Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/6C07477046DA11EEA0BD1067C4F9AE02.roa
File: 6C07477046DA11EEA0BD1067C4F9AE02.roa (raw, json)
Hash identifier: /5UUA0kurMc3DQgDG81oxgzeqR0FPlyeMiCDFoY1SwI=
Subject key identifier: 09:78:C4:2E:60:07:E8:79:16:FD:BE:D2:50:DD:C9:3D:9A:09:E5:01
Certificate issuer: /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
Certificate serial: 1576
Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/6C07477046DA11EEA0BD1067C4F9AE02.roa
Signing time: Fri 01 Sep 2023 08:53:36 +0000
ROA not before: Fri 01 Sep 2023 08:53:36 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 55821
IP address blocks: 146.88.64.0/20 maxlen: 20
146.88.64.0/22 maxlen: 22
146.88.64.0/24 maxlen: 24
146.88.65.0/24 maxlen: 24
146.88.66.0/24 maxlen: 24
146.88.67.0/24 maxlen: 24
146.88.68.0/22 maxlen: 22
146.88.68.0/24 maxlen: 24
146.88.69.0/24 maxlen: 24
146.88.70.0/24 maxlen: 24
146.88.71.0/24 maxlen: 24
146.88.72.0/22 maxlen: 22
146.88.72.0/24 maxlen: 24
146.88.73.0/24 maxlen: 24
146.88.74.0/24 maxlen: 24
146.88.75.0/24 maxlen: 24
146.88.76.0/22 maxlen: 22
146.88.76.0/24 maxlen: 24
146.88.77.0/24 maxlen: 24
146.88.78.0/24 maxlen: 24
146.88.79.0/24 maxlen: 24
155.137.64.0/18 maxlen: 22
155.137.94.0/23 maxlen: 23
155.137.104.0/24 maxlen: 24
155.137.105.0/24 maxlen: 24
155.137.106.0/24 maxlen: 24
155.137.107.0/24 maxlen: 24
155.137.108.0/22 maxlen: 23
155.137.115.0/24 maxlen: 24
209.141.0.0/20 maxlen: 20
209.141.0.0/22 maxlen: 22
209.141.4.0/23 maxlen: 23
209.141.5.0/24 maxlen: 24
209.141.6.0/23 maxlen: 23
209.141.8.0/23 maxlen: 23
209.141.10.0/23 maxlen: 24
209.141.12.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5494 (0x1576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
Validity
Not Before: Sep 1 08:53:36 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=64f1a690-f96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:57:a0:93:ab:5c:43:94:53:40:3d:56:8f:a2:
06:46:11:46:e3:1d:1f:1b:42:5a:c1:25:27:0d:71:
b2:fd:32:57:c8:00:3e:77:10:dc:57:69:be:9d:e7:
e5:3d:41:e6:03:cd:23:a1:e9:a4:6c:cc:bc:1d:79:
c4:e6:e2:68:f6:db:30:f4:c6:ee:97:f7:22:28:00:
56:de:eb:81:bc:73:9d:a4:db:11:d7:34:50:de:9a:
c7:4c:18:eb:65:c7:35:b3:86:92:df:2b:5f:ef:a3:
81:57:bd:40:be:57:6c:fc:36:d0:30:33:f9:0b:8d:
d0:5a:7d:81:2b:0a:7a:ac:b5:ae:de:2d:f1:c8:20:
1a:36:6f:4d:ee:7a:6d:c1:16:6d:cb:42:da:d0:e2:
ba:dc:aa:5b:13:cc:05:6b:21:47:cc:75:8c:cd:56:
53:1e:56:12:7a:19:b2:ad:b4:09:bd:cd:32:ad:47:
97:f0:6a:6f:1d:be:ce:9b:1c:67:bd:ec:fb:ec:4a:
bf:5f:14:c5:b1:56:c9:b5:4d:2e:d5:c9:80:eb:72:
d4:f6:49:a2:35:76:99:ad:7f:e4:f8:7c:2a:25:79:
aa:7f:b8:8c:a2:2d:0e:33:39:7d:5e:42:af:01:36:
1f:f9:26:85:2a:ef:86:82:3a:12:49:02:40:6d:7c:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:78:C4:2E:60:07:E8:79:16:FD:BE:D2:50:DD:C9:3D:9A:09:E5:01
X509v3 Authority Key Identifier:
keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/6C07477046DA11EEA0BD1067C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.88.64.0/20
155.137.64.0/18
209.141.0.0/20
Signature Algorithm: sha256WithRSAEncryption
a8:f8:54:ec:4d:d6:5a:8d:6c:57:8a:c8:73:8a:fe:f3:05:0b:
98:4d:2f:51:6e:7b:fc:50:36:8d:ed:2e:ac:9f:04:72:01:1c:
e3:b4:77:f5:1f:2f:84:84:55:e5:a6:d1:a8:6f:4e:49:7c:3f:
78:57:ed:e8:03:b2:da:53:bb:e7:41:6b:c6:9e:9a:35:16:a8:
f4:7f:51:49:eb:5c:09:86:49:20:d0:c5:eb:ed:64:d0:9c:af:
ad:db:c8:17:8d:94:17:af:38:9c:f9:50:50:0b:b0:3a:58:26:
20:9a:24:25:3e:df:38:27:bc:8f:97:89:f8:76:df:74:ec:ae:
52:a3:28:b1:90:67:f6:91:b9:48:26:c5:f2:d7:db:76:31:84:
51:fa:c6:a7:0d:dd:fa:b6:23:e8:89:74:33:de:58:ab:6e:e7:
b7:87:96:bf:1a:99:36:f3:c8:60:78:3c:9e:69:f5:97:22:cc:
de:c1:23:a9:90:45:fc:4e:c6:aa:e6:44:67:dc:0e:be:54:fa:
2e:70:7c:ab:39:de:d1:f1:77:d6:05:9c:bd:33:ce:aa:ca:5c:
bb:3d:b2:e0:1f:ca:06:be:d2:e5:c9:1a:02:74:d5:37:db:8c:
dc:76:f1:31:af:67:dd:36:2c:33:8a:23:0f:ec:8d:28:5b:0c:
c2:aa:27:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 09:41:54 2023 by rpki-client on console-fra.rpki-client.org