Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/84A95DE6875211EE90D05B11C4F9AE02.roa
File: 84A95DE6875211EE90D05B11C4F9AE02.roa (raw, json)
Hash identifier: 2UpGidBnLrfsPqZWFn9AraOv7JaNYNeRP+NWtMrng2k=
Subject key identifier: 30:22:E1:5E:3D:40:92:0C:06:04:37:FF:8D:8B:24:E8:F2:A2:F8:8F
Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial: 06CF
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/84A95DE6875211EE90D05B11C4F9AE02.roa
Signing time: Mon 20 Nov 2023 03:11:38 +0000
ROA not before: Mon 20 Nov 2023 03:11:38 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 834
IP address blocks: 202.139.224.0/22 maxlen: 24
202.139.230.0/23 maxlen: 24
202.139.232.0/21 maxlen: 24
202.139.240.0/20 maxlen: 24
202.148.128.0/20 maxlen: 24
202.148.144.0/20 maxlen: 24
203.147.128.0/21 maxlen: 24
203.147.136.0/21 maxlen: 24
203.147.144.0/21 maxlen: 24
203.147.152.0/21 maxlen: 24
203.147.160.0/20 maxlen: 24
203.147.176.0/20 maxlen: 24
203.147.192.0/20 maxlen: 24
203.147.208.0/20 maxlen: 24
203.147.224.0/20 maxlen: 24
203.147.240.0/20 maxlen: 24
210.247.128.0/19 maxlen: 24
210.247.160.0/19 maxlen: 24
210.247.192.0/21 maxlen: 24
210.247.200.0/21 maxlen: 24
210.247.208.0/21 maxlen: 24
210.247.216.0/21 maxlen: 24
210.247.224.0/21 maxlen: 24
210.247.232.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 00:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1743 (0x6cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Validity
Not Before: Nov 20 03:11:38 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=655ace6a-01dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:be:5f:8d:b3:34:df:2a:6c:f5:70:50:57:
e2:57:fa:fc:ad:b8:f7:eb:04:59:08:9e:fc:33:3d:
ab:e0:2d:39:ca:d1:00:78:f2:5a:2c:e5:b6:cb:17:
93:bb:03:6a:fb:69:12:77:b9:d8:77:93:e1:be:03:
73:77:39:29:10:cf:4a:2a:d8:58:13:a7:d4:f9:89:
53:7c:db:5f:dc:f5:ba:49:df:26:bc:a6:3e:c9:34:
06:0c:a8:0e:3b:fa:85:f7:91:7c:dc:b2:2c:c4:5a:
2f:47:93:42:12:a8:d0:9b:6b:3e:59:bb:ae:74:c3:
2f:dc:3b:5e:c1:ba:05:e2:e8:3a:d3:47:6e:f4:73:
9f:77:c2:c8:91:be:56:ad:69:7b:9b:9b:13:ee:60:
3d:ac:ae:bd:31:97:c1:f1:85:18:17:6b:91:2a:5e:
81:e6:7a:18:dd:63:48:19:41:aa:61:54:c4:d2:00:
64:8b:84:80:6f:94:25:03:84:06:ab:62:de:cd:79:
dc:0f:30:34:e2:0c:8f:22:8f:06:aa:36:67:0d:6c:
e1:11:7f:ea:5c:b1:e7:6b:d5:3f:a7:e1:5b:cc:8b:
37:91:04:c9:6e:95:78:eb:b6:67:92:f1:59:ac:4a:
14:03:0f:d1:ba:30:26:08:e1:7a:91:f1:20:71:44:
04:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:22:E1:5E:3D:40:92:0C:06:04:37:FF:8D:8B:24:E8:F2:A2:F8:8F
X509v3 Authority Key Identifier:
keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/84A95DE6875211EE90D05B11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.139.224.0/22
202.139.230.0-202.139.255.255
202.148.128.0/19
203.147.128.0/17
210.247.128.0-210.247.239.255
Signature Algorithm: sha256WithRSAEncryption
d3:7c:6b:d3:ae:7c:69:d8:79:cf:9a:1f:c4:bf:16:77:0a:0e:
f4:53:43:7e:20:bf:11:35:75:29:ce:29:75:2d:e3:9a:93:c7:
8c:39:4b:4f:ff:8b:97:0a:48:02:b0:d4:8a:8c:0e:e4:f3:c7:
5d:d6:79:33:11:6b:e7:44:dd:55:1e:e3:5f:83:3b:b1:47:e4:
08:e5:1a:2e:0a:a2:b4:b8:e5:47:78:40:c0:4f:c1:19:29:9a:
73:30:4a:cb:f1:8d:f3:a0:df:6c:0e:42:89:b9:ed:83:0f:b3:
7a:6a:39:8d:c8:eb:5d:19:9a:2f:3b:f7:fd:7a:e8:78:f6:36:
9d:bd:ec:f9:c2:21:03:46:81:e7:00:16:57:fd:a4:f0:db:19:
c1:d3:f4:f7:a0:40:ce:75:57:d7:4a:e4:06:03:a0:5d:38:f7:
57:1c:c5:41:1c:ba:46:19:3d:53:3b:c5:eb:9e:4a:7f:6f:cf:
bf:44:ea:ee:3d:b9:6a:20:94:8b:49:b8:6e:9b:10:ec:ff:92:
1b:b4:b0:ff:f7:93:19:fc:08:d7:b4:4c:3b:97:a7:ff:82:c1:
a1:7e:5e:41:86:bc:4d:8d:da:bb:03:24:b3:04:ae:0f:2c:98:
24:3f:f7:b7:a9:6f:51:75:45:8a:0a:a5:26:d9:d9:7c:bb:01:
bb:41:64:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 02:24:53 2024 by rpki-client on console-fra.rpki-client.org