Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/CE2D52B2867A11EDA90A6D3AC4F9AE02.roa
File: CE2D52B2867A11EDA90A6D3AC4F9AE02.roa (raw, json)
Hash identifier: Q9wZjk4Rq1EMzvQdIzY0ja9PWd29SRXro9eGiaDL5nI=
Subject key identifier: 52:B2:41:D9:CB:DB:3E:9C:3E:5B:8B:A1:F4:08:59:1C:45:A1:58:10
Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial: 03F0
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/CE2D52B2867A11EDA90A6D3AC4F9AE02.roa
Signing time: Fri 03 Nov 2023 02:34:43 +0000
ROA not before: Fri 03 Nov 2023 02:34:43 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 55410
IP address blocks: 42.104.64.0/21 maxlen: 24
42.104.72.0/21 maxlen: 24
42.104.80.0/21 maxlen: 24
42.104.88.0/21 maxlen: 24
42.104.96.0/21 maxlen: 24
42.104.104.0/21 maxlen: 24
42.104.112.0/21 maxlen: 24
42.104.120.0/21 maxlen: 24
43.245.88.0/22 maxlen: 24
103.29.44.0/22 maxlen: 24
118.185.0.0/16 maxlen: 16
118.185.0.0/21 maxlen: 24
118.185.8.0/21 maxlen: 24
118.185.16.0/21 maxlen: 24
118.185.24.0/21 maxlen: 21
118.185.24.0/24 maxlen: 24
118.185.25.0/24 maxlen: 24
118.185.26.0/24 maxlen: 24
118.185.27.0/24 maxlen: 24
118.185.28.0/24 maxlen: 24
118.185.29.0/24 maxlen: 24
118.185.30.0/24 maxlen: 24
118.185.31.0/24 maxlen: 24
118.185.32.0/21 maxlen: 24
118.185.40.0/21 maxlen: 24
118.185.48.0/21 maxlen: 24
118.185.56.0/21 maxlen: 24
118.185.64.0/21 maxlen: 24
118.185.72.0/21 maxlen: 24
118.185.80.0/21 maxlen: 24
118.185.88.0/21 maxlen: 24
118.185.96.0/21 maxlen: 21
118.185.97.0/24 maxlen: 24
118.185.98.0/24 maxlen: 24
118.185.99.0/24 maxlen: 24
118.185.100.0/24 maxlen: 24
118.185.101.0/24 maxlen: 24
118.185.102.0/24 maxlen: 24
118.185.103.0/24 maxlen: 24
118.185.104.0/21 maxlen: 24
118.185.112.0/21 maxlen: 24
118.185.120.0/21 maxlen: 24
118.185.128.0/20 maxlen: 21
118.185.128.0/24 maxlen: 24
118.185.129.0/24 maxlen: 24
118.185.130.0/24 maxlen: 24
118.185.131.0/24 maxlen: 24
118.185.132.0/24 maxlen: 24
118.185.133.0/24 maxlen: 24
118.185.134.0/24 maxlen: 24
118.185.135.0/24 maxlen: 24
118.185.136.0/24 maxlen: 24
118.185.138.0/24 maxlen: 24
118.185.139.0/24 maxlen: 24
118.185.140.0/24 maxlen: 24
118.185.141.0/24 maxlen: 24
118.185.142.0/24 maxlen: 24
118.185.143.0/24 maxlen: 24
118.185.144.0/21 maxlen: 24
118.185.152.0/21 maxlen: 24
118.185.160.0/21 maxlen: 24
118.185.168.0/21 maxlen: 24
118.185.176.0/21 maxlen: 24
118.185.184.0/21 maxlen: 24
118.185.192.0/21 maxlen: 24
118.185.200.0/21 maxlen: 24
118.185.208.0/21 maxlen: 24
118.185.216.0/21 maxlen: 24
118.185.224.0/21 maxlen: 24
118.185.232.0/21 maxlen: 24
118.185.240.0/21 maxlen: 24
118.185.248.0/21 maxlen: 24
122.15.0.0/16 maxlen: 16
122.15.0.0/21 maxlen: 24
122.15.8.0/21 maxlen: 24
122.15.16.0/21 maxlen: 24
122.15.24.0/21 maxlen: 24
122.15.32.0/21 maxlen: 24
122.15.40.0/21 maxlen: 24
122.15.48.0/21 maxlen: 24
122.15.56.0/21 maxlen: 24
