Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B466E02C05FB11EE9D130335C4F9AE02.roa
File: B466E02C05FB11EE9D130335C4F9AE02.roa (raw, json)
Hash identifier: ZVlQBKW82VlSPXgclZtvY550Omp4DH9NEx0Am4ZAOis=
Subject key identifier: 0C:D3:A8:3B:CE:33:1C:90:AA:0D:98:42:0E:88:49:CA:A7:1C:0A:80
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 1C56
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B466E02C05FB11EE9D130335C4F9AE02.roa
Signing time: Thu 08 Jun 2023 12:55:12 +0000
ROA not before: Thu 08 Jun 2023 12:55:12 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 58466
IP address blocks: 121.14.0.0/19 maxlen: 19
121.14.32.0/22 maxlen: 22
121.14.36.0/22 maxlen: 22
121.14.40.0/21 maxlen: 21
121.14.48.0/20 maxlen: 20
121.14.64.0/21 maxlen: 21
121.14.192.0/20 maxlen: 20
125.88.31.0/24 maxlen: 24
125.88.64.0/23 maxlen: 23
125.88.168.0/21 maxlen: 21
125.88.192.0/18 maxlen: 21
125.94.32.0/19 maxlen: 19
125.94.212.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7254 (0x1c56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: Jun 8 12:55:12 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6481cfaf-04f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:6e:49:06:05:c6:28:a7:00:f1:59:fc:ca:
6e:0f:aa:b2:e0:22:c7:11:e5:3a:62:72:72:e0:55:
d4:2c:e9:d3:7f:8f:90:ea:7a:13:05:89:56:4b:27:
61:83:46:08:c5:f9:c2:8f:69:19:80:6a:0b:ec:d7:
96:4d:40:24:3b:25:1f:35:75:81:95:8e:0e:37:dd:
d8:84:9e:b7:4a:ff:10:08:46:e0:31:40:33:0c:7a:
83:b4:2c:51:0c:f8:5e:54:83:e3:09:29:73:ba:da:
cd:8b:b6:e7:0a:6f:28:5a:16:1c:e5:43:c2:04:a9:
2e:0f:1a:ea:01:f9:07:83:b7:a8:2c:01:37:17:e3:
2e:c8:5e:28:6a:24:a4:56:64:db:c0:3a:59:1b:35:
e5:57:a8:ff:d8:0d:01:e7:2e:71:d1:1c:79:7c:d4:
8e:c9:f4:6a:96:0b:85:51:f0:cc:19:93:67:3f:29:
af:0f:84:11:fe:d4:99:f2:ac:51:87:88:e5:fc:05:
f3:6a:62:b6:0b:e3:08:fc:f1:33:21:f1:44:ea:75:
3f:bb:6d:2e:f4:7d:ae:d9:6e:f7:cc:18:d8:1d:1e:
46:b2:47:06:2d:97:cb:bc:a0:a7:01:52:13:19:41:
9d:63:1b:2a:73:38:94:4d:b4:62:5d:f8:96:73:f8:
e2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D3:A8:3B:CE:33:1C:90:AA:0D:98:42:0E:88:49:CA:A7:1C:0A:80
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B466E02C05FB11EE9D130335C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.14.0.0-121.14.71.255
121.14.192.0/20
125.88.31.0/24
125.88.64.0/23
125.88.168.0/21
125.88.192.0/18
125.94.32.0/19
125.94.212.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:11:74:e4:f7:e2:b6:9a:66:c1:76:e7:ad:45:06:73:28:2b:
90:1e:f0:0e:2e:33:b4:c2:75:98:fb:bd:2d:18:2c:b4:4c:4a:
38:3a:ba:64:b7:45:a1:b8:8f:50:9c:64:f5:ea:bb:cb:a3:90:
a0:35:64:8f:b7:2c:e3:84:aa:2f:cd:94:6b:37:41:b0:84:c0:
d7:61:c1:3d:1e:0d:97:c7:eb:11:a0:e4:71:c3:fe:b3:06:5b:
14:f0:76:0f:84:05:8c:b2:ef:ea:9d:ec:26:14:28:27:fe:89:
de:60:80:28:90:06:bc:8d:d4:6a:4d:14:47:29:45:98:9d:e3:
e4:b1:ec:1c:e5:7d:52:c7:ee:3c:e3:f7:c3:aa:bd:ac:41:83:
80:56:9d:55:b8:84:6d:14:74:4f:2c:f0:a0:5d:31:cb:ef:ae:
fd:c5:ea:5a:5c:67:3b:67:8d:10:22:0c:eb:d0:38:51:f2:7f:
ba:f0:97:eb:8a:13:59:32:83:52:f3:0a:fb:0b:c8:00:bc:f4:
b0:12:b5:01:a1:4a:af:85:60:7b:bd:47:f3:01:96:7c:ca:da:
d4:f8:91:08:8f:52:9e:14:8e:ac:e4:00:dc:34:45:bd:db:47:
39:60:10:5a:49:4c:5b:ad:20:cc:8e:7a:38:76:a5:ad:40:8c:
0f:c6:42:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:39 2023 by rpki-client on console-ams.rpki-client.org