Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/32046E1C84CA11EEAA8FF079C4F9AE02.roa
File: 32046E1C84CA11EEAA8FF079C4F9AE02.roa (raw, json)
Hash identifier: sB5eLCO/vFJi8WDHEt67kpleRo9EiDJ5FAvRlNG0nu8=
Subject key identifier: FC:1A:A7:FF:29:4B:64:28:46:C0:32:28:41:FE:11:AF:01:B3:F8:F5
Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial: 05E2
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/32046E1C84CA11EEAA8FF079C4F9AE02.roa
Signing time: Thu 16 Nov 2023 21:50:45 +0000
ROA not before: Thu 16 Nov 2023 21:50:45 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 9790
IP address blocks: 60.234.0.0/16 maxlen: 20
101.98.0.0/16 maxlen: 20
101.100.128.0/19 maxlen: 24
103.237.40.0/22 maxlen: 24
110.44.16.0/22 maxlen: 24
119.224.0.0/18 maxlen: 22
119.224.64.0/19 maxlen: 20
119.224.128.0/20 maxlen: 20
121.98.0.0/15 maxlen: 20
124.197.0.0/18 maxlen: 22
202.49.244.0/22 maxlen: 24
202.50.170.0/24 maxlen: 24
202.53.176.0/20 maxlen: 20
202.89.128.0/19 maxlen: 20
202.150.96.0/20 maxlen: 20
202.150.112.0/20 maxlen: 20
202.180.64.0/18 maxlen: 20
202.189.160.0/20 maxlen: 20
202.191.32.0/20 maxlen: 20
203.184.0.0/18 maxlen: 20
2400:4800::/32 maxlen: 32
2402:6000::/32 maxlen: 32
2402:8200::/32 maxlen: 32
2404:4400::/28 maxlen: 36
Validation: Failed, certificate revoked on Thu 16 Nov 2023 21:52:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1506 (0x5e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Validity
Not Before: Nov 16 21:50:45 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=65568eb5-5c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:af:d9:6b:5c:d4:09:60:6c:8d:36:08:d2:
66:99:a9:a7:17:3f:26:97:b4:ed:a3:ce:d2:c0:6c:
fc:79:a7:9f:52:f3:6a:61:70:35:5e:6e:4d:07:49:
04:1e:9d:7a:68:76:5e:53:00:90:64:08:89:f8:77:
fe:64:72:c2:ee:b9:2d:27:b0:dc:2f:84:6c:ba:0f:
ec:52:27:12:17:d6:5c:59:77:8c:be:33:33:0b:c1:
b6:03:e9:d6:40:1f:0c:9f:4d:db:a7:d3:20:fa:d3:
4f:a4:ef:dc:eb:1e:da:fc:6b:20:8f:03:3b:9b:c2:
76:29:57:cb:91:3d:9e:44:38:c9:82:c5:b5:f2:95:
95:e1:d4:f6:ba:30:ed:de:6b:92:d0:88:41:6d:25:
95:c5:40:e7:a0:f4:17:cb:eb:60:8f:df:ef:b5:be:
c3:5e:40:84:b8:13:51:2e:a7:0e:25:9a:ce:f3:43:
02:1e:dc:51:26:75:55:e7:1d:a5:a4:48:6c:34:48:
c6:f2:88:78:ab:fe:62:d1:05:d4:97:bc:97:9f:9e:
94:1c:73:cf:25:c1:6a:3b:b6:e1:cc:1c:be:8f:16:
8c:63:66:af:44:55:10:53:cf:17:22:5a:98:3f:9f:
2b:f4:a0:d7:7c:32:14:ee:7d:45:14:94:37:6e:a4:
9b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1A:A7:FF:29:4B:64:28:46:C0:32:28:41:FE:11:AF:01:B3:F8:F5
X509v3 Authority Key Identifier:
keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/32046E1C84CA11EEAA8FF079C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
60.234.0.0/16
101.98.0.0/16
101.100.128.0/19
103.237.40.0/22
110.44.16.0/22
119.224.0.0-119.224.95.255
119.224.128.0/20
121.98.0.0/15
124.197.0.0/18
202.49.244.0/22
202.50.170.0/24
202.53.176.0/20
202.89.128.0/19
202.150.96.0/19
202.180.64.0/18
202.189.160.0/20
202.191.32.0/20
203.184.0.0/18
IPv6:
2400:4800::/32
2402:6000::/32
2402:8200::/32
2404:4400::/28
Signature Algorithm: sha256WithRSAEncryption
23:a2:86:01:60:68:ac:25:b5:0c:0c:13:49:ce:3c:aa:cd:e6:
7f:b3:9c:a0:18:d1:b7:20:92:df:92:ad:22:8c:84:c2:d1:41:
64:2f:9f:51:96:42:f3:65:26:20:2f:67:68:83:54:ca:2a:03:
1e:a0:c4:7c:b2:4f:3c:55:af:76:5a:38:8a:ca:7c:bf:84:74:
4e:75:9f:17:8b:09:07:5f:5e:4d:98:3c:72:e0:cd:35:88:35:
fb:7e:fe:6f:d5:f9:3f:97:94:66:63:8a:22:b2:dc:92:d3:5d:
ad:8b:35:67:de:0f:33:df:f1:f8:92:9f:84:ca:98:14:5d:93:
c6:cf:3f:32:f8:09:fd:43:7e:e9:94:f9:6f:2f:28:90:e9:4c:
ea:1f:d5:75:bc:68:c9:0a:84:21:f7:b7:2e:db:eb:bc:89:b9:
f3:3d:e7:0e:51:29:76:a5:74:74:2b:0a:52:31:cc:18:2c:b5:
07:12:0f:21:f3:63:b8:22:61:97:f9:e6:90:97:86:ba:44:87:
e5:25:2a:e8:58:14:4a:ef:5d:8d:85:44:aa:a2:db:bd:b9:ca:
05:93:d0:49:b6:70:32:bb:80:ef:2d:47:ba:54:17:8e:fc:1c:
94:06:a3:14:9e:07:bb:e7:fb:38:e8:35:99:58:06:f4:09:2b:
85:04:14:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:03 2024 by rpki-client on console-fra.rpki-client.org