Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BAEC9198645711EEAB4EE636C4F9AE02.roa
File: BAEC9198645711EEAB4EE636C4F9AE02.roa (raw, json)
Hash identifier: XqPJqRBvn8Y+TGmmuC4AVujU52xAczAdT36PUhXp3Nk=
Subject key identifier: 16:C5:20:02:D3:2C:83:4D:E4:88:18:58:CB:FB:B5:DB:67:C6:5D:56
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 3FAF
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BAEC9198645711EEAB4EE636C4F9AE02.roa
Signing time: Fri 06 Oct 2023 14:50:46 +0000
ROA not before: Fri 06 Oct 2023 14:50:46 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 135967
IP address blocks: 42.96.4.0/23 maxlen: 23
42.96.12.0/22 maxlen: 22
45.124.84.0/24 maxlen: 24
103.3.244.0/22 maxlen: 22
103.3.244.0/24 maxlen: 24
103.3.245.0/24 maxlen: 24
103.3.246.0/24 maxlen: 24
103.3.247.0/24 maxlen: 24
103.74.120.0/23 maxlen: 23
103.74.122.0/23 maxlen: 23
103.79.140.0/23 maxlen: 23
103.79.142.0/23 maxlen: 23
103.121.88.0/23 maxlen: 23
103.121.90.0/23 maxlen: 23
103.147.126.0/23 maxlen: 23
103.161.16.0/23 maxlen: 23
103.161.170.0/23 maxlen: 24
103.162.30.0/23 maxlen: 23
103.163.216.0/23 maxlen: 23
103.176.22.0/23 maxlen: 23
103.176.24.0/23 maxlen: 24
103.176.250.0/23 maxlen: 23
103.177.34.0/23 maxlen: 23
103.179.174.0/23 maxlen: 23
103.180.138.0/23 maxlen: 23
103.187.168.0/23 maxlen: 23
103.188.242.0/23 maxlen: 23
2403:6a40::/48 maxlen: 48
2403:6a40:2::/48 maxlen: 48
2403:6a40:1000::/36 maxlen: 36
2403:6a40:2000::/36 maxlen: 36
2403:6a40:3000::/36 maxlen: 36
2403:6a40:4000::/36 maxlen: 36
2403:6a40:5000::/36 maxlen: 36
2407:2ec0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16303 (0x3faf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 6 14:50:46 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=65201ec5-9891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:8f:c3:be:82:b6:c5:dd:ff:7a:7d:71:65:
e8:7c:f7:8e:00:11:d3:72:c3:b2:72:3f:80:5e:f4:
0b:1f:a4:bf:6f:0e:2d:9b:13:9b:7a:98:10:5c:1b:
48:fa:83:b8:80:69:68:88:36:6a:d9:6b:1d:41:33:
0a:ec:0c:fb:81:41:9c:4d:de:94:03:2e:47:33:5e:
5b:cf:b2:ed:9a:56:c5:28:b5:8e:27:43:cd:86:14:
2a:bd:5f:8c:ee:66:ae:67:c4:c7:48:f8:90:84:6d:
6e:6c:5d:db:64:a0:89:b6:c0:e5:02:66:da:2e:64:
bf:b4:21:e4:90:d3:7a:5f:91:78:17:3e:c7:7c:c2:
ba:e2:c4:18:a3:b2:67:35:51:06:b9:5b:32:ea:9d:
b6:65:45:16:a3:86:fe:45:5c:3b:b4:b1:b4:d7:87:
77:41:b2:c9:e1:6f:e8:9c:1f:8e:df:78:d0:17:7d:
14:79:4c:ec:8a:fa:ae:94:bb:c3:1f:98:3a:3c:c1:
c7:58:b9:36:fb:2e:c6:c4:d7:e7:dd:97:ac:c5:44:
8f:ad:9b:d3:3a:5a:9e:0e:1e:f8:01:2a:5f:e9:d6:
fb:06:81:83:c5:cb:3b:26:a0:9c:f5:ef:23:1f:9f:
6e:db:ec:9e:93:80:52:0d:5b:ac:6d:6a:e0:d2:1d:
56:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C5:20:02:D3:2C:83:4D:E4:88:18:58:CB:FB:B5:DB:67:C6:5D:56
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BAEC9198645711EEAB4EE636C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.96.4.0/23
42.96.12.0/22
45.124.84.0/24
103.3.244.0/22
103.74.120.0/22
103.79.140.0/22
103.121.88.0/22
103.147.126.0/23
103.161.16.0/23
103.161.170.0/23
103.162.30.0/23
103.163.216.0/23
103.176.22.0-103.176.25.255
103.176.250.0/23
103.177.34.0/23
103.179.174.0/23
103.180.138.0/23
103.187.168.0/23
103.188.242.0/23
IPv6:
2403:6a40::/48
2403:6a40:2::/48
2403:6a40:1000::-2403:6a40:5fff:ffff:ffff:ffff:ffff:ffff
2407:2ec0::/48
Signature Algorithm: sha256WithRSAEncryption
49:92:e1:3a:1b:1a:e8:b2:ff:06:e5:ba:48:e9:71:e4:6e:e3:
01:27:df:d1:3f:cc:be:a4:df:33:fd:c9:51:97:c1:07:03:96:
1a:d3:a6:7c:59:c5:0e:48:1e:43:e1:6e:20:42:71:8e:81:28:
48:b8:23:46:b9:61:4d:0a:11:88:11:e8:cf:33:fc:22:12:f7:
94:a0:a3:0e:ff:6c:9c:fb:e1:83:4d:49:9a:19:28:e7:af:6e:
bf:6b:7e:4f:cf:5a:d6:f2:e9:ae:a3:45:b3:86:7e:89:3f:1e:
88:a6:e6:8f:04:1c:b7:15:7b:a1:06:9e:73:2e:18:a1:cc:48:
01:b8:80:ed:14:64:8a:7f:a7:b7:43:c3:2f:11:45:7b:ec:ff:
10:36:db:9d:04:71:b4:02:53:35:45:aa:61:90:55:90:2b:97:
32:6e:ce:40:8b:0d:0a:e8:ad:47:ac:c7:7b:74:b0:95:ba:32:
5a:b1:36:27:80:3b:16:ff:54:10:b6:dc:1c:d0:79:d8:e3:a5:
c5:c0:7e:93:26:25:2a:d3:b9:1f:7f:b9:82:1b:aa:be:6b:4a:
bc:7e:91:7f:b1:8e:d3:c9:1f:ed:5f:a2:2a:8e:d1:20:fd:d2:
00:0c:d1:37:91:f8:24:b7:05:8e:b2:f6:1d:68:81:47:5d:5c:
7b:ee:71:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 15:25:09 2023 by rpki-client on console-fra.rpki-client.org