Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/4850AF4EEA2111EDA1B52549C4F9AE02.roa
File: 4850AF4EEA2111EDA1B52549C4F9AE02.roa (raw, json)
Hash identifier: SEn/PlGMdIdILD2iQkDOD1XRk+gOSWQT+Q97pQAQs7Q=
Subject key identifier: CA:AF:BD:42:2F:3A:5C:10:C1:88:04:93:2C:13:07:66:5A:A4:5C:D6
Certificate issuer: /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B
Certificate serial: 1AA2
Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/4850AF4EEA2111EDA1B52549C4F9AE02.roa
Signing time: Wed 10 May 2023 14:13:44 +0000
ROA not before: Wed 10 May 2023 14:13:44 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 4761
IP address blocks: 114.0.0.0/16 maxlen: 24
114.1.0.0/16 maxlen: 24
114.2.0.0/16 maxlen: 24
114.3.0.0/16 maxlen: 24
114.4.0.0/16 maxlen: 24
114.5.0.0/16 maxlen: 24
114.6.0.0/16 maxlen: 24
114.7.0.0/16 maxlen: 24
114.8.0.0/16 maxlen: 24
114.9.0.0/16 maxlen: 24
114.10.0.0/16 maxlen: 23
114.10.0.0/19 maxlen: 24
114.10.33.0/24 maxlen: 24
114.10.34.0/23 maxlen: 24
114.10.36.0/22 maxlen: 24
114.10.40.0/21 maxlen: 24
114.10.48.0/20 maxlen: 24
114.10.64.0/18 maxlen: 24
114.10.128.0/17 maxlen: 24
114.11.0.0/16 maxlen: 24
114.12.0.0/16 maxlen: 24
114.13.0.0/16 maxlen: 24
114.14.0.0/16 maxlen: 24
114.15.0.0/16 maxlen: 24
124.195.6.0/23 maxlen: 24
124.195.8.0/23 maxlen: 24
124.195.12.0/23 maxlen: 24
124.195.26.0/23 maxlen: 24
124.195.28.0/23 maxlen: 24
124.195.32.0/23 maxlen: 24
124.195.34.0/23 maxlen: 24
124.195.36.0/23 maxlen: 24
124.195.52.0/24 maxlen: 24
124.195.54.0/23 maxlen: 24
124.195.58.0/23 maxlen: 24
124.195.124.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6818 (0x1aa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B
Validity
Not Before: May 10 14:13:44 2023 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=645ba697-11d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ef:f5:44:51:6c:a3:e9:b7:df:e4:40:bb:cf:
78:8d:6c:29:b5:fb:d6:85:35:c0:95:d4:7b:87:7a:
72:98:7b:38:75:4a:d6:0d:ad:fb:cd:6f:43:bb:6d:
de:4e:c8:4d:fe:c4:e8:fd:86:3e:94:b0:47:2e:b0:
2f:49:9d:34:60:60:c1:c6:5d:db:cf:b9:40:22:83:
31:6a:a2:ab:47:1b:d3:83:f5:db:9e:a2:6f:fd:21:
49:f2:42:f5:7e:08:91:3b:a8:7c:4e:a5:ca:fa:db:
32:77:44:34:5a:b7:70:45:28:c7:d1:4f:17:8a:e7:
b0:39:29:27:6d:75:4b:8d:c9:55:28:9e:00:36:00:
66:77:72:56:f7:ab:ee:40:95:45:85:6a:c6:d4:c3:
a8:dd:69:0e:1a:89:86:5c:1c:2e:e1:51:ca:40:3c:
61:5d:0c:e3:35:5a:79:0f:c8:1e:72:72:75:82:49:
6d:e3:54:e7:85:bc:98:6c:5e:c4:ac:66:69:97:e0:
ba:68:1e:bc:a6:cf:ff:88:22:a9:45:3f:f7:74:31:
bf:53:3f:81:6f:e7:95:6c:4d:85:53:1d:17:35:63:
40:8a:43:35:96:7e:f0:f9:f4:09:45:f6:65:a6:08:
6f:0b:55:e5:f1:e4:f4:0b:0f:40:ce:32:90:ba:1f:
a2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AF:BD:42:2F:3A:5C:10:C1:88:04:93:2C:13:07:66:5A:A4:5C:D6
X509v3 Authority Key Identifier:
keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/4850AF4EEA2111EDA1B52549C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
114.0.0.0/12
124.195.6.0-124.195.9.255
124.195.12.0/23
124.195.26.0-124.195.29.255
124.195.32.0-124.195.37.255
124.195.52.0/24
124.195.54.0/23
124.195.58.0/23
124.195.124.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:a5:44:eb:3b:91:bf:cc:79:c3:93:db:8e:e5:36:65:22:a7:
a1:3d:84:2e:59:89:0b:06:dc:fe:15:d2:13:6a:70:79:83:be:
1a:bd:e5:f5:8c:44:cf:b6:a6:61:82:97:71:da:3e:a3:6d:1b:
f5:01:fc:21:25:e6:06:52:11:7b:1f:2d:a3:2c:6e:48:11:76:
96:29:ac:d7:c4:cf:9b:92:0c:7b:8c:c5:34:43:d2:b7:65:91:
b2:a5:34:ca:29:54:56:6b:02:d7:6c:df:ff:86:e1:8b:8f:06:
59:87:a0:d1:d8:99:76:d3:02:61:8c:5e:a4:83:f3:ce:c5:0c:
e9:ab:d1:f8:84:2f:a3:41:8c:e1:5e:61:a9:6e:7d:09:d3:57:
3f:42:35:a4:51:a9:22:12:fc:08:64:86:f4:9d:ac:c6:2f:7b:
04:02:fd:0f:63:59:d6:fd:35:67:08:eb:c8:f1:3f:34:f8:9f:
ca:03:f3:b0:b5:53:6a:9f:43:16:fa:7a:7b:13:37:20:40:1e:
77:ca:50:4f:31:aa:8d:a8:42:7f:69:6c:ed:8f:76:78:ae:1a:
fb:a1:92:89:8f:43:48:74:f6:5e:39:ba:7f:1f:dd:c0:37:c5:
a3:37:31:08:37:2a:1f:c8:1b:5e:c6:0c:90:b4:38:01:f7:67:
8f:da:9d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:44 2023 by rpki-client on console-ams.rpki-client.org