Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/6E46B2C6E71011EC8842E149C4F9AE02.roa
File: 6E46B2C6E71011EC8842E149C4F9AE02.roa (raw, json)
Hash identifier: Ju5O5eXRTt70AOKhqg0udmOiPpW2IX57wxWEIplZ+J0=
Subject key identifier: 75:DE:1E:7F:C1:9A:F8:CC:48:92:D1:08:A2:0F:13:88:4C:24:58:35
Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Certificate serial: 335D
Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/6E46B2C6E71011EC8842E149C4F9AE02.roa
Signing time: Mon 28 Aug 2023 14:50:37 +0000
ROA not before: Mon 28 Aug 2023 14:50:37 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 3758
IP address blocks: 111.65.100.0/24 maxlen: 24
111.65.101.0/24 maxlen: 24
111.65.102.0/23 maxlen: 23
111.65.104.0/21 maxlen: 21
111.65.108.0/22 maxlen: 22
111.65.112.0/20 maxlen: 20
202.78.52.0/22 maxlen: 22
202.78.55.0/24 maxlen: 24
2400:1c00:13::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 03 Jun 2024 08:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13149 (0x335d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Validity
Not Before: Aug 28 14:50:37 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=64ecb43d-61c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:4d:4f:da:d9:ec:a5:06:3a:5f:bb:aa:ad:
09:60:e0:0d:93:5a:7c:66:d7:ad:e3:d9:3c:c4:40:
d9:98:eb:8f:f8:45:3f:70:9a:64:93:73:51:c1:bd:
85:52:02:05:bd:56:d2:e6:fe:49:29:a6:93:4a:e6:
bb:d4:17:a8:74:e6:ff:83:2e:c2:23:39:0a:9f:22:
23:27:04:3c:18:d6:3c:f2:34:8f:c4:95:78:04:3f:
81:55:50:80:00:57:74:09:2c:0e:7a:18:cd:04:c2:
72:54:ad:ee:6f:bd:ba:f0:2a:b4:ee:9c:6f:4c:b5:
1a:a2:ae:bc:c7:6a:ff:02:64:bb:25:e6:a1:6b:dc:
67:36:ed:b5:a7:97:20:5e:42:a6:74:d1:72:b5:68:
35:72:99:33:8f:00:d4:37:f8:3f:7a:7a:08:cc:33:
f8:78:ee:8b:ab:d6:ca:6a:6a:b4:11:9c:8d:b0:72:
7a:e0:db:57:99:b9:39:e0:43:a4:1f:ff:d0:c0:a0:
f9:d7:8c:c6:ad:c8:3b:99:35:b9:ab:80:7c:03:15:
6d:79:e2:8f:c8:49:33:ce:29:31:c3:d4:f7:54:69:
07:ce:77:20:04:99:e8:b9:e6:79:74:ff:9c:cc:bd:
84:cc:6c:4d:08:46:b1:fc:be:02:fd:ff:c4:3e:95:
b0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DE:1E:7F:C1:9A:F8:CC:48:92:D1:08:A2:0F:13:88:4C:24:58:35
X509v3 Authority Key Identifier:
keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/6E46B2C6E71011EC8842E149C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.65.100.0-111.65.127.255
202.78.52.0/22
IPv6:
2400:1c00:13::/48
Signature Algorithm: sha256WithRSAEncryption
9f:3b:61:c8:c8:49:c5:81:4d:b2:ff:fc:00:25:35:73:d8:aa:
71:f7:58:ed:c3:b4:b4:d2:0e:56:dc:61:78:ac:c1:3b:ac:75:
35:55:11:91:f8:d7:cd:d2:33:f7:8a:43:30:57:5d:2b:d7:bc:
0c:7c:55:e4:db:71:a2:e9:c2:64:54:d8:06:0d:f9:0b:5f:52:
68:26:37:d2:4d:e0:a2:7f:0f:e7:9b:24:de:8a:25:58:6a:03:
05:cb:14:b1:1e:30:b7:bc:d9:5c:7f:6e:08:c9:e2:ff:c9:ae:
22:bf:63:a1:50:a4:09:c2:a2:6e:d5:2b:bc:21:b6:a0:c3:1a:
20:22:c4:30:69:5a:03:05:9f:02:6c:28:2d:c4:63:f2:b4:68:
83:1f:c5:0f:66:1a:cd:4c:5e:d0:d2:c7:42:6a:ed:af:36:a2:
d4:4b:48:39:7b:0e:06:ab:88:76:74:34:d3:7e:38:76:c7:48:
06:b6:c8:9f:8f:11:9f:fa:ce:c1:e8:0d:36:a5:65:12:f9:7e:
0a:08:76:34:b8:c9:55:5e:99:35:00:5a:c8:65:43:cc:f4:04:
12:6d:a0:a4:61:5c:67:e9:7b:7c:52:e9:33:ef:c3:ac:b6:b7:
a8:ca:85:5e:c0:cb:ec:20:aa:76:70:5e:76:cf:c9:02:bd:96:
ff:4f:c5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:37 2024 by rpki-client on console-fra.rpki-client.org