Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/5EE2D37A121011EDB028B50FC4F9AE02.roa
File: 5EE2D37A121011EDB028B50FC4F9AE02.roa (raw, json)
Hash identifier: VV2KQzqAXuIB/4+9rBsV6+5yVVcoM6byLeU1c0+eeH4=
Subject key identifier: 19:A9:45:A8:FB:CF:51:76:82:4D:E5:4E:E5:66:EE:B6:73:43:B1:7E
Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Certificate serial: 088D
Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/5EE2D37A121011EDB028B50FC4F9AE02.roa
Signing time: Fri 28 Jun 2024 22:06:01 +0000
ROA not before: Fri 28 Jun 2024 22:06:01 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 38818
IP address blocks: 49.0.128.0/19 maxlen: 19
49.0.168.0/21 maxlen: 21
49.0.176.0/22 maxlen: 22
49.0.184.0/21 maxlen: 21
203.34.37.0/24 maxlen: 24
203.174.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Aug 2024 01:40:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2189 (0x88d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Validity
Not Before: Jun 28 22:06:01 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=667f33c8-b4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:dc:64:37:3e:d0:5c:35:3a:45:5c:56:4c:
28:90:d5:bd:e9:8e:77:91:6f:a1:fc:88:51:e5:e4:
09:a0:ef:61:4d:0f:71:f9:76:67:ac:88:78:f5:e7:
c8:50:11:ab:56:46:ef:ea:bb:4b:d4:0b:8b:35:a9:
a4:ee:53:b5:9f:3e:f9:c5:06:67:5c:e9:55:a9:12:
49:55:44:9f:a6:4e:3a:87:1d:99:3a:ad:36:d2:b8:
d3:3c:41:9a:76:d6:3d:1f:ad:13:2a:71:36:b3:b6:
00:96:7e:29:da:16:c3:dd:58:6d:bb:c7:e6:6e:6e:
f2:2a:6d:6d:27:d9:fd:10:9f:55:48:44:d2:68:5e:
53:53:0d:75:ba:ea:fd:6d:e3:cc:a4:73:61:db:7f:
ec:a7:a7:e4:55:24:fd:09:a8:b0:8d:ff:e3:01:7e:
10:15:4b:7f:4c:24:10:f6:76:a7:27:3a:58:26:23:
79:63:89:7c:c8:25:f6:b7:14:ab:4b:24:01:46:4d:
f7:63:e9:80:8b:09:41:d4:f0:40:a4:85:26:18:2a:
c1:5f:c0:b4:f9:b7:22:e9:30:ac:79:9d:d5:28:78:
74:cb:49:9f:70:7f:35:18:b2:7f:c0:99:55:ae:ed:
41:41:d5:2b:9c:16:71:40:d8:58:08:c2:52:ab:6a:
7f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A9:45:A8:FB:CF:51:76:82:4D:E5:4E:E5:66:EE:B6:73:43:B1:7E
X509v3 Authority Key Identifier:
keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/5EE2D37A121011EDB028B50FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.0.128.0/19
49.0.168.0-49.0.179.255
49.0.184.0/21
203.34.37.0/24
203.174.26.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:d5:31:a1:7b:fb:c1:40:36:56:0a:d4:a7:da:5e:da:d3:f9:
89:59:72:d6:f3:da:a7:52:c0:8a:d1:db:f9:b7:5f:11:b9:9f:
69:20:63:be:bc:9d:a8:2c:19:a1:5e:eb:96:81:74:4d:61:aa:
17:48:fe:62:19:12:33:a7:f4:7b:4a:e7:67:52:e8:ab:c0:49:
08:b1:a9:a6:ea:8a:c4:c7:97:f3:54:f6:8a:01:a1:22:30:4f:
c3:be:e4:52:43:6b:d6:5a:1a:5d:f2:7b:f9:1d:4b:26:a8:da:
5b:d1:2f:82:76:44:da:d8:e0:c4:d3:47:3e:d9:6a:b2:f4:c3:
36:d9:8a:0b:1c:56:3c:d3:26:98:af:78:5f:78:49:1c:ca:3f:
be:7e:b1:ae:54:9e:36:a2:71:bc:08:84:ff:2a:fd:18:27:58:
b2:31:ba:d9:40:bb:92:df:36:be:ca:90:5f:2e:4d:05:03:91:
65:56:26:8e:98:b7:67:c7:5a:f7:df:92:da:a7:8f:46:3c:87:
a7:0b:b7:f4:eb:0f:d3:2f:a6:9a:5d:59:5d:1f:b3:8a:74:81:
02:fe:72:91:22:f7:71:7d:0a:83:da:12:36:1d:0b:56:81:55:
9b:8e:c7:16:04:40:f8:63:f0:8c:2f:e1:b0:c9:3c:ac:ae:62:
26:90:b4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 04:07:53 2024 by rpki-client on console-ams.rpki-client.org