Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/B2B762062C3E11EEAF56995FC4F9AE02.roa
File: B2B762062C3E11EEAF56995FC4F9AE02.roa (raw, json)
Hash identifier: Zfxu6o78Jv6G73VFZxjWjTQayVQqHRGa++jOKL1lWn8=
Subject key identifier: 9C:9D:0D:9A:5D:F3:B6:E9:A6:13:4D:14:57:A3:BD:89:D1:E9:F1:54
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 372B
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/B2B762062C3E11EEAF56995FC4F9AE02.roa
Signing time: Thu 27 Jul 2023 05:30:29 +0000
ROA not before: Thu 27 Jul 2023 05:30:29 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 17552
IP address blocks: 27.145.0.0/16 maxlen: 24
58.8.0.0/16 maxlen: 24
58.9.0.0/16 maxlen: 24
58.10.0.0/16 maxlen: 24
58.11.0.0/16 maxlen: 24
61.90.0.0/17 maxlen: 24
61.91.128.0/21 maxlen: 24
61.91.144.0/21 maxlen: 24
61.91.190.0/24 maxlen: 24
61.91.191.0/24 maxlen: 24
61.91.192.0/24 maxlen: 24
61.91.193.0/24 maxlen: 24
61.91.201.0/24 maxlen: 24
61.91.214.0/24 maxlen: 24
110.168.0.0/17 maxlen: 24
110.168.128.0/17 maxlen: 24
110.169.0.0/16 maxlen: 24
110.171.0.0/17 maxlen: 24
110.171.128.0/17 maxlen: 24
114.109.0.0/16 maxlen: 24
115.87.0.0/17 maxlen: 24
115.87.128.0/17 maxlen: 24
119.46.255.0/24 maxlen: 24
119.76.0.0/16 maxlen: 24
124.120.0.0/16 maxlen: 24
124.121.0.0/16 maxlen: 24
124.122.0.0/16 maxlen: 24
171.96.0.0/16 maxlen: 24
171.97.0.0/16 maxlen: 24
171.98.0.0/16 maxlen: 24
171.99.0.0/16 maxlen: 16
171.99.0.0/17 maxlen: 24
171.99.128.0/18 maxlen: 24
171.99.192.0/18 maxlen: 24
171.100.0.0/16 maxlen: 24
171.101.0.0/16 maxlen: 24
182.17.0.0/16 maxlen: 24
202.176.64.0/18 maxlen: 18
202.176.64.0/19 maxlen: 24
202.176.96.0/19 maxlen: 24
202.176.128.0/18 maxlen: 18
202.176.128.0/19 maxlen: 19
202.176.183.0/24 maxlen: 24
202.176.184.0/24 maxlen: 24
2001:fb1::/32 maxlen: 32
2001:fb1::/44 maxlen: 48
2001:fb1:10::/44 maxlen: 48
2001:fb1:20::/44 maxlen: 48
2001:fb1:30::/44 maxlen: 48
2001:fb1:40::/44 maxlen: 48
2001:fb1:50::/44 maxlen: 48
2001:fb1:60::/44 maxlen: 48
2001:fb1:70::/44 maxlen: 48
2001:fb1:80::/44 maxlen: 48
2001:fb1:90::/44 maxlen: 48
2001:fb1:a0::/44 maxlen: 48
2001:fb1:b0::/44 maxlen: 48
2001:fb1:c0::/44 maxlen: 48
2001:fb1:d0::/44 maxlen: 48
2001:fb1:e0::/44 maxlen: 48
2001:fb1:f0::/44 maxlen: 48
2001:fb1:100::/44 maxlen: 48
2001:fb1:110::/44 maxlen: 48
2001:fb1:120::/44 maxlen: 48
2001:fb1:130::/44 maxlen: 48
2001:fb1:140::/44 maxlen: 48
2001:fb1:150::/44 maxlen: 48
2001:fb1:160::/44 maxlen: 48
2001:fb1:170::/44 maxlen: 48
2001:fb1:180::/44 maxlen: 48
2001:fb1:fc0::/48 maxlen: 48
2001:fb1:fd0::/48 maxlen: 48
2001:fb1:fe0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14123 (0x372b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 27 05:30:29 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64c200f5-f616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:82:ae:31:b7:9a:97:fe:81:3b:99:df:ac:
8b:84:21:ed:24:22:32:5a:12:8e:3f:72:4b:43:59:
9d:1a:27:52:ec:03:55:2e:30:a7:b4:48:fb:93:b6:
cd:f9:17:93:a8:e8:03:35:59:94:58:df:c9:e2:b9:
9a:1c:1d:cc:8e:5d:8f:91:e4:fd:d5:53:78:f5:1b:
c5:d4:8a:c0:fe:da:3a:a3:56:db:93:18:ca:e8:01:
14:76:d1:db:00:84:6d:f3:54:4f:06:d3:62:e0:f1:
96:f1:c2:7f:bc:3f:ed:47:b7:02:48:f3:00:0b:50:
32:5b:bf:95:5c:c3:92:d5:25:27:96:83:0e:db:25:
ef:7b:20:d8:cf:22:1b:a3:d4:e5:57:83:23:03:6a:
