Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/9E3ACBB2135911EFB5059C55C4F9AE02.roa
File: 9E3ACBB2135911EFB5059C55C4F9AE02.roa (raw, json)
Hash identifier: SBb1xhGsqh1fc1gI8TTzf+R/jMlyUykVfBrk+tdCZh8=
Subject key identifier: F4:F1:A3:50:35:5C:42:97:F1:29:82:A6:3F:AE:24:0A:D3:C4:02:30
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 1DA6
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/9E3ACBB2135911EFB5059C55C4F9AE02.roa
Signing time: Thu 16 May 2024 07:56:06 +0000
ROA not before: Thu 16 May 2024 07:56:06 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 58777
IP address blocks: 202.67.0.0/22 maxlen: 24
202.73.128.0/22 maxlen: 24
202.191.72.0/21 maxlen: 24
203.33.67.0/24 maxlen: 24
203.33.68.0/24 maxlen: 24
203.33.73.0/24 maxlen: 24
203.33.79.0/24 maxlen: 24
203.33.100.0/24 maxlen: 24
203.33.122.0/24 maxlen: 24
203.33.129.0/24 maxlen: 24
203.33.131.0/24 maxlen: 24
240e:108:4040::/48 maxlen: 48
240e:108:4047::/48 maxlen: 48
240e:108:4060::/48 maxlen: 48
240e:108:4360::/48 maxlen: 48
240e:108:4820::/48 maxlen: 48
240e:108:4840::/48 maxlen: 48
240e:108:4847::/48 maxlen: 48
240e:108:4860::/48 maxlen: 48
240e:108:4b60::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 May 2024 10:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7590 (0x1da6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: May 16 07:56:06 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=6645bc15-4345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dc:2c:d2:7f:1a:37:c6:f1:b7:0d:83:ed:74:
7a:07:8d:7b:c7:74:b5:a2:0c:8c:d8:1e:ef:0d:cb:
2f:73:2a:ad:17:a9:6e:fa:51:95:18:c2:fb:6c:33:
67:17:f6:2e:b7:89:29:e0:aa:b8:31:79:7c:e0:8c:
c2:1a:c2:74:80:bb:6d:0e:3b:18:c4:00:7f:7e:00:
37:c2:75:b6:f5:b5:7c:9b:05:a8:52:0e:e0:f9:50:
d0:e0:b6:4d:12:a9:ba:08:3c:c4:54:b6:db:0d:f7:
ce:0f:d2:93:3f:d4:e7:25:f5:06:90:bf:51:c0:2e:
8e:ac:ca:4b:4c:71:58:f5:dd:ed:18:2a:9c:72:f6:
39:05:d3:04:82:a4:55:e9:09:ba:4e:e3:e5:72:cd:
0a:ad:c9:61:71:12:47:8f:5a:1b:9d:6f:1f:db:4b:
f5:4a:cb:b7:50:a1:9a:bc:fd:ac:76:24:41:35:a1:
95:fe:36:fd:b9:fb:22:a1:f4:97:87:36:3b:51:3f:
dc:89:bc:94:f1:19:25:00:55:9d:d1:11:89:38:16:
10:e3:32:5c:85:f3:10:05:d3:85:5f:98:dc:b7:5a:
cd:4a:a7:10:62:e4:34:03:84:88:79:2e:78:7f:cd:
17:e0:69:0d:d4:87:29:38:f0:5b:51:86:8d:b2:6f:
0b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F1:A3:50:35:5C:42:97:F1:29:82:A6:3F:AE:24:0A:D3:C4:02:30
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/9E3ACBB2135911EFB5059C55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.67.0.0/22
202.73.128.0/22
202.191.72.0/21
203.33.67.0-203.33.68.255
203.33.73.0/24
203.33.79.0/24
203.33.100.0/24
203.33.122.0/24
203.33.129.0/24
203.33.131.0/24
IPv6:
240e:108:4040::/48
240e:108:4047::/48
240e:108:4060::/48
240e:108:4360::/48
240e:108:4820::/48
240e:108:4840::/48
240e:108:4847::/48
240e:108:4860::/48
240e:108:4b60::/48
Signature Algorithm: sha256WithRSAEncryption
70:b2:93:a0:28:a4:4c:d5:7d:61:d5:bb:c7:7a:e2:d8:49:7b:
11:3b:1e:27:7c:85:ad:6b:a5:82:d6:d8:04:13:91:d8:1c:c4:
66:e3:a3:98:1f:01:a0:03:eb:34:51:db:6d:d4:c1:db:43:80:
fc:f3:b8:10:ca:37:c0:35:4a:2d:00:f7:6d:96:8d:66:9a:1b:
f3:e7:67:40:9f:00:d8:50:fb:b8:94:73:0d:39:21:55:0c:82:
c0:52:83:7d:4b:34:a7:1c:1f:33:17:38:20:7b:96:0e:f4:5e:
a2:03:99:8f:56:e1:79:7e:37:8d:4c:f2:9c:c5:1f:e3:ea:15:
42:ee:4d:7c:de:84:78:ea:30:e5:bf:5f:b2:cb:40:8a:54:3a:
85:68:48:66:36:f4:bb:30:a4:c3:8c:d5:ea:70:cb:74:c7:c2:
a6:fe:86:c5:88:6d:4d:c0:5a:3a:68:3d:39:56:dd:fa:40:de:
01:e6:80:87:3f:bc:d4:36:50:24:3a:8f:08:4a:6e:54:ae:2d:
df:bb:79:d1:05:c0:bb:6e:69:3b:6b:3e:23:f6:cc:80:40:91:
17:a2:2d:13:69:fb:c8:38:e2:cb:23:6f:14:31:fb:b8:6b:11:
c8:fb:e1:44:2f:0d:6b:f0:0b:a3:83:77:5d:75:6f:cd:98:08:
3c:5d:6e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:06 2024 by rpki-client on console-fra.rpki-client.org