Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/304A7AC6386111EF814E8209C4F9AE02.roa
File: 304A7AC6386111EF814E8209C4F9AE02.roa (raw, json)
Hash identifier: AaVH6laYD+vdZ+w0fdX47ObRzQrnSTStHJEZZj8mhdE=
Subject key identifier: 48:3B:0F:58:58:DE:E1:A1:60:39:25:37:BA:80:66:F8:EB:6B:9C:13
Certificate issuer: /CN=A919DAF2/serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A
Certificate serial: 214D
Authority key identifier: 13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/304A7AC6386111EF814E8209C4F9AE02.roa
Signing time: Tue 02 Jul 2024 10:52:34 +0000
ROA not before: Tue 02 Jul 2024 10:52:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18196
IP address blocks: 45.117.128.0/22 maxlen: 22
45.117.128.0/24 maxlen: 24
45.117.129.0/24 maxlen: 24
45.117.130.0/24 maxlen: 24
45.117.131.0/24 maxlen: 24
103.255.112.0/24 maxlen: 24
103.255.113.0/24 maxlen: 24
103.255.114.0/24 maxlen: 24
202.134.154.0/24 maxlen: 24
202.134.155.0/24 maxlen: 24
202.134.156.0/24 maxlen: 24
202.134.160.0/24 maxlen: 24
202.134.161.0/24 maxlen: 24
202.134.162.0/24 maxlen: 24
202.134.163.0/24 maxlen: 24
202.134.164.0/24 maxlen: 24
202.134.165.0/24 maxlen: 24
202.134.166.0/24 maxlen: 24
202.134.167.0/24 maxlen: 24
202.134.169.0/24 maxlen: 24
202.134.170.0/24 maxlen: 24
202.134.171.0/24 maxlen: 24
202.134.172.0/24 maxlen: 24
202.134.173.0/24 maxlen: 24
202.134.174.0/24 maxlen: 24
202.134.175.0/24 maxlen: 24
202.134.180.0/24 maxlen: 24
202.134.182.0/24 maxlen: 24
202.134.183.0/24 maxlen: 24
202.134.184.0/24 maxlen: 24
202.134.185.0/24 maxlen: 24
202.134.186.0/24 maxlen: 24
202.134.187.0/24 maxlen: 24
202.134.189.0/24 maxlen: 24
202.134.190.0/24 maxlen: 24
202.134.191.0/24 maxlen: 24
2402:f200::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jul 2024 12:09:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8525 (0x214d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DAF2/serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A
Validity
Not Before: Jul 2 10:52:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6683dbf2-a8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:05:6b:15:3e:f9:2e:66:6e:8b:66:47:32:e0:
a1:95:26:9c:4b:de:9f:47:69:6d:fb:c3:57:53:18:
8e:66:a4:63:fa:f1:1b:16:63:0c:ee:37:e3:d5:fb:
3a:6c:d3:06:ff:01:9d:06:6e:e1:b5:8a:06:ec:08:
24:ce:db:26:20:90:6d:dc:88:0a:b1:c1:68:8e:aa:
31:cf:c5:55:86:0a:74:df:f4:92:d6:c6:46:f3:3b:
71:e5:a0:90:71:19:fa:e4:5c:8d:54:00:a8:ad:59:
14:53:1c:12:fc:63:57:44:04:8e:eb:9f:5a:b8:03:
5b:ec:c3:37:c0:93:82:df:60:83:85:b0:95:b5:a2:
9c:a8:2c:2e:70:d4:4e:dd:84:3f:73:c2:82:31:74:
9f:cf:a0:ec:8f:50:29:f6:01:e0:a7:a1:bb:79:88:
43:e7:a3:96:30:97:12:fc:d8:28:9a:48:54:9d:50:
8d:25:f3:06:b4:34:83:a3:c9:38:84:ed:f9:a5:30:
bc:45:4e:d4:55:c1:4b:23:e2:07:dd:b1:91:25:46:
d8:a1:f8:cb:5e:6f:dd:ba:ef:36:86:ec:10:3d:09:
f4:3f:6d:68:d7:1c:f3:85:71:2d:1d:b4:b1:7a:3b:
12:b5:fc:7a:20:e9:ab:66:4b:a8:2c:ca:dd:d5:f4:
fc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3B:0F:58:58:DE:E1:A1:60:39:25:37:BA:80:66:F8:EB:6B:9C:13
X509v3 Authority Key Identifier:
keyid:13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/304A7AC6386111EF814E8209C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.128.0/22
103.255.112.0-103.255.114.255
202.134.154.0-202.134.156.255
202.134.160.0/21
202.134.169.0-202.134.175.255
202.134.180.0/24
202.134.182.0-202.134.187.255
202.134.189.0-202.134.191.255
IPv6:
2402:f200::/32
Signature Algorithm: sha256WithRSAEncryption
59:ee:c1:75:08:8b:d1:42:1c:8f:a8:68:a6:38:11:52:60:a5:
19:d6:4e:1f:4c:f7:c5:a1:80:5d:29:6d:55:d4:38:61:0c:89:
72:03:a2:b0:f3:54:46:42:9f:59:27:61:19:5d:9a:65:19:cd:
b2:30:4e:5f:09:13:ba:91:81:02:c7:d5:b2:71:c4:83:1a:8e:
00:a9:d5:3a:33:91:cd:1f:90:df:51:14:a9:07:fb:ee:08:07:
9f:11:51:ac:70:5d:64:a4:00:02:05:72:48:ea:d3:17:5e:a8:
63:fa:74:89:e6:a6:81:43:30:05:b8:d0:6a:23:6a:cf:84:f0:
59:21:e5:22:b8:a2:7a:88:50:1b:ca:6a:2e:a3:e8:9a:75:9d:
eb:25:97:df:4c:4d:fe:d9:d9:cb:3a:b0:a7:3c:82:8a:e7:c5:
ba:2f:34:1d:e8:a9:7b:40:50:17:a3:7d:74:5d:70:d9:92:44:
b6:16:54:32:63:9c:5a:d9:2f:3b:cd:6e:18:5a:87:78:60:ce:
c6:89:e7:84:34:b6:d4:68:bb:b7:2d:88:20:5b:ef:a8:21:30:
df:18:9f:ca:be:dd:9d:4b:75:c2:a4:e2:bd:8a:55:ab:be:ac:
65:71:e2:bc:57:72:71:d2:f6:ce:c8:5f:4b:63:69:bc:06:4f:
2f:ba:99:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 14:30:22 2024 by rpki-client on console-fra.rpki-client.org