17:fc:6c:a6:18:11:85:25:c5:4c:20:61:21:d5:45:
1d:71:dc:6a:98:72:4e:56:17:cd:34:b2:9d:90:40:
40:23:a0:13:7a:ef:9e:ee:69:cb:ad:bd:3d:f6:50:
9f:f1:d2:09:84:e1:4e:a2:35:75:fb:54:6b:22:01:
c3:9e:79:7f:c7:8d:e6:f8:d5:4f:d1:78:3d:9c:bb:
c6:43:d2:37:60:a2:23:eb:8a:2c:15:9b:59:7a:cc:
12:8c:7a:dd:b5:80:2e:2a:b7:30:22:e4:a8:9d:e3:
d5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9D:0D:9A:5D:F3:B6:E9:A6:13:4D:14:57:A3:BD:89:D1:E9:F1:54
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/B2B762062C3E11EEAF56995FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.145.0.0/16
58.8.0.0/14
61.90.0.0/17
61.91.128.0/21
61.91.144.0/21
61.91.190.0-61.91.193.255
61.91.201.0/24
61.91.214.0/24
110.168.0.0/15
110.171.0.0/16
114.109.0.0/16
115.87.0.0/16
119.46.255.0/24
119.76.0.0/16
124.120.0.0-124.122.255.255
171.96.0.0-171.101.255.255
182.17.0.0/16
202.176.64.0-202.176.191.255
IPv6:
2001:fb1::/32
Signature Algorithm: sha256WithRSAEncryption
96:74:e4:e9:ea:1a:a1:18:6a:fc:47:55:df:9d:ab:41:08:9c:
26:52:7c:12:84:cc:3e:f6:29:1b:23:16:ae:9e:92:bb:99:9c:
21:8d:dc:7c:fe:56:dc:d4:de:01:d4:a4:0b:eb:fa:4b:28:77:
a5:eb:9f:e0:45:c8:2b:3b:8b:4c:42:e7:ec:51:35:c4:de:a3:
67:3e:6d:83:7e:13:92:dd:66:2f:9e:1f:14:26:df:e4:e7:45:
fd:04:7d:2e:79:d4:69:43:99:95:56:79:eb:33:f4:1d:79:89:
0f:8c:bd:1d:bb:24:62:91:cf:0c:0a:4e:67:74:e8:65:4e:83:
8b:cb:39:df:fa:3b:3c:64:0b:35:b4:43:0b:82:91:61:a0:3b:
97:59:f5:08:a2:78:ae:4f:11:68:83:f8:37:7e:93:93:15:49:
67:8e:e4:69:8f:d0:8b:27:66:41:4d:28:85:d6:67:21:8c:21:
d8:73:23:eb:80:1a:d7:ae:27:63:02:2f:06:55:b7:ca:1b:87:
f2:fc:dc:72:f3:f5:50:39:4a:3d:e2:5c:16:01:00:5f:8b:3e:
2b:02:3f:bf:da:41:ed:5e:20:46:59:c9:ff:6e:ec:3b:0e:e6:
e2:c6:d0:65:67:df:d6:38:0e:96:4f:ad:c3:bc:ee:cd:61:7a:
38:4e:7c:26
-----BEGIN CERTIFICATE-----
MIIF/zCCBOegAwIBAgICNyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjMwNzI3MDUzMDI5WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGMyMDBmNS1mNjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqUqCrjG3mpf+gTuZ36yLhCHtJCIyWhKOP3JLQ1mdGidS7ANVLjCntEj7k7bN
+ReTqOgDNVmUWN/J4rmaHB3Mjl2PkeT91VN49RvF1IrA/to6o1bbkxjK6AEUdtHb
AIRt81RPBtNi4PGW8cJ/vD/tR7cCSPMAC1AyW7+VXMOS1SUnloMO2yXveyDYzyIb
o9TlV4MjA2oX/GymGBGFJcVMIGEh1UUdcdxqmHJOVhfNNLKdkEBAI6ATeu+e7mnL
rb099lCf8dIJhOFOojV1+1RrIgHDnnl/x43m+NVP0Xg9nLvGQ9I3YKIj64osFZtZ
eswSjHrdtYAuKrcwIuSonePVAQIDAQABo4IDIzCCAx8wHQYDVR0OBBYEFJydDZpd
87bpphNNFFejvYnR6fFUMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvQjJCNzYyMDYy
QzNFMTFFRUFGNTY5OTVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgawGCCsGAQUFBwEHAQH/
BIGcMIGZMIGHBAIAATCBgAMDABuRAwMCOggDBAc9WgADBAM9W4ADBAM9W5AwDAME
AT1bvgMEAT1bwAMEAD1byQMEAD1b1gMDAW6oAwMAbqsDAwBybQMDAHNXAwQAdy7/
AwMAd0wwCgMDA3x4AwMAfHowCgMDBatgAwMBq2QDAwC2ETAMAwQGyrBAAwQGyrCA
MA0EAgACMAcDBQAgAQ+xMA0GCSqGSIb3DQEBCwUAA4IBAQCWdOTp6hqhGGr8R1Xf
natBCJwmUnwShMw+9ikbIxaunpK7mZwhjdx8/lbc1N4B1KQL6/pLKHel65/gRcgr
O4tMQufsUTXE3qNnPm2DfhOS3WYvnh8UJt/k50X9BH0uedRpQ5mVVnnrM/QdeYkP
jL0duyRikc8MCk5ndOhlToOLyznf+js8ZAs1tEMLgpFhoDuXWfUIoniuTxFog/g3
fpOTFUlnjuRpj9CLJ2ZBTSiF1mchjCHYcyPrgBrXridjAi8GVbfKG4fy/Nxy8/VQ
OUo94lwWAQBfiz4rAj+/2kHtXiBGWcn/buw7DubixtBlZ9/WOA6WT63DvO7NYXo4
Tnwm
-----END CERTIFICATE-----
Generated at Thu Jul 27 06:11:59 2023 by rpki-client on console-fra.rpki-client.org