Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/8E248A44207D11EE9A4E5A6FC4F9AE02.roa
File: 8E248A44207D11EE9A4E5A6FC4F9AE02.roa (raw, json)
Hash identifier: +/uetuGDeS7DC/jjLN8P02FkEzPYfTcxLXaCBkI5ank=
Subject key identifier: 11:F1:01:DC:1C:F2:C9:08:2C:3B:53:9B:9A:A6:37:6D:10:B9:CC:25
Certificate issuer: /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial: 3487
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/8E248A44207D11EE9A4E5A6FC4F9AE02.roa
Signing time: Wed 12 Jul 2023 06:30:12 +0000
ROA not before: Wed 12 Jul 2023 06:30:12 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 9335
IP address blocks: 61.19.240.0/20 maxlen: 24
110.78.192.0/20 maxlen: 24
110.78.208.0/21 maxlen: 21
110.78.216.0/22 maxlen: 22
110.78.220.0/22 maxlen: 24
110.78.228.0/22 maxlen: 22
110.78.228.0/24 maxlen: 24
110.78.229.0/24 maxlen: 24
110.78.230.0/24 maxlen: 24
110.78.231.0/24 maxlen: 24
110.78.252.0/24 maxlen: 24
110.78.253.0/24 maxlen: 24
110.78.254.0/24 maxlen: 24
110.78.255.0/24 maxlen: 24
122.155.0.0/19 maxlen: 23
122.155.0.0/20 maxlen: 24
122.155.16.0/21 maxlen: 24
122.155.24.0/23 maxlen: 24
122.155.28.0/22 maxlen: 24
122.155.55.0/24 maxlen: 24
122.155.144.0/21 maxlen: 24
122.155.160.0/19 maxlen: 24
122.155.192.0/24 maxlen: 24
122.155.193.0/24 maxlen: 24
122.155.194.0/24 maxlen: 24
122.155.195.0/24 maxlen: 24
122.155.196.0/24 maxlen: 24
122.155.197.0/24 maxlen: 24
122.155.198.0/24 maxlen: 24
122.155.199.0/24 maxlen: 24
122.155.200.0/24 maxlen: 24
122.155.201.0/24 maxlen: 24
122.155.202.0/24 maxlen: 24
122.155.203.0/24 maxlen: 24
122.155.204.0/24 maxlen: 24
122.155.205.0/24 maxlen: 24
122.155.206.0/24 maxlen: 24
122.155.207.0/24 maxlen: 24
122.155.208.0/24 maxlen: 24
122.155.209.0/24 maxlen: 24
122.155.210.0/24 maxlen: 24
122.155.211.0/24 maxlen: 24
122.155.212.0/24 maxlen: 24
122.155.215.0/24 maxlen: 24
122.155.216.0/24 maxlen: 24
122.155.220.0/24 maxlen: 24
122.155.221.0/24 maxlen: 24
122.155.222.0/24 maxlen: 24
122.155.223.0/24 maxlen: 24
202.3.68.0/24 maxlen: 24
202.3.69.0/24 maxlen: 24
202.3.70.0/24 maxlen: 24
202.3.71.0/24 maxlen: 24
202.139.192.0/22 maxlen: 22
202.139.192.0/24 maxlen: 24
202.139.193.0/24 maxlen: 24
202.139.194.0/24 maxlen: 24
202.139.195.0/24 maxlen: 24
202.139.196.0/24 maxlen: 24
202.139.198.0/24 maxlen: 24
202.139.199.0/24 maxlen: 24
202.139.223.0/24 maxlen: 24
2001:c38:1000::/36 maxlen: 36
2001:c38:2000::/36 maxlen: 36
2001:c38:3001::/48 maxlen: 48
2001:c38:3002::/48 maxlen: 48
2001:c38:3003::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13447 (0x3487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Validity
