Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/6431FC1A84CA11EEBCDD787AC4F9AE02.roa
File: 6431FC1A84CA11EEBCDD787AC4F9AE02.roa (raw, json)
Hash identifier: QekZkOBJOmV+HmYsOiQ53+fvuP+7Du0vZ+AJjK2ydyU=
Subject key identifier: 20:1D:B2:46:01:7F:8C:E6:59:61:10:6D:72:E0:A7:F8:7D:D1:43:AB
Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial: 05F8
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/6431FC1A84CA11EEBCDD787AC4F9AE02.roa
Signing time: Wed 13 Dec 2023 04:37:17 +0000
ROA not before: Wed 13 Dec 2023 04:37:17 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 9790
IP address blocks: 60.234.0.0/16 maxlen: 20
101.98.0.0/16 maxlen: 20
101.100.128.0/19 maxlen: 24
103.224.128.0/24 maxlen: 24
103.224.129.0/24 maxlen: 24
103.237.40.0/22 maxlen: 24
110.44.16.0/22 maxlen: 24
119.224.0.0/18 maxlen: 22
119.224.64.0/19 maxlen: 22
119.224.128.0/20 maxlen: 20
121.98.0.0/15 maxlen: 20
124.197.0.0/18 maxlen: 22
202.49.244.0/22 maxlen: 24
202.50.170.0/24 maxlen: 24
202.53.176.0/20 maxlen: 20
202.89.128.0/19 maxlen: 20
202.150.96.0/20 maxlen: 22
202.150.112.0/20 maxlen: 20
202.180.64.0/18 maxlen: 20
202.189.160.0/20 maxlen: 20
202.191.32.0/20 maxlen: 20
203.184.0.0/18 maxlen: 20
2400:4800::/32 maxlen: 32
2402:6000::/32 maxlen: 32
2402:8200::/32 maxlen: 32
2404:4400::/28 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1528 (0x5f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Validity
Not Before: Dec 13 04:37:17 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=657934fd-99c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:eb:f6:40:c9:e7:2b:12:1c:cc:f1:e1:cc:86:
f6:6e:72:e3:08:33:94:b5:0f:94:93:18:d1:6c:18:
aa:33:a9:b6:51:4d:de:3f:34:bb:93:f5:23:3b:d2:
0a:e8:48:9a:8e:6e:ad:b0:5a:24:f5:ac:6e:bb:64:
fd:c3:2c:e3:20:c7:86:d3:f0:e7:bf:bd:ce:20:22:
f3:f3:6f:ca:ec:1d:56:5f:09:49:d9:b5:26:97:25:
3a:b4:4f:5e:39:89:59:2b:9f:c0:ae:41:1d:59:10:
4c:77:47:8a:90:af:3a:45:3e:a7:a1:c0:42:ca:f5:
3c:93:5c:d4:4d:4c:ff:b5:41:3c:f4:fa:8b:72:5d:
c0:43:df:4a:ae:ba:8d:b4:c6:ba:8e:3a:cb:0a:a0:
03:d7:c8:f9:2c:91:07:f6:a7:06:d8:72:65:29:2d:
15:e9:96:5b:2f:34:de:de:59:0e:6e:6f:8a:86:31:
a2:ea:4e:f4:71:2b:94:57:4c:08:11:33:45:f0:a8:
2b:b1:ca:b9:4a:86:eb:3c:d4:78:84:50:0f:08:47:
12:05:7c:c9:cb:e6:3f:00:9e:17:be:b8:87:c8:b2:
39:52:5d:1e:44:d8:ab:b0:ef:28:6b:8b:ef:61:eb:
9f:d4:1f:28:ed:f0:08:1b:61:ba:54:dc:90:db:a7:
b5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1D:B2:46:01:7F:8C:E6:59:61:10:6D:72:E0:A7:F8:7D:D1:43:AB
X509v3 Authority Key Identifier:
keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/6431FC1A84CA11EEBCDD787AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
60.234.0.0/16
101.98.0.0/16
101.100.128.0/19
103.224.128.0/23
103.237.40.0/22
110.44.16.0/22
119.224.0.0-119.224.95.255
119.224.128.0/20
121.98.0.0/15
124.197.0.0/18
202.49.244.0/22
202.50.170.0/24
202.53.176.0/20
202.89.128.0/19
202.150.96.0/19
202.180.64.0/18
202.189.160.0/20
202.191.32.0/20
203.184.0.0/18
IPv6:
2400:4800::/32
2402:6000::/32
2402:8200::/32
2404:4400::/28
Signature Algorithm: sha256WithRSAEncryption
ac:3f:c2:23:b0:7d:4d:05:dc:e6:4f:25:3c:1c:97:d7:36:ec:
3e:8f:1a:d3:60:e8:35:7a:31:24:86:0e:34:d6:2e:b1:03:b3:
1a:50:cb:00:2b:44:44:af:5f:9c:38:b6:f9:7e:ba:93:38:d2:
6e:59:f2:f5:b0:01:17:c2:e6:0d:b0:0e:38:48:ae:ca:6c:ae:
09:8d:41:3e:7d:48:e9:05:0d:63:14:ec:d1:73:ad:89:84:87:
84:2e:83:35:12:d0:c1:c4:09:43:3f:3e:1c:89:87:06:5c:4c:
ad:70:54:fa:1f:58:85:4c:26:c7:a0:14:48:79:14:32:58:d4:
9d:23:23:a0:e2:e1:1d:7e:2f:dd:07:d3:35:9a:d6:61:e9:f5:
14:11:72:f9:42:1e:28:a3:2d:4e:90:47:04:93:4f:57:53:6e:
e5:11:6c:ef:9c:24:92:b4:76:50:a2:0a:95:b3:0e:2e:81:6e:
57:b6:30:44:b6:5c:a5:ad:ef:96:64:39:2c:53:e7:e7:27:e5:
89:95:0a:76:cd:fd:1e:8c:bd:1f:3c:e4:c3:20:7f:31:96:dd:
b9:e2:29:10:58:fe:51:e2:bb:a8:d7:74:fb:ac:d2:da:7e:2d:
a5:7f:40:75:62:b8:ec:48:28:f7:31:cf:76:55:10:72:ca:dd:
37:3b:81:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 13 08:24:01 2023 by rpki-client on console-fra.rpki-client.org