Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/4881E5C6EB5D11EEB3F3EC2FC4F9AE02.roa
File: 4881E5C6EB5D11EEB3F3EC2FC4F9AE02.roa (raw, json)
Hash identifier: 6rJ29r7V7x2kdEaobkC8UyArL50UhY9DBVuE2HNSOQE=
Subject key identifier: 02:36:91:6E:83:24:04:4B:45:23:EA:57:EC:85:79:22:67:16:E3:C0
Certificate issuer: /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Certificate serial: 1B15
Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/4881E5C6EB5D11EEB3F3EC2FC4F9AE02.roa
Signing time: Tue 02 Apr 2024 16:54:17 +0000
ROA not before: Tue 02 Apr 2024 16:54:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149535
IP address blocks: 45.125.152.0/24 maxlen: 24
45.248.16.0/24 maxlen: 24
45.248.17.0/24 maxlen: 24
45.248.18.0/24 maxlen: 24
45.248.19.0/24 maxlen: 24
157.119.176.0/24 maxlen: 24
157.119.178.0/24 maxlen: 24
183.87.185.0/24 maxlen: 24
183.87.209.0/24 maxlen: 24
183.87.210.0/24 maxlen: 24
183.87.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 May 2024 07:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6933 (0x1b15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Validity
Not Before: Apr 2 16:54:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=660c3839-afb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b8:ef:00:5d:c5:02:20:81:68:cb:f3:9f:ba:
8f:be:e4:ed:1e:67:1c:be:44:8d:5c:f8:38:12:4c:
11:82:7a:6a:c0:37:77:3d:63:86:e8:b5:99:58:94:
15:9c:7c:6d:3c:8c:05:99:b7:7a:82:a3:da:38:26:
4f:a6:26:97:98:21:63:76:f6:02:90:28:7a:d7:3b:
72:35:d8:08:c0:eb:83:ac:60:4b:0f:92:58:98:b4:
7a:ae:2d:08:61:5e:c9:c8:8c:a4:fb:a5:f6:6a:5b:
9d:c3:1d:23:ff:51:4a:f8:63:6e:d2:21:9e:20:e1:
34:5e:e1:4d:ad:eb:1e:a5:67:b1:59:31:34:8d:b9:
ca:32:30:a0:16:50:f5:b1:8a:2f:b8:0e:a5:56:d7:
ee:4d:3c:82:e2:9d:b4:a2:4b:7a:14:7f:a0:ca:bc:
f7:71:6c:4b:d5:8c:05:ad:ce:e7:fb:fd:d1:b5:d7:
21:9f:54:d2:b1:37:75:6a:69:18:f2:b5:90:b0:3a:
d5:7b:12:9f:b7:1c:9d:7d:d9:a7:6c:33:9c:16:b9:
ad:89:c6:e5:e8:92:52:c2:6e:db:22:a1:2b:e6:dd:
92:95:1e:91:a2:7a:ed:27:51:90:4c:bc:7e:bd:a6:
ee:c9:ff:2c:45:f1:73:92:63:50:f7:cd:73:aa:7b:
24:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:36:91:6E:83:24:04:4B:45:23:EA:57:EC:85:79:22:67:16:E3:C0
X509v3 Authority Key Identifier:
keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/4881E5C6EB5D11EEB3F3EC2FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.152.0/24
45.248.16.0/22
157.119.176.0/24
157.119.178.0/24
183.87.185.0/24
183.87.209.0-183.87.211.255
Signature Algorithm: sha256WithRSAEncryption
cd:29:b9:a6:9b:48:44:53:5a:c7:82:20:fc:16:b9:4d:91:8c:
05:3c:d3:2f:ef:45:82:88:b8:1b:32:f0:1d:8c:97:ec:89:fc:
a7:95:f4:27:79:7e:c5:a8:62:52:f4:6b:4c:f1:5c:b9:22:08:
e9:91:a6:d1:16:29:11:59:69:05:41:c5:1b:ed:a6:51:e0:0a:
d8:3a:41:7e:eb:01:54:00:bc:00:29:dc:80:8b:4e:7c:d0:87:
d9:9c:6c:34:93:e7:74:92:31:06:2c:78:cc:d2:1d:b0:fe:bf:
e3:a7:4c:e6:ea:4a:cf:ab:aa:6c:8a:33:2e:41:09:20:9a:e2:
b2:93:00:56:b1:3b:c3:45:d9:bf:1b:70:c4:f2:8b:b2:67:f9:
b3:66:f5:80:82:39:95:f7:de:b8:f6:dd:3d:5e:08:8d:be:9f:
d4:27:dd:09:77:4c:8d:02:dd:1b:15:df:56:f1:48:ab:52:fc:
b3:22:5a:e9:f4:6d:37:90:3a:9c:0a:62:ab:9e:9d:dd:ec:70:
99:53:e9:e0:d1:82:5d:d5:1e:60:6b:0c:c7:e8:2c:22:04:bd:
60:32:ac:d4:9d:04:52:77:2e:e1:15:3e:ae:c0:1e:94:8e:ff:
ef:3b:69:87:70:45:90:0a:86:eb:58:a0:3c:62:68:ec:85:f3:
cf:e8:ab:c1
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgICGxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODJGNzUxMTAvBgNVBAUTKDQyMEQ4QzJFQzNEMjQ3OUM1NDIzQUJGRjc0NzgyQjhB
OEE0QjdERUEwHhcNMjQwNDAyMTY1NDE3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjBjMzgzOS1hZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA97jvAF3FAiCBaMvzn7qPvuTtHmccvkSNXPg4EkwRgnpqwDd3PWOG6LWZWJQV
nHxtPIwFmbd6gqPaOCZPpiaXmCFjdvYCkCh61ztyNdgIwOuDrGBLD5JYmLR6ri0I
YV7JyIyk+6X2aludwx0j/1FK+GNu0iGeIOE0XuFNresepWexWTE0jbnKMjCgFlD1
sYovuA6lVtfuTTyC4p20okt6FH+gyrz3cWxL1YwFrc7n+/3Rtdchn1TSsTd1amkY
8rWQsDrVexKftxydfdmnbDOcFrmticbl6JJSwm7bIqEr5t2SlR6RonrtJ1GQTLx+
vabuyf8sRfFzkmNQ981zqnskNwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFAI2kW6D
JARLRSPqV+yFeSJnFuPAMB8GA1UdIwQYMBaAFEINjC7D0kecVCOr/3R4K4qKS33q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkY3NS8zQzhDRjYzRUZD
QkQxMUU2ODhEMzEyNUVDNEY5QUUwMi9RZzJNTHNQU1I1eFVJNnZfZEhncmlvcExm
ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FnMk1Mc1BTUjV4VUk2dl9kSGdyaW9wTGZlby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODJGNzUvM0M4Q0Y2M0VGQ0JEMTFFNjg4RDMxMjVFQzRGOUFFMDIvNDg4MUU1QzZF
QjVEMTFFRUIzRjNFQzJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E
NjA0MDIEAgABMCwDBAAtfZgDBAIt+BADBACdd7ADBACdd7IDBAC3V7kwDAMEALdX
0QMEArdX0DANBgkqhkiG9w0BAQsFAAOCAQEAzSm5pptIRFNax4Ig/Ba5TZGMBTzT
L+9Fgoi4GzLwHYyX7In8p5X0J3l+xahiUvRrTPFcuSII6ZGm0RYpEVlpBUHFG+2m
UeAK2DpBfusBVAC8ACncgItOfNCH2ZxsNJPndJIxBix4zNIdsP6/46dM5upKz6uq
bIozLkEJIJrispMAVrE7w0XZvxtwxPKLsmf5s2b1gII5lffeuPbdPV4Ijb6f1Cfd
CXdMjQLdGxXfVvFIq1L8syJa6fRtN5A6nApiq56d3exwmVPp4NGCXdUeYGsMx+gs
IgS9YDKs1J0EUncu4RU+rsAelI7/7ztph3BFkAqG61igPGJo7IXzz+irwQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:14 2024 by rpki-client on console-fra.rpki-client.org