Not Before: Jul 12 06:30:12 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=64ae4874-8611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3f:13:73:45:e4:64:d5:c8:d1:02:ff:00:be:
11:19:10:0c:30:22:fe:64:4b:0e:3a:e1:39:71:f9:
fe:7f:b7:d3:0d:90:9b:d5:8f:72:f0:c8:f5:b8:46:
58:6a:64:b7:0e:24:65:6b:1d:4b:e0:94:d7:ee:11:
5f:8c:ef:40:93:3f:3e:97:9d:4f:04:64:17:cb:2d:
b7:e4:b9:a4:90:81:0f:88:58:cc:b6:bb:08:6f:53:
6d:36:59:41:a5:31:78:e9:81:d9:1c:88:ff:96:95:
6a:d8:ac:67:d6:c2:2d:f1:a0:c3:8c:00:ae:f8:bc:
f9:cf:31:08:fd:80:e5:0e:3f:8c:0b:fa:99:ee:90:
ee:28:1c:b9:d3:68:aa:7d:5f:de:9b:44:b0:b3:f1:
8a:ea:a2:4a:9a:83:08:9c:7b:ba:9b:56:d1:34:6c:
9d:1f:77:a5:91:c8:d4:36:04:68:a8:08:3f:ec:eb:
04:da:c6:66:63:ea:a0:2d:bd:18:90:0f:7c:55:f9:
28:69:18:bd:e9:75:21:84:31:a1:ee:73:c7:07:79:
54:76:78:5f:6a:01:b0:f9:38:01:61:71:82:61:55:
44:7d:5c:ad:6b:0d:0b:3b:ff:02:34:80:f3:77:3e:
82:ea:1f:be:50:c9:bc:5d:9f:41:16:84:ec:74:f0:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F1:01:DC:1C:F2:C9:08:2C:3B:53:9B:9A:A6:37:6D:10:B9:CC:25
X509v3 Authority Key Identifier:
keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/8E248A44207D11EE9A4E5A6FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.19.240.0/20
110.78.192.0/19
110.78.228.0/22
110.78.252.0/22
122.155.0.0/19
122.155.55.0/24
122.155.144.0/21
122.155.160.0-122.155.212.255
122.155.215.0-122.155.216.255
122.155.220.0/22
202.3.68.0/22
202.139.192.0-202.139.196.255
202.139.198.0/23
202.139.223.0/24
IPv6:
2001:c38:1000::-2001:c38:2fff:ffff:ffff:ffff:ffff:ffff
2001:c38:3001::-2001:c38:3003:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c3:e8:de:2e:35:86:44:26:cb:58:8d:05:09:15:6e:52:ba:d0:
af:ac:05:ab:44:8e:3c:cc:cd:fa:92:91:b8:bf:39:57:fb:60:
28:a3:7a:9b:2f:8c:ac:d9:eb:3d:a3:7d:b2:01:cc:fb:97:f2:
1a:10:bf:f3:01:80:68:f6:19:dc:35:e9:da:24:c5:1c:09:51:
44:03:57:c3:f5:f9:47:66:19:67:d9:87:47:48:e5:e3:86:50:
f2:6e:15:cb:bb:58:cf:2a:8c:f7:dd:77:9c:fc:25:69:c5:e0:
c8:79:a6:b9:67:c6:7e:a7:0c:40:e3:1d:92:f3:ef:bb:0a:1e:
42:4a:1a:b3:4a:f3:6a:99:91:8a:cb:aa:1b:7e:8f:62:78:c1:
c5:7b:f6:33:04:28:b4:03:53:9c:70:bf:7c:f3:20:02:0f:1e:
45:8f:15:6d:c4:26:68:9b:cc:f7:e2:bf:eb:9b:40:b7:db:c2:
1e:1f:e7:58:ed:f9:c0:58:8c:6a:06:4c:a5:a3:7b:c9:1b:03:
84:67:ee:db:c4:05:27:df:c8:28:25:28:04:ee:81:c2:24:ee:
4d:cf:7c:c3:b0:59:a8:e5:c6:6b:5d:ec:98:31:bc:e2:e9:1e:
04:d4:90:35:f7:1f:f2:5a:ad:22:e1:86:ec:78:e6:90:2b:2e:
fa:76:50:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 03:31:44 2023 by rpki-client on console-ams.rpki-client.org