Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/12C38C1C4D9811EF8499B76DC4F9AE02.roa
File: 12C38C1C4D9811EF8499B76DC4F9AE02.roa (raw, json)
Hash identifier: fRcPhTyvlLmmDLq5TKsas4yIT/wXxG3EwH+wsGVj8Go=
Subject key identifier: 4B:C2:B1:0E:E0:A6:66:46:38:0C:62:58:C6:E9:7B:72:AB:D2:DE:61
Certificate issuer: /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial: 03A7
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/12C38C1C4D9811EF8499B76DC4F9AE02.roa
Signing time: Wed 31 Jul 2024 02:33:12 +0000
ROA not before: Wed 31 Jul 2024 02:33:12 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 4750
IP address blocks: 147.50.0.0/22 maxlen: 22
147.50.4.0/22 maxlen: 22
147.50.8.0/22 maxlen: 22
147.50.12.0/22 maxlen: 22
147.50.16.0/22 maxlen: 22
147.50.20.0/22 maxlen: 22
147.50.24.0/22 maxlen: 22
147.50.28.0/22 maxlen: 22
147.50.32.0/22 maxlen: 22
147.50.32.0/24 maxlen: 24
147.50.34.0/24 maxlen: 24
147.50.35.0/24 maxlen: 24
147.50.36.0/22 maxlen: 22
147.50.41.0/24 maxlen: 24
147.50.42.0/24 maxlen: 24
147.50.43.0/24 maxlen: 24
147.50.44.0/24 maxlen: 24
147.50.45.0/24 maxlen: 24
147.50.46.0/24 maxlen: 24
147.50.47.0/24 maxlen: 24
147.50.48.0/24 maxlen: 24
147.50.49.0/24 maxlen: 24
147.50.50.0/24 maxlen: 24
147.50.51.0/24 maxlen: 24
147.50.52.0/24 maxlen: 24
147.50.53.0/24 maxlen: 24
147.50.54.0/24 maxlen: 24
147.50.55.0/24 maxlen: 24
147.50.56.0/24 maxlen: 24
147.50.57.0/24 maxlen: 24
147.50.58.0/24 maxlen: 24
147.50.59.0/24 maxlen: 24
147.50.60.0/24 maxlen: 24
147.50.61.0/24 maxlen: 24
147.50.64.0/22 maxlen: 22
147.50.68.0/22 maxlen: 22
147.50.73.0/24 maxlen: 24
147.50.75.0/24 maxlen: 24
147.50.76.0/22 maxlen: 22
147.50.76.0/24 maxlen: 24
147.50.77.0/24 maxlen: 24
147.50.78.0/24 maxlen: 24
147.50.128.0/19 maxlen: 19
147.50.128.0/22 maxlen: 22
147.50.128.0/24 maxlen: 24
147.50.132.0/22 maxlen: 22
147.50.144.0/22 maxlen: 22
147.50.148.0/22 maxlen: 22
147.50.156.0/22 maxlen: 22
147.50.160.0/20 maxlen: 20
147.50.162.0/23 maxlen: 23
147.50.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 01 Aug 2024 11:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 935 (0x3a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Validity
Not Before: Jul 31 02:33:12 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66a9a268-6a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:1a:aa:16:c6:64:14:3c:7d:6f:3d:21:05:
a4:76:27:a3:50:8a:cb:ea:bc:91:1e:ed:e5:75:1d:
b9:19:1e:50:52:72:07:39:e3:a1:96:0c:bd:16:22:
1e:cd:2a:01:a7:42:f9:98:8c:b2:91:4e:d6:19:b7:
11:43:61:0c:5b:a7:3b:76:ad:22:49:85:5a:97:31:
60:d3:c2:6a:22:e7:d6:0f:86:ac:3a:cd:9a:7d:12:
70:3a:1d:df:b1:1c:5d:3d:d3:ae:85:4a:46:11:a6:
4d:02:86:a7:e0:5a:3b:37:12:73:1e:49:17:5a:34:
4c:dc:8e:d0:c7:55:ca:48:3b:51:5b:b2:85:e5:83:
8e:8a:03:ec:f0:ec:2a:88:fa:28:7d:c9:64:ae:56:
a8:3b:e0:fa:0e:55:47:0f:f3:59:db:10:aa:f1:0e:
0c:43:28:c5:ce:fb:6b:43:86:2e:78:ba:12:50:03:
2a:19:14:9c:dc:7c:8f:6c:2b:13:50:3f:8b:3a:5d:
fb:21:3a:01:cd:ac:35:99:43:d5:ca:ba:c0:e2:5d:
cc:1e:67:58:f6:9e:dc:6c:e1:dc:b9:82:d2:13:25:
b9:59:b2:0a:94:5e:ca:e3:3d:ff:13:68:dc:2b:00:
76:54:fc:42:22:c2:aa:71:cc:fc:d9:3c:b1:2a:e6:
3e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C2:B1:0E:E0:A6:66:46:38:0C:62:58:C6:E9:7B:72:AB:D2:DE:61
X509v3 Authority Key Identifier:
keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/12C38C1C4D9811EF8499B76DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.50.0.0-147.50.39.255
147.50.41.0-147.50.61.255
147.50.64.0/21
147.50.73.0/24
147.50.75.0-147.50.79.255
147.50.128.0-147.50.175.255
Signature Algorithm: sha256WithRSAEncryption
76:05:79:9b:61:95:bf:78:1a:54:c8:be:53:75:71:04:61:29:
8a:d6:b2:86:0a:22:ed:1f:6b:d0:0f:3f:eb:c8:95:f5:25:e9:
5e:46:59:72:53:c7:16:ef:91:f0:77:b8:2c:0a:2b:9a:f8:79:
37:72:b1:72:9a:3d:12:6e:e8:aa:aa:82:d7:f7:05:7f:f0:af:
bf:e5:d3:e6:7c:d1:28:06:bd:91:35:e7:d0:c1:4f:65:da:b8:
c1:af:61:cc:e0:6c:fc:ed:ca:f4:06:1c:9c:77:c4:27:72:b3:
e3:96:3d:67:bc:14:aa:d0:11:00:a9:67:c9:a1:10:94:26:aa:
bc:56:81:54:2d:23:f4:86:31:47:f0:63:87:28:66:8b:e8:07:
95:20:f8:5d:9c:de:a5:d3:90:3b:89:2c:c1:aa:fc:ae:b8:49:
71:31:c0:80:ea:d5:1b:75:c2:ec:b7:c8:f5:13:29:e2:08:f4:
4b:ba:b8:d0:1f:b8:74:59:53:f9:10:da:8b:83:01:ca:e8:41:
8f:f2:21:cb:de:a6:ec:db:48:12:3a:ef:46:3f:ae:03:5d:8d:
1a:e9:ea:c9:b4:e5:5b:34:ce:57:af:fc:43:cf:d9:03:c6:6e:
e8:38:eb:24:2d:00:10:db:d8:59:6a:ba:de:7a:b9:f4:2d:f9:
f3:0e:ca:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 14:00:10 2024 by rpki-client on console-fra.rpki-client.org