Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/E89D8B9AE73511EEAF837A66C4F9AE02.roa
File: E89D8B9AE73511EEAF837A66C4F9AE02.roa (raw, json)
Hash identifier: Wuq1UfGkboyThu9dpMYhEhcyEssKtuQN/IpkDGFvY6o=
Subject key identifier: 10:20:C9:A7:42:76:AA:23:B9:D6:CA:E1:81:3D:A4:D8:6D:39:57:B7
Certificate issuer: /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
Certificate serial: 3474
Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/E89D8B9AE73511EEAF837A66C4F9AE02.roa
Signing time: Thu 21 Mar 2024 03:48:42 +0000
ROA not before: Thu 21 Mar 2024 03:48:41 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 38022
IP address blocks: 163.7.128.0/18 maxlen: 18
163.7.128.0/24 maxlen: 24
163.7.129.0/24 maxlen: 24
163.7.134.0/24 maxlen: 24
163.7.138.0/24 maxlen: 24
163.7.144.0/21 maxlen: 21
163.7.176.0/22 maxlen: 22
163.7.176.0/24 maxlen: 24
163.7.177.0/24 maxlen: 24
163.7.178.0/24 maxlen: 24
163.7.179.0/24 maxlen: 24
163.7.190.0/24 maxlen: 24
163.7.191.0/24 maxlen: 24
210.7.32.0/20 maxlen: 20
2404:138::/32 maxlen: 32
2404:138:204::/48 maxlen: 48
2404:138:205::/48 maxlen: 48
2404:138:206::/48 maxlen: 48
2404:138:207::/48 maxlen: 48
2404:138:1306::/48 maxlen: 48
2404:139::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 25 Mar 2024 03:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13428 (0x3474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
Validity
Not Before: Mar 21 03:48:41 2024 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=65fbae19-eaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:b2:c7:75:54:0b:6c:f5:df:ef:30:ff:79:
36:17:e9:77:c4:04:d7:54:6f:23:e3:a1:2d:d3:18:
e6:7c:cd:c7:8f:53:14:24:30:ac:6e:28:45:9e:4a:
a5:14:f1:d7:c2:68:b0:16:31:65:06:68:40:ad:26:
36:b3:70:83:e8:18:2e:4f:2e:c1:83:b4:84:10:75:
c7:e2:c1:ba:8c:3c:c7:a5:e3:17:b7:1a:31:46:3e:
d5:da:c1:bd:8a:e4:fc:4e:c8:67:1d:27:96:c1:f3:
8d:44:bb:98:73:4f:21:7a:8a:05:9a:aa:2e:e9:1c:
69:ab:8e:c2:e4:a2:32:4d:fa:63:35:8f:e8:db:c4:
6b:65:58:59:b4:49:44:e3:38:59:a3:aa:e3:b6:a2:
42:84:b8:e1:72:ed:2a:49:0d:82:88:ae:ef:35:12:
7d:ca:92:d5:6c:08:06:52:fb:1c:9b:db:37:6a:0b:
ec:34:74:7a:a3:d4:f1:44:8f:87:4b:ac:90:29:be:
87:f6:0c:f1:2d:f5:b4:bb:a0:a4:d8:be:38:8b:c6:
fe:6a:23:b9:82:a7:c5:37:4b:73:66:2d:f9:d1:06:
29:bc:c0:02:ce:11:f9:09:21:ca:ce:8d:90:b9:ae:
1d:43:4d:a2:fe:4a:b6:22:c6:15:a6:16:b9:f4:5e:
fc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:20:C9:A7:42:76:AA:23:B9:D6:CA:E1:81:3D:A4:D8:6D:39:57:B7
X509v3 Authority Key Identifier:
keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/E89D8B9AE73511EEAF837A66C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.7.128.0/18
210.7.32.0/20
IPv6:
2404:138::/31
Signature Algorithm: sha256WithRSAEncryption
5b:b5:0b:6f:e0:40:3e:04:ce:86:bb:10:f4:72:47:3f:ac:12:
87:c3:06:de:e3:23:5d:56:54:8e:a7:f4:e2:0b:8b:f3:f5:1d:
c6:68:aa:ee:d4:e5:36:79:70:01:1b:25:a1:16:f5:f8:f0:05:
0b:80:c5:c6:37:20:50:d6:e3:61:31:84:6a:ed:d1:ed:74:e1:
83:a3:88:f7:94:0d:f9:91:04:16:0b:dd:b7:1d:18:55:55:85:
21:35:18:f2:80:a3:f3:b2:13:04:98:52:fd:f0:eb:d7:2d:7e:
16:61:e3:32:4f:83:a5:05:ed:ce:e1:2b:3d:00:a3:0d:a3:64:
21:04:97:eb:69:07:fd:fe:ce:1f:88:df:5b:fc:0f:d9:b5:63:
e4:2e:4f:02:fd:42:8c:ce:22:95:f3:b9:b0:ba:6c:44:8b:20:
1e:13:e8:4d:18:80:d9:79:d3:82:31:fb:f2:bd:bb:81:34:99:
57:fc:c3:45:bb:08:71:3a:14:ac:71:47:28:2c:f1:c6:ce:6a:
5c:a9:dd:4e:b4:1c:dd:6b:2c:c6:2a:71:43:4f:70:1b:b3:5e:
b4:4d:5d:a0:50:db:5a:c4:3f:25:c9:0c:8f:ca:c6:eb:fc:66:
44:81:98:67:9c:15:34:d4:46:92:ba:ff:8e:49:9a:d2:94:67:
3c:65:d2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 04:49:05 2024 by rpki-client on console-ams.rpki-client.org