Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B46B5/D186FE0A18D511EB81B6E441C4F9AE02/C5F2326CA58B11EEB0C2AB11C4F9AE02.roa
File: C5F2326CA58B11EEB0C2AB11C4F9AE02.roa (raw, json)
Hash identifier: k3m4RGaz5kruxxgtcEeIEF4wN7fa1Cby73+Wfxy1bSU=
Subject key identifier: 43:B7:8B:87:A6:5F:2B:88:B5:54:A5:1C:86:49:54:27:8B:5B:F2:4C
Certificate issuer: /CN=A91B46B5/serialNumber=FC6E3BCA3C7DBB28979BB7822A69A4801B99AAE8
Certificate serial: 0680
Authority key identifier: FC:6E:3B:CA:3C:7D:BB:28:97:9B:B7:82:2A:69:A4:80:1B:99:AA:E8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_G47yjx9uyiXm7eCKmmkgBuZqug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B46B5/D186FE0A18D511EB81B6E441C4F9AE02/C5F2326CA58B11EEB0C2AB11C4F9AE02.roa
Signing time: Thu 28 Dec 2023 14:17:04 +0000
ROA not before: Thu 28 Dec 2023 14:17:04 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 9310
IP address blocks: 136.143.240.0/24 maxlen: 24
136.143.241.0/24 maxlen: 24
136.143.242.0/24 maxlen: 24
136.143.243.0/24 maxlen: 24
136.143.244.0/24 maxlen: 24
136.143.245.0/24 maxlen: 24
136.143.246.0/24 maxlen: 24
136.143.247.0/24 maxlen: 24
136.143.248.0/24 maxlen: 24
136.143.249.0/24 maxlen: 24
136.143.250.0/24 maxlen: 24
136.143.251.0/24 maxlen: 24
136.143.252.0/24 maxlen: 24
136.143.253.0/24 maxlen: 24
136.143.254.0/24 maxlen: 24
158.140.192.0/19 maxlen: 19
158.140.192.0/22 maxlen: 22
158.140.192.0/24 maxlen: 24
158.140.193.0/24 maxlen: 24
158.140.194.0/24 maxlen: 24
158.140.195.0/24 maxlen: 24
158.140.196.0/24 maxlen: 24
158.140.197.0/24 maxlen: 24
158.140.198.0/24 maxlen: 24
158.140.199.0/24 maxlen: 24
158.140.200.0/24 maxlen: 24
158.140.201.0/24 maxlen: 24
158.140.202.0/24 maxlen: 24
158.140.203.0/24 maxlen: 24
158.140.204.0/24 maxlen: 24
158.140.205.0/24 maxlen: 24
158.140.206.0/24 maxlen: 24
158.140.207.0/24 maxlen: 24
158.140.208.0/24 maxlen: 24
158.140.209.0/24 maxlen: 24
158.140.210.0/24 maxlen: 24
158.140.211.0/24 maxlen: 24
158.140.212.0/24 maxlen: 24
158.140.213.0/24 maxlen: 24
158.140.214.0/24 maxlen: 24
158.140.215.0/24 maxlen: 24
158.140.216.0/24 maxlen: 24
158.140.217.0/24 maxlen: 24
158.140.218.0/24 maxlen: 24
158.140.219.0/24 maxlen: 24
158.140.220.0/24 maxlen: 24
158.140.221.0/24 maxlen: 24
158.140.222.0/24 maxlen: 24
158.140.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 May 2024 21:56:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1664 (0x680)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B46B5/serialNumber=FC6E3BCA3C7DBB28979BB7822A69A4801B99AAE8
