Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/3375617823DC11EFB3E87986C4F9AE02.roa
File: 3375617823DC11EFB3E87986C4F9AE02.roa (raw, json)
Hash identifier: breZGb5147JHlh//88wKmtnNdlDcNCm2ezLaKR4cdcs=
Subject key identifier: F5:94:31:84:8A:BC:32:D2:22:D2:09:4C:6A:DF:1B:FB:4A:B2:E7:ED
Certificate issuer: /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Certificate serial: 0383
Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/3375617823DC11EFB3E87986C4F9AE02.roa
Signing time: Thu 06 Jun 2024 17:05:19 +0000
ROA not before: Thu 06 Jun 2024 17:05:19 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 133410
IP address blocks: 116.204.140.0/24 maxlen: 24
116.204.141.0/24 maxlen: 24
116.204.142.0/24 maxlen: 24
2400:c7c0::/48 maxlen: 48
2400:c7c0:4000::/34 maxlen: 34
2400:c7c0:4000::/40 maxlen: 40
2400:c7c0:4000::/48 maxlen: 48
2400:c7c0:43c0::/43 maxlen: 43
2400:c7c0:43c0::/48 maxlen: 48
2400:c7c0:43e0::/43 maxlen: 43
Validation: Failed, certificate revoked on Wed 26 Jun 2024 17:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 899 (0x383)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Validity
Not Before: Jun 6 17:05:19 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6661ec4f-514e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:db:72:05:2e:a0:11:f7:71:12:91:67:2e:25:
6a:fa:8d:e5:8f:81:27:09:b7:ea:4b:68:49:d0:1a:
74:c4:c3:21:63:da:18:9b:2e:e4:63:f2:14:5e:bd:
69:a0:9f:dd:64:ce:fe:98:f8:c0:68:98:85:c0:f7:
72:15:82:a5:6f:44:0c:fd:25:70:d0:76:06:15:0c:
9b:dc:2c:9a:6b:6e:50:ea:b2:54:43:8b:f4:38:8c:
c8:b4:74:81:99:3d:b1:c9:c0:fc:da:99:09:5f:f6:
a7:f1:09:d8:24:35:c6:c4:09:f4:05:d4:4c:a9:b1:
2b:b6:41:5c:d5:c3:25:86:7a:33:f5:5d:df:ea:e5:
4c:69:c7:ec:61:b5:7e:d9:bd:94:d1:68:33:da:35:
7a:e5:e5:04:f6:5b:d1:e7:aa:78:84:6f:51:6e:7c:
d6:b0:dc:0a:fa:88:d8:e0:61:92:69:b9:2c:13:bb:
ce:d8:19:11:b7:ac:89:31:b4:d7:b5:dd:15:59:59:
79:3b:3a:cb:a6:64:4a:53:d1:04:42:c5:13:10:6d:
2b:00:86:71:04:2b:4a:0b:cd:0b:9d:b2:60:9f:94:
92:da:db:42:2b:5c:79:b5:81:7c:e8:a7:0a:0e:3f:
79:c1:22:82:e2:47:0d:f2:d8:df:c8:b9:6c:b4:bc:
16:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:94:31:84:8A:BC:32:D2:22:D2:09:4C:6A:DF:1B:FB:4A:B2:E7:ED
X509v3 Authority Key Identifier:
keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/3375617823DC11EFB3E87986C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.204.140.0-116.204.142.255
IPv6:
2400:c7c0::/48
2400:c7c0:4000::/34
Signature Algorithm: sha256WithRSAEncryption
36:0a:cc:b5:85:22:43:d5:58:2a:18:b1:36:17:a8:03:ff:99:
bd:6a:c4:47:ed:92:9b:47:64:b8:8c:c3:11:ca:ae:1e:ec:d6:
3e:89:a6:69:b3:2a:76:30:b6:93:c2:fa:a7:8c:f4:eb:32:cc:
60:74:cc:68:ed:57:60:5b:b2:a1:bf:52:88:36:23:2b:00:3e:
b2:2e:0a:05:c3:09:25:41:5e:1c:b3:cc:de:c9:8d:c9:c6:55:
a4:18:9f:c1:af:7e:08:d9:63:be:7e:a0:16:23:44:61:98:50:
6a:03:dc:cb:c2:6e:71:61:b3:06:ce:56:d5:fc:bb:1f:f0:2f:
f1:c6:a4:7d:02:b7:37:ed:54:e7:1d:18:4f:e6:b3:0b:6b:e4:
14:c4:59:ec:ef:ee:27:fc:5b:ae:df:04:da:5b:d0:bf:70:de:
75:28:a8:b1:34:60:4f:af:f5:ac:b9:4a:73:6a:cc:9c:e1:02:
93:0a:01:a8:9a:e2:c3:0a:26:b3:32:4c:4d:12:22:80:10:25:
af:11:33:c5:6b:4f:51:05:cc:85:2d:01:f6:50:6f:16:bc:6d:
69:f6:42:16:8a:82:24:a3:1f:8e:29:4f:36:c7:46:c3:47:29:
fb:c6:1f:e5:47:37:f2:ac:96:1c:e9:11:a5:29:6f:35:ec:3b:
43:e4:6e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 22:31:05 2024 by rpki-client on console-fra.rpki-client.org