122.15.64.0/21 maxlen: 24
122.15.72.0/21 maxlen: 24
122.15.80.0/21 maxlen: 24
122.15.88.0/21 maxlen: 24
122.15.96.0/21 maxlen: 24
122.15.104.0/21 maxlen: 24
122.15.112.0/21 maxlen: 24
122.15.120.0/21 maxlen: 24
122.15.128.0/21 maxlen: 24
122.15.136.0/21 maxlen: 24
122.15.144.0/21 maxlen: 24
122.15.152.0/21 maxlen: 24
122.15.160.0/21 maxlen: 24
122.15.168.0/21 maxlen: 24
122.15.176.0/21 maxlen: 24
122.15.184.0/21 maxlen: 24
122.15.192.0/21 maxlen: 24
122.15.200.0/21 maxlen: 24
122.15.208.0/21 maxlen: 24
122.15.216.0/21 maxlen: 24
122.15.224.0/21 maxlen: 24
122.15.232.0/21 maxlen: 24
122.15.240.0/21 maxlen: 21
122.15.248.0/21 maxlen: 24
123.63.0.0/16 maxlen: 16
123.63.0.0/21 maxlen: 24
123.63.8.0/21 maxlen: 24
123.63.16.0/21 maxlen: 24
123.63.24.0/21 maxlen: 24
123.63.32.0/21 maxlen: 24
123.63.40.0/21 maxlen: 24
123.63.48.0/21 maxlen: 24
123.63.56.0/21 maxlen: 24
123.63.64.0/21 maxlen: 24
123.63.72.0/21 maxlen: 24
123.63.80.0/21 maxlen: 24
123.63.88.0/21 maxlen: 24
123.63.96.0/21 maxlen: 24
123.63.104.0/21 maxlen: 24
123.63.112.0/21 maxlen: 24
123.63.120.0/21 maxlen: 24
123.63.128.0/18 maxlen: 18
123.63.128.0/20 maxlen: 24
123.63.144.0/21 maxlen: 24
123.63.152.0/21 maxlen: 24
123.63.160.0/19 maxlen: 19
123.63.160.0/21 maxlen: 24
123.63.168.0/21 maxlen: 24
123.63.176.0/21 maxlen: 24
123.63.184.0/21 maxlen: 24
123.63.192.0/18 maxlen: 18
123.63.192.0/21 maxlen: 24
123.63.200.0/21 maxlen: 24
123.63.208.0/21 maxlen: 24
123.63.216.0/21 maxlen: 24
123.63.224.0/19 maxlen: 19
123.63.224.0/21 maxlen: 24
123.63.232.0/21 maxlen: 24
123.63.240.0/21 maxlen: 24
123.63.248.0/21 maxlen: 24
124.247.192.0/24 maxlen: 24
124.247.194.0/24 maxlen: 24
124.247.198.0/24 maxlen: 24
124.247.199.0/24 maxlen: 24
124.247.201.0/24 maxlen: 24
124.247.203.0/24 maxlen: 24
124.247.204.0/24 maxlen: 24
124.247.205.0/24 maxlen: 24
182.19.0.0/19 maxlen: 19
182.19.0.0/20 maxlen: 24
182.19.16.0/20 maxlen: 24
182.19.32.0/19 maxlen: 19
182.19.32.0/20 maxlen: 24
182.19.48.0/20 maxlen: 24
182.19.64.0/20 maxlen: 24
182.19.80.0/21 maxlen: 24
182.19.88.0/21 maxlen: 21
182.19.88.0/24 maxlen: 24
182.19.89.0/24 maxlen: 24
182.19.90.0/24 maxlen: 24
182.19.91.0/24 maxlen: 24
182.19.93.0/24 maxlen: 24
182.19.94.0/24 maxlen: 24
182.19.95.0/24 maxlen: 24
182.19.96.0/19 maxlen: 24
2400:5200:401::/48 maxlen: 48
2400:5200:402::/48 maxlen: 48
2400:5200:403::/48 maxlen: 48
2400:5200:404::/48 maxlen: 48
2400:5200:c00::/40 maxlen: 48
2400:5200:1000::/40 maxlen: 48
2400:5200:1400::/40 maxlen: 48
2400:5200:1800::/40 maxlen: 48
2400:5200:1c00::/40 maxlen: 48
2400:5200:2000::/36 maxlen: 48
2400:5200:3000::/36 maxlen: 48
2400:5200:4000::/36 maxlen: 48
2400:5200:5000::/36 maxlen: 48
2400:5200:6000::/36 maxlen: 48
2400:5200:7000::/36 maxlen: 48
2400:5200:8000::/36 maxlen: 48
2400:5200:9000::/36 maxlen: 48
2400:5200:a000::/36 maxlen: 48