Validity
Not Before: Dec 28 14:17:04 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=658d835f-77f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:69:a9:ce:26:a5:6f:cd:88:ae:4e:e4:7c:
31:e1:59:ae:fb:1a:4f:13:b9:fd:95:04:65:31:07:
ce:a3:5e:e9:bd:4e:0c:b2:59:6f:97:b4:ff:14:48:
17:64:d1:18:5a:16:92:b3:89:1e:80:65:30:0b:e8:
da:c0:ae:78:0f:83:0e:af:06:70:75:0f:0d:9a:e1:
38:b4:e6:0c:96:01:ad:d8:73:1e:4c:29:0c:b8:b9:
07:7a:b0:e0:fb:68:0a:aa:a2:b7:37:6a:14:49:2b:
83:c5:4c:ee:83:e2:9c:cb:39:13:79:bd:18:1d:aa:
f5:dd:6c:98:db:41:2e:31:c8:6c:0a:6e:71:d3:e2:
0b:35:60:68:90:3f:fa:2b:1a:96:01:f2:12:c7:a4:
4a:6b:dd:f1:ce:e4:69:29:14:77:14:5c:f2:fe:1f:
c8:d4:f4:8a:b8:7e:46:d0:3e:31:7f:1e:d4:6c:7a:
9e:94:f3:02:e9:35:12:40:ca:f4:da:74:d2:0e:16:
0e:bc:dd:cd:76:32:18:32:d7:b9:14:24:69:be:23:
9a:6f:82:d1:bc:84:93:51:8a:ab:c9:b0:06:9f:98:
81:3c:02:ad:4d:ca:ab:8c:ef:aa:f0:69:50:44:84:
98:e0:49:f2:4c:05:b7:60:83:97:6b:43:c6:3a:ef:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B7:8B:87:A6:5F:2B:88:B5:54:A5:1C:86:49:54:27:8B:5B:F2:4C
X509v3 Authority Key Identifier:
keyid:FC:6E:3B:CA:3C:7D:BB:28:97:9B:B7:82:2A:69:A4:80:1B:99:AA:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B46B5/D186FE0A18D511EB81B6E441C4F9AE02/_G47yjx9uyiXm7eCKmmkgBuZqug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_G47yjx9uyiXm7eCKmmkgBuZqug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B46B5/D186FE0A18D511EB81B6E441C4F9AE02/C5F2326CA58B11EEB0C2AB11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
136.143.240.0-136.143.254.255
158.140.192.0/19
Signature Algorithm: sha256WithRSAEncryption
d6:29:18:21:4e:1c:b3:0a:39:a8:f2:29:72:5a:42:78:68:50:
63:20:19:57:7f:88:3a:4d:42:6c:4c:44:49:78:0d:2d:ec:65:
6b:00:48:01:12:00:95:fb:62:5c:b3:66:31:57:27:4d:60:80:
9c:f1:d6:40:65:ac:c0:8b:86:39:63:4a:27:c0:04:4a:bc:84:
0b:bc:3c:6f:c4:05:32:46:e0:f7:1d:61:f9:60:a8:db:f1:7f:
40:85:00:95:a2:6f:1f:46:70:0c:27:23:6a:d2:93:2f:28:21:
d1:8b:7a:67:14:d4:7f:5d:91:2a:47:7a:8d:ee:1f:bd:7f:af:
56:b9:bf:81:78:80:a5:d6:0c:cf:0f:db:07:ce:a9:2b:2c:e4:
64:82:c0:69:00:59:26:f5:ed:98:42:91:75:49:6b:7c:dd:0a:
ea:1a:8f:45:75:f9:9e:d3:9e:99:dc:16:65:5c:c5:81:5c:94:
e4:86:9c:95:d1:53:33:28:15:b6:48:f1:31:b4:da:f3:5b:d4:
41:e4:3f:c1:7a:82:68:02:6e:62:29:76:d5:ea:80:6a:e1:fe:
61:e9:62:2b:22:b0:af:ed:43:8b:8b:86:16:16:a6:34:7c:a8:
03:52:7c:97:aa:b4:16:00:d6:57:90:91:1d:85:03:24:c6:73:
26:c0:e0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:56 2024 by rpki-client on console-ams.rpki-client.org