Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/88E867EC6C1911EF85A3811FC4F9AE02.roa
File: 88E867EC6C1911EF85A3811FC4F9AE02.roa (raw, json)
Hash identifier: 7+eqq4lQOZ8org8E6eV9UwIqhD/Fqfd3bW1Vkk/OJMM=
Subject key identifier: 26:65:54:24:7F:5D:D2:81:F2:3B:3C:A6:BB:88:EF:B9:70:D1:CC:EC
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0975
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/88E867EC6C1911EF85A3811FC4F9AE02.roa
Signing time: Fri 06 Sep 2024 06:30:40 +0000
ROA not before: Fri 06 Sep 2024 06:30:40 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 9908
IP address blocks: 61.10.0.0/16 maxlen: 16
61.10.0.0/17 maxlen: 17
61.10.0.0/18 maxlen: 20
61.10.64.0/18 maxlen: 18
61.10.64.0/19 maxlen: 20
61.10.96.0/19 maxlen: 20
61.10.128.0/17 maxlen: 20
61.15.0.0/16 maxlen: 16
61.15.0.0/17 maxlen: 20
61.15.128.0/17 maxlen: 20
61.18.0.0/16 maxlen: 20
125.59.0.0/16 maxlen: 20
203.83.64.0/18 maxlen: 18
203.168.160.0/20 maxlen: 20
203.168.176.0/20 maxlen: 20
203.168.192.0/18 maxlen: 20
218.252.0.0/16 maxlen: 16
218.252.0.0/17 maxlen: 20
218.252.128.0/17 maxlen: 20
218.253.0.0/18 maxlen: 20
218.254.0.0/16 maxlen: 20
222.166.0.0/16 maxlen: 20
222.167.0.0/16 maxlen: 20
Validation: Failed, certificate revoked on Mon 30 Sep 2024 01:21:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2421 (0x975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Sep 6 06:30:40 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66daa190-124d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:da:26:fe:65:2e:b7:4c:cd:40:ef:36:cf:
bc:87:2d:69:ea:a5:c6:85:6e:5c:93:fc:af:2b:74:
e8:32:6c:06:f0:a8:1e:05:cb:4a:f1:9c:8d:12:65:
0e:43:10:f5:86:07:1a:60:4e:ad:43:b0:9f:45:7a:
81:3f:3c:90:07:b6:86:1f:dd:f2:11:1d:46:cc:6f:
e4:80:69:cc:87:2f:07:8e:ed:92:8a:61:37:d9:ce:
33:85:46:c3:d9:00:8f:6c:d6:a4:fe:b4:8a:3a:f6:
a2:02:78:6f:ec:c1:5b:e8:e4:7a:db:9b:5d:bb:9f:
5e:cd:0e:ea:95:c8:de:be:33:60:95:9c:45:51:84:
24:2b:ab:83:ce:14:c7:44:83:8e:7b:01:79:7f:9a:
e2:8c:b5:ae:03:65:17:2f:05:67:b1:ab:1d:5c:bf:
d1:7f:69:75:5c:47:c4:ab:67:af:2f:d8:94:fe:ea:
5a:ce:a5:42:7b:c4:31:b4:76:62:0b:30:7c:dd:6f:
f6:aa:23:e1:49:3a:4a:63:f4:9e:1b:26:42:e7:b6:
4d:cf:c8:a0:8c:25:fd:94:9a:e9:3d:0b:9c:47:d4:
4e:83:56:e2:d6:54:fd:18:3c:3f:28:4e:cd:d0:d4:
9d:e5:4a:d8:7a:d7:3b:ac:53:3e:31:06:e8:ff:3d:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:65:54:24:7F:5D:D2:81:F2:3B:3C:A6:BB:88:EF:B9:70:D1:CC:EC
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/88E867EC6C1911EF85A3811FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.10.0.0/16
61.15.0.0/16
61.18.0.0/16
125.59.0.0/16
203.83.64.0/18
203.168.160.0-203.168.255.255
218.252.0.0-218.253.63.255
218.254.0.0/16
222.166.0.0/15
Signature Algorithm: sha256WithRSAEncryption
5f:9f:8b:97:2a:db:fe:44:9e:ef:83:bd:72:06:74:90:a8:b3:
5a:22:e7:e1:5a:36:fc:2b:cb:4b:28:85:1d:83:d1:91:80:09:
33:1e:be:6f:f7:89:b9:c0:f8:d2:99:94:3d:51:3d:b6:e9:ab:
ba:72:fb:22:a8:39:b6:ae:d9:c9:7c:98:d0:6c:6c:f8:7e:41:
3f:22:c1:26:a9:be:98:33:8a:bd:0b:f3:7f:b4:19:9f:01:8b:
5b:0c:6a:0c:d1:48:56:e7:fb:a2:ff:a8:23:14:50:72:31:c9:
00:06:7a:b8:3b:76:43:bc:c1:e1:90:51:bd:15:0c:d9:8e:01:
8e:84:80:ff:fa:52:a0:3f:b2:9a:09:c3:60:89:97:e2:69:b4:
1c:ea:b6:77:1c:17:f0:43:a4:d5:4e:a1:14:f3:6b:b7:4f:c6:
65:05:8c:ca:ed:c9:f5:ef:79:18:98:cc:41:af:26:5f:b7:19:
2a:46:20:92:70:f9:6f:69:20:8e:8f:2e:a5:4d:a4:a2:c8:b0:
07:a0:3a:06:8c:ae:ac:ce:b6:de:b4:20:7c:74:47:57:64:58:
06:66:6e:8b:9c:16:92:07:f1:4a:70:86:d1:fa:9c:47:db:38:
d4:16:92:f1:5f:3e:4f:9c:99:e8:73:ff:b9:0a:4f:35:e8:1c:
7d:0b:d7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 03:16:02 2024 by rpki-client on console-fra.rpki-client.org