Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/2085803EF6B611ECA8E02D58C4F9AE02.roa
File: 2085803EF6B611ECA8E02D58C4F9AE02.roa (raw, json)
Hash identifier: upmHBTIdvP0ZolVdirsO5wW9VU83zDx7HbzIISJ3Kzo=
Subject key identifier: 99:FC:5D:18:28:F9:45:6A:03:3B:D2:02:4E:54:C5:CB:00:7F:BA:85
Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Certificate serial: 09A8
Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/2085803EF6B611ECA8E02D58C4F9AE02.roa
Signing time: Sun 03 Jul 2022 20:06:31 +0000
ROA not before: Sun 03 Jul 2022 20:06:31 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 134371
IP address blocks: 103.62.140.0/22 maxlen: 24
202.136.88.0/22 maxlen: 22
202.136.88.0/24 maxlen: 24
202.136.89.0/24 maxlen: 24
202.136.90.0/24 maxlen: 24
202.136.91.0/24 maxlen: 24
2400:3dc0::/32 maxlen: 32
2400:3dc0::/36 maxlen: 36
2400:3dc0::/44 maxlen: 48
2400:3dc0:10::/44 maxlen: 48
2400:3dc0:2e::/48 maxlen: 48
2400:3dc0:2f::/48 maxlen: 48
2400:3dc0:3e::/48 maxlen: 48
2400:3dc0:3f::/48 maxlen: 48
2400:3dc0:100::/48 maxlen: 48
2400:3dc0:101::/48 maxlen: 48
2400:3dc0:200::/48 maxlen: 48
2400:3dc0:201::/48 maxlen: 48
2400:3dc0:300::/48 maxlen: 48
2400:3dc0:400::/48 maxlen: 48
2400:3dc0:500::/48 maxlen: 48
2400:3dc0:600::/48 maxlen: 48
2400:3dc0:700::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2472 (0x9a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Validity
Not Before: Jul 3 20:06:31 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62c1f6c7-e995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:dc:31:f3:24:50:b5:34:19:8d:c9:5b:d0:
38:20:6f:60:41:a7:8c:ed:0a:8f:82:47:42:2a:2e:
1c:80:f5:32:39:15:3f:22:50:3d:a6:3f:4e:1a:6d:
44:d2:66:17:de:13:f8:39:ca:a3:cc:85:ae:9b:bc:
c3:21:9b:7f:26:bd:2e:47:60:59:c5:19:8f:46:8c:
53:f2:27:e7:1c:07:bf:ad:6b:56:46:bd:96:d3:98:
53:0c:2e:ac:c3:da:8d:0d:3d:08:63:22:9a:af:94:
45:d6:3b:8e:f6:c4:d9:6a:db:df:ef:cb:ea:05:36:
d2:9e:7a:70:60:68:84:6c:d5:56:91:52:f9:f1:9b:
96:f2:05:dd:07:51:2a:f0:ad:d8:a6:b0:6a:cc:6e:
3c:16:43:cb:cb:e5:6a:e1:71:37:b4:37:bb:1b:51:
dd:37:f6:36:fc:11:4f:24:30:e4:78:28:28:8f:eb:
db:f4:71:5c:15:51:26:9c:ce:01:e9:7b:6a:3b:6c:
2a:f6:f9:4a:20:77:35:9f:b8:86:2d:7b:c4:44:47:
ff:65:da:1c:b1:65:12:04:dc:b4:75:29:fe:ae:7e:
20:00:be:fe:16:03:a6:d7:05:c9:e4:75:e5:57:b0:
a4:bc:27:b8:66:a3:e1:d9:61:8b:fc:09:dd:a7:12:
db:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FC:5D:18:28:F9:45:6A:03:3B:D2:02:4E:54:C5:CB:00:7F:BA:85
X509v3 Authority Key Identifier:
keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/2085803EF6B611ECA8E02D58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.62.140.0/22
202.136.88.0/22
IPv6:
2400:3dc0::/32
Signature Algorithm: sha256WithRSAEncryption
c8:41:88:1a:c9:28:ec:b5:94:94:69:f9:30:95:c6:58:b3:75:
68:7e:47:94:c6:1c:b8:94:78:66:e5:86:1d:4e:31:17:9b:51:
2b:42:89:b6:b7:aa:60:04:89:32:69:22:a6:ec:de:10:ed:17:
4e:2e:d0:d8:fa:48:06:27:ad:27:f2:ec:0b:0d:ac:57:a0:15:
0f:a7:aa:7a:fa:c4:fe:d8:ef:7a:d3:8b:4c:eb:54:c6:47:f2:
ac:ab:ef:f8:48:31:59:79:0f:c4:5d:cc:5f:eb:35:ce:39:fb:
15:34:33:63:bc:2d:2a:e9:79:d5:90:f3:19:cf:f8:de:78:28:
4a:f8:d1:10:a3:77:d8:10:d7:14:5e:70:d9:ba:2d:41:8c:c7:
4c:6a:df:55:82:ce:09:82:3b:1c:37:0f:f5:72:bf:c0:0d:24:
70:08:f4:60:d1:20:ad:2a:ff:39:f4:5a:df:28:93:71:d8:0c:
e9:dd:65:fa:8c:a3:0c:63:28:4f:f0:6b:b2:5a:43:e4:b7:82:
f7:e1:af:55:ea:11:bd:75:80:74:ba:09:3d:d4:19:f0:3b:a8:
86:00:b3:b1:95:88:24:88:8b:cd:41:55:b7:d5:99:54:bb:98:
e4:d5:29:cd:e2:44:0b:f2:c4:1a:a0:71:f8:4a:1c:a0:e4:02:
b0:f3:b4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:36 2023 by rpki-client on console-fra.rpki-client.org