2400:5200:b000::/36 maxlen: 48
2400:5200:c000::/36 maxlen: 48
2400:5200:d000::/36 maxlen: 48
2400:5200:e000::/36 maxlen: 48
2400:5200:f000::/36 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1008 (0x3f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Validity
Not Before: Nov 3 02:34:43 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=65445c42-809d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:09:d3:ff:b5:63:2e:0d:ab:46:28:cd:42:
42:ef:2d:1d:4c:a2:e4:00:9b:8c:a1:90:f7:db:71:
59:88:9d:e7:2b:1f:49:53:bf:04:f9:33:d5:6c:56:
01:82:fa:28:3b:99:cd:7d:ce:13:2d:2a:a6:8f:f6:
3b:d7:ee:58:87:dd:b0:bc:3a:3f:63:68:cc:81:de:
92:50:09:be:78:5f:f6:87:f8:ab:b9:51:3e:91:99:
b0:0b:2b:04:02:5f:23:a6:64:7c:12:86:7f:a3:14:
55:cc:89:1d:35:85:f8:89:ec:75:e2:69:cd:c1:af:
a6:59:28:fd:e1:ee:e2:11:55:04:11:c4:60:20:8b:
ae:44:8f:09:fd:62:08:a0:b7:54:b2:a1:c9:84:db:
05:bb:3c:d1:06:13:c4:4f:76:1a:08:5a:e2:5c:9a:
b6:44:2a:90:46:32:63:49:eb:5e:e4:a8:49:b8:9d:
2e:6a:70:bb:e4:b4:49:75:b3:7c:6d:42:a9:87:3a:
3b:e1:3a:db:bb:ac:9a:59:62:ee:45:ba:2b:ff:99:
e4:a6:71:e5:bb:4e:b2:d0:7e:89:fb:8b:4a:59:66:
25:d6:1b:49:d8:09:c8:8d:74:d8:0e:65:5c:25:4a:
98:fc:84:fa:44:a9:53:04:f7:ae:f1:d8:f0:53:c0:
51:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B2:41:D9:CB:DB:3E:9C:3E:5B:8B:A1:F4:08:59:1C:45:A1:58:10
X509v3 Authority Key Identifier:
keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/CE2D52B2867A11EDA90A6D3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.104.64.0/18
43.245.88.0/22
103.29.44.0/22
118.185.0.0/16
122.15.0.0/16
123.63.0.0/16
124.247.192.0/24
124.247.194.0/24
124.247.198.0/23
124.247.201.0/24
124.247.203.0-124.247.205.255
182.19.0.0/17
IPv6:
2400:5200:401::-2400:5200:404:ffff:ffff:ffff:ffff:ffff
2400:5200:c00::/40
2400:5200:1000::/40
2400:5200:1400::/40
2400:5200:1800::/40
2400:5200:1c00::/40
2400:5200:2000::-2400:5200:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
93:0c:fa:51:25:0c:b7:ff:7f:8c:85:3a:58:a8:b8:8c:9d:6e:
01:2c:d5:1f:bf:f8:ca:06:ac:3c:82:42:b1:32:1e:c0:84:2a:
25:f9:ff:2f:45:ab:1c:aa:04:05:cb:f2:65:92:30:c8:a1:95:
e7:93:1e:bc:5f:8d:fe:fc:0d:ee:96:88:5c:5a:17:68:30:20:
41:b4:a8:b9:19:4b:17:f0:8e:94:81:bc:8a:e5:a2:81:63:bd:
10:7e:0f:39:9e:1b:35:1d:a9:07:82:44:e1:d1:43:58:dd:17:
37:d7:5d:8c:71:b2:8b:a2:61:f6:04:85:95:db:cb:43:60:09:
ce:ed:b8:63:2e:c9:1c:f2:64:23:0a:99:71:2b:e9:df:24:6c:
68:ac:6a:0f:ba:0e:7c:51:82:41:77:43:17:fb:a5:83:9e:81:
7f:47:b7:cb:9d:5b:e8:fb:4c:29:4a:af:f5:f4:ea:f8:08:28:
3d:8c:72:65:c5:69:58:d0:87:0c:22:e4:d5:e9:a4:9a:df:ab:
94:dc:50:d2:73:3a:ec:93:9d:ea:40:68:e1:6e:c3:cf:6d:1c:
8e:9f:ff:63:ec:04:c1:e9:1b:48:a0:98:4d:b0:d9:c0:6f:6e:
68:d9:c7:b1:2d:bd:7b:2a:d7:d6:a4:1b:a1:57:ee:ef:2f:84:
77:68:93:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 11 17:08:21 2023 by rpki-client on console-fra.rpki-client.org