Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/07E866E0E25511EEAF704D10C4F9AE02.roa
File: 07E866E0E25511EEAF704D10C4F9AE02.roa (raw, json)
Hash identifier: Ek2EMUhBR7KA7aOTj+QEdFfsVPKZcc3YxB/nHqFszkg=
Subject key identifier: 98:D0:F9:81:8F:36:8D:E1:28:38:DA:54:BD:C8:8E:FF:F8:71:39:56
Certificate issuer: /CN=A91139AB/serialNumber=D10BAF7AA8DB734B952D036087783C6437843C8F
Certificate serial: 48
Authority key identifier: D1:0B:AF:7A:A8:DB:73:4B:95:2D:03:60:87:78:3C:64:37:84:3C:8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Quveqjbc0uVLQNgh3g8ZDeEPI8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/07E866E0E25511EEAF704D10C4F9AE02.roa
Signing time: Sun 17 Mar 2024 22:35:42 +0000
ROA not before: Sun 17 Mar 2024 22:35:42 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 4857
IP address blocks: 202.147.96.0/20 maxlen: 20
202.147.112.0/20 maxlen: 24
203.82.160.0/20 maxlen: 24
203.82.176.0/20 maxlen: 24
203.201.64.0/20 maxlen: 20
203.201.65.0/24 maxlen: 24
203.201.66.0/24 maxlen: 24
203.201.73.0/24 maxlen: 24
203.201.74.0/24 maxlen: 24
203.201.76.0/24 maxlen: 24
203.201.77.0/24 maxlen: 24
203.201.78.0/24 maxlen: 24
203.201.80.0/20 maxlen: 20
203.201.96.0/20 maxlen: 20
203.201.112.0/20 maxlen: 24
221.120.128.0/20 maxlen: 24
221.120.144.0/24 maxlen: 24
221.120.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 03:36:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91139AB/serialNumber=D10BAF7AA8DB734B952D036087783C6437843C8F
Validity
Not Before: Mar 17 22:35:42 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=65f7703d-d584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3f:47:a1:36:ed:de:e9:17:75:25:9d:77:46:
33:35:97:b7:9a:00:c8:82:03:ee:89:3e:d8:a2:10:
17:79:33:a4:ae:64:95:4e:ea:bc:73:82:35:4e:cb:
eb:2b:a5:20:3e:96:11:60:5e:76:6c:3e:9c:45:ba:
cf:36:51:ac:00:be:8d:fa:91:dd:25:81:8e:3e:77:
1a:a4:16:31:6a:07:6b:60:e5:9d:5c:36:3b:72:a0:
0b:25:73:dc:21:16:fa:0f:d5:1b:d0:df:b0:7b:a3:
88:f1:cb:f3:b5:45:ef:89:f9:fa:2b:14:25:b2:0c:
e2:10:88:96:8b:1c:a4:63:df:f3:f8:07:4e:81:17:
e3:75:be:9d:24:62:16:63:5b:33:02:18:e7:4c:5d:
50:02:9b:71:2c:2d:2d:49:f4:dc:96:a5:74:cd:c8:
03:d7:98:fa:53:de:70:8f:8b:a9:c2:ce:a7:21:d6:
3d:18:0c:56:52:2c:d6:0d:80:9f:12:3d:3d:b9:dc:
db:ce:17:b3:2b:d3:21:c9:a9:47:33:5b:00:33:80:
b3:d0:c4:e9:b4:1e:f4:46:c2:66:f0:e8:07:35:fa:
38:78:19:ac:04:93:de:30:3d:fd:65:28:ba:75:d6:
f2:66:f7:ff:29:de:df:f5:0d:90:28:b3:f9:88:10:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D0:F9:81:8F:36:8D:E1:28:38:DA:54:BD:C8:8E:FF:F8:71:39:56
X509v3 Authority Key Identifier:
keyid:D1:0B:AF:7A:A8:DB:73:4B:95:2D:03:60:87:78:3C:64:37:84:3C:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/0Quveqjbc0uVLQNgh3g8ZDeEPI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Quveqjbc0uVLQNgh3g8ZDeEPI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/07E866E0E25511EEAF704D10C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.147.96.0/19
203.82.160.0/19
203.201.64.0/18
221.120.128.0-221.120.145.255
Signature Algorithm: sha256WithRSAEncryption
83:db:c7:37:a7:f7:c1:cd:6f:e1:a9:a5:54:5a:31:1c:c3:13:
df:ce:4d:8c:22:04:86:56:60:33:21:7a:30:fe:15:76:e8:34:
2d:97:3f:06:b7:e5:8c:f7:1b:02:68:33:b2:aa:64:68:d1:db:
b8:d0:19:ae:61:7e:e2:7d:c3:36:61:3b:19:a0:8c:5f:22:02:
14:13:99:68:f4:6f:55:df:4c:67:f7:e9:e2:49:fd:ec:9b:a6:
2d:67:f1:46:37:ef:5b:cf:57:a1:c7:26:84:2c:ee:92:c2:39:
b6:6a:de:d8:2f:d3:6b:ea:94:bb:69:bc:d5:0b:c7:39:e4:a0:
12:8e:bc:2b:d3:dc:99:71:50:a8:ea:66:b8:48:90:c8:4a:c0:
88:e2:dd:87:48:6e:01:a2:34:50:af:e2:f9:11:46:1e:7c:5b:
66:29:bf:b4:73:ad:0f:27:b3:6f:20:4c:a6:53:01:6a:c4:3c:
31:31:d1:f2:cf:4d:be:f5:ed:8d:cc:94:ac:60:b7:86:b1:b6:
9e:40:df:a6:b4:10:b5:59:67:89:ee:cf:93:ef:6c:7d:8a:f0:
76:9f:f7:d3:2c:c2:a4:9c:58:d0:6c:34:13:93:a4:fe:ae:12:
70:ce:bc:08:6b:51:a9:ad:4f:2c:36:30:51:96:44:3c:90:8e:
a7:33:ed:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 06:27:00 2024 by rpki-client on console-ams.rpki-client.org