Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/1369C8026D9711EE8E7CC968C4F9AE02.roa
File: 1369C8026D9711EE8E7CC968C4F9AE02.roa (raw, json)
Hash identifier: EOad3nua6kXPDyFnObN5Ptu/BgAQghuXb9VwL5REUQU=
Subject key identifier: FE:70:A4:DE:C6:F4:47:9C:68:31:70:6B:F4:B4:FE:AE:12:15:3B:A3
Certificate issuer: /CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
Certificate serial: 2A
Authority key identifier: 63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/1369C8026D9711EE8E7CC968C4F9AE02.roa
Signing time: Wed 18 Oct 2023 09:16:53 +0000
ROA not before: Wed 18 Oct 2023 09:16:53 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 134090
IP address blocks: 45.249.116.0/22 maxlen: 24
103.51.112.0/22 maxlen: 24
103.85.36.0/22 maxlen: 24
103.95.112.0/22 maxlen: 24
103.106.88.0/22 maxlen: 24
123.253.188.0/22 maxlen: 24
202.128.112.0/20 maxlen: 20
202.128.112.0/21 maxlen: 24
202.128.120.0/21 maxlen: 24
202.179.128.0/22 maxlen: 24
2400:a840::/31 maxlen: 34
2400:a842::/31 maxlen: 34
2400:a844::/31 maxlen: 34
2400:a846::/31 maxlen: 34
2400:a848::/31 maxlen: 34
2400:a84a::/31 maxlen: 34
2400:a84c::/31 maxlen: 34
2400:a84e::/32 maxlen: 34
2402:2c80::/32 maxlen: 34
Validation: Failed, certificate revoked on Wed 14 Feb 2024 06:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
Validity
Not Before: Oct 18 09:16:53 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=652fa285-7755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:e3:22:cb:68:32:eb:08:4b:78:48:69:04:
2e:71:72:8e:28:f0:73:e2:7f:60:7f:8b:29:69:f2:
d8:0d:2e:15:16:91:38:d7:b3:4b:9d:f2:04:95:8c:
99:f6:d9:2e:fb:6e:df:cd:0b:99:11:19:c3:4d:4c:
ab:88:a1:c6:89:c9:79:f7:e2:d7:b1:bf:9b:1d:51:
fd:04:6b:2a:a7:b1:c2:13:a1:f0:e8:89:fb:45:1a:
9e:30:42:e7:ac:10:25:c8:60:89:4d:37:d6:5b:59:
b0:f7:5e:4d:6d:b3:c9:f6:a6:22:03:f2:26:8d:d9:
40:3b:a1:40:9a:a5:a4:0c:7b:b9:3c:d4:31:d2:f2:
8d:2f:d4:cb:f7:75:f2:84:2f:d5:d2:47:fc:bd:43:
63:bc:fe:94:1b:1e:1e:22:24:4b:1c:e6:18:0e:94:
22:a8:63:de:fd:a0:60:e9:76:d7:4a:aa:0a:16:b6:
76:8e:25:50:83:60:53:4c:6c:dc:15:33:6c:e9:40:
db:2f:23:d3:f5:03:19:4f:cd:85:2b:d2:40:4b:ba:
52:ee:0b:2e:14:4b:21:58:9e:21:42:1c:0c:bc:a3:
00:13:24:df:5e:26:e3:0d:89:1f:50:21:31:c9:61:
78:a7:70:1a:e0:12:7b:70:e3:9a:78:90:8b:e9:bc:
54:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:70:A4:DE:C6:F4:47:9C:68:31:70:6B:F4:B4:FE:AE:12:15:3B:A3
X509v3 Authority Key Identifier:
keyid:63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/1369C8026D9711EE8E7CC968C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.249.116.0/22
103.51.112.0/22
103.85.36.0/22
103.95.112.0/22
103.106.88.0/22
123.253.188.0/22
202.128.112.0/20
202.179.128.0/22
IPv6:
2400:a840::-2400:a84e:ffff:ffff:ffff:ffff:ffff:ffff
2402:2c80::/32
Signature Algorithm: sha256WithRSAEncryption
5f:59:d1:82:33:86:d6:c1:9e:31:7c:23:12:b5:30:7a:27:22:
a0:96:bf:3d:2f:1e:38:26:fa:bc:d9:eb:07:62:cd:17:a1:c4:
d2:a3:9f:c6:8f:e5:fe:45:c5:d0:9d:1c:69:ad:e8:ff:6b:2e:
db:d1:a3:8b:aa:5f:59:0a:30:bb:f0:1a:6d:11:6c:47:6b:24:
f1:ed:8c:0e:3b:05:15:aa:d5:22:3c:1f:77:6f:94:5c:44:26:
f1:48:40:5f:99:e5:29:50:31:c6:88:87:d0:64:87:d3:ec:18:
a0:2b:f0:05:a5:b3:0f:95:fb:54:46:27:8c:15:64:4a:f2:18:
3d:2a:d1:4a:73:2d:be:f3:c8:7e:e4:ea:f3:c1:e5:e9:d2:d2:
ea:3b:4f:8c:45:4e:9e:5f:0d:a5:93:75:2f:45:42:97:af:14:
df:bc:27:87:a4:12:29:2b:21:96:56:28:36:b5:91:19:8a:c7:
d0:f4:15:27:bc:58:22:64:e4:3c:f2:e4:3f:9b:45:0e:a1:3b:
f1:af:21:3e:aa:b4:25:00:54:71:50:1b:d3:23:4d:18:e4:ee:
c0:f3:20:27:ec:dc:7d:7f:9d:fe:22:b6:38:db:9f:8b:25:46:
ae:35:8d:06:d3:51:08:ad:5a:fd:c7:e0:da:4a:b8:2a:9a:8e:
99:58:e8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 09:29:50 2024 by rpki-client on console-ams.rpki-client.org