:3d:e1:b6:a5:61:69:32:31:1c:49:b6:aa:f8:fe:e7:bb:
95:74:8d:08:ef:c3:6a:f9:f5:54:61:3e:e8:06:66:1d:db:04:
4c:19:76:09:cf:5e:1a:25:56:17:3a:13:e9:1b:6e:a6:83:6d:
dd:6c:81:48:9e:21:05:27:12:96:e0:dc:d2:93:ff:6f:5c:d9:
95:94:34:83:89:c0:a8:23:6d:b0:9e:12:51:6d:79:98:6e:3c:
0a:08:26:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:08 2024 by rpki-client on console-fra.rpki-client.org