Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/D19318F610E011EEB6B51328C4F9AE02.roa
File: D19318F610E011EEB6B51328C4F9AE02.roa (raw, json)
Hash identifier: +ucE0VoN4lLMs/Qggh8h/QH8Zp6ASl/Ww1rDA+tne9o=
Subject key identifier: E3:F2:4E:89:7D:17:62:9E:16:5C:5F:7E:27:B4:EB:D4:F9:2B:3D:34
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 34DE
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/D19318F610E011EEB6B51328C4F9AE02.roa
Signing time: Mon 04 Dec 2023 05:11:10 +0000
ROA not before: Mon 04 Dec 2023 05:11:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133933
IP address blocks: 111.88.184.0/24 maxlen: 24
111.88.185.0/24 maxlen: 24
111.88.186.0/24 maxlen: 24
111.88.187.0/24 maxlen: 24
111.88.188.0/24 maxlen: 24
111.88.189.0/24 maxlen: 24
111.88.190.0/24 maxlen: 24
111.88.191.0/24 maxlen: 24
115.186.64.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 13 Mar 2024 12:16:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13534 (0x34de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Dec 4 05:11:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=656d5f6d-bf35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b9:11:f6:a9:6d:53:19:27:f0:19:42:2c:e4:
17:ec:6f:e0:90:5a:5f:f3:ef:75:f9:67:b4:56:60:
6e:79:90:01:93:92:e1:5a:8a:3a:15:7a:bd:53:27:
47:d6:3a:f8:b6:58:97:91:f4:fd:2c:14:26:59:4e:
08:03:8b:4d:bb:33:fe:02:cc:bd:84:15:27:d8:2c:
c7:08:96:bb:42:a0:94:83:ea:b9:1f:49:40:3c:ea:
d2:12:ea:ea:28:82:fd:70:d9:a6:70:6b:1f:6a:8c:
53:9c:1a:69:eb:5a:bc:d8:67:35:12:b7:01:2c:4b:
27:41:72:f9:82:4e:55:9d:8a:1e:93:63:25:eb:9f:
e2:e3:67:d2:a4:35:5c:b2:c2:d1:0c:b3:5e:7d:ea:
aa:c1:93:75:32:f8:f5:e7:2e:01:2e:24:18:5a:71:
c2:0d:08:ba:2f:56:b3:4f:d2:01:8d:4a:ba:4d:5e:
91:33:53:a8:88:a7:8d:c3:1a:f8:50:10:05:c3:c0:
68:32:fc:db:d2:a8:ed:1f:46:0b:30:1a:d2:c8:69:
84:d6:f8:1f:3b:3c:33:b3:2b:e2:4d:ae:d6:d3:ff:
ad:e1:be:1d:c6:86:6c:96:d3:8d:d5:83:33:d0:62:
77:ea:c2:14:d8:7f:82:b5:31:f3:16:77:46:6e:d1:
01:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F2:4E:89:7D:17:62:9E:16:5C:5F:7E:27:B4:EB:D4:F9:2B:3D:34
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/D19318F610E011EEB6B51328C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.184.0/21
115.186.64.0/21
Signature Algorithm: sha256WithRSAEncryption
24:4b:ce:09:bc:1c:7a:bb:52:96:46:37:ae:8e:8d:cd:e4:65:
a9:e0:2d:1c:0a:12:8a:df:78:12:81:cb:9f:76:5a:8b:09:c3:
15:4c:5d:21:ac:b1:0d:d4:68:8e:a7:28:37:19:fb:f5:9e:ec:
05:47:6e:dc:40:86:d3:d5:f1:9f:bc:9b:74:7b:95:dd:ea:55:
38:44:58:75:bf:e3:a4:5d:5d:67:37:db:c6:7f:16:07:0f:18:
ce:a1:fb:41:9f:76:8b:5c:33:60:62:da:3e:b6:92:7d:f7:e0:
f3:d3:03:59:ba:2f:7a:69:f0:05:a7:b0:ef:8f:ff:ce:02:90:
0e:61:9a:58:c6:fd:13:2a:23:c7:fc:f6:e1:7b:b1:03:a3:d1:
39:be:e8:dc:bb:ec:e2:d0:98:dd:03:48:47:29:9c:32:0d:b5:
4f:99:19:10:9e:83:2a:ac:d4:41:b8:70:f1:a1:5b:f3:29:c6:
d5:3f:6f:ce:de:af:e3:c1:39:0c:5f:1b:58:80:d6:83:fd:a5:
fe:04:e0:33:b3:f7:bb:11:e0:d1:52:96:3c:29:1a:e0:84:77:
6b:7a:2f:f4:d5:e2:df:76:14:b7:40:4f:5d:9a:2d:b9:ed:eb:
87:e6:58:17:74:5a:53:af:a8:67:ea:25:64:f5:4e:a3:f9:20:
cb:a2:90:3c
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICNN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE
RDIxRkUyMDYwHhcNMjMxMjA0MDUxMTEwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTZkNWY2ZC1iZjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAybkR9qltUxkn8BlCLOQX7G/gkFpf8+91+We0VmBueZABk5LhWoo6FXq9UydH
1jr4tliXkfT9LBQmWU4IA4tNuzP+Asy9hBUn2CzHCJa7QqCUg+q5H0lAPOrSEurq
KIL9cNmmcGsfaoxTnBpp61q82Gc1ErcBLEsnQXL5gk5VnYoek2Ml65/i42fSpDVc
ssLRDLNefeqqwZN1Mvj15y4BLiQYWnHCDQi6L1azT9IBjUq6TV6RM1OoiKeNwxr4
UBAFw8BoMvzb0qjtH0YLMBrSyGmE1vgfOzwzsyviTa7W0/+t4b4dxoZsltON1YMz
0GJ36sIU2H+CtTHzFndGbtEBowIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOPyTol9
F2KeFlxffie069T5Kz00MB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE
ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvRDE5MzE4RjYx
MEUwMTFFRUI2QjUxMzI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBANvWLgDBANzukAwDQYJKoZIhvcNAQELBQADggEBACRLzgm8
HHq7UpZGN66Ojc3kZangLRwKEorfeBKBy592WosJwxVMXSGssQ3UaI6nKDcZ+/We
7AVHbtxAhtPV8Z+8m3R7ld3qVThEWHW/46RdXWc328Z/FgcPGM6h+0GfdotcM2Bi
2j62kn334PPTA1m6L3pp8AWnsO+P/84CkA5hmljG/RMqI8f89uF7sQOj0Tm+6Ny7
7OLQmN0DSEcpnDINtU+ZGRCegyqs1EG4cPGhW/MpxtU/b87er+PBOQxfG1iA1oP9
pf4E4DOz97sR4NFSljwpGuCEd2t6L/TV4t92FLdAT12aLbnt64fmWBd0WlOvqGfq
JWT1TqP5IMuikDw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:11 2024 by rpki-client on console-fra.rpki-client.org