Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/F6A66C9A04D011E994985639C4F9AE02.roa
File: F6A66C9A04D011E994985639C4F9AE02.roa (raw, json)
Hash identifier: hmnefh6ZfHr3dUqHmXeqkFI0qGAHIKpAiqlkYklrwC8=
Subject key identifier: 88:49:26:4F:71:0F:23:CF:85:80:62:66:D1:1F:3D:98:8D:AD:78:56
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 1B29
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/F6A66C9A04D011E994985639C4F9AE02.roa
Signing time: Fri 26 Aug 2022 05:13:45 +0000
ROA not before: Fri 26 Aug 2022 05:13:45 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 38283
IP address blocks: 125.64.0.0/24 maxlen: 24
125.64.1.0/24 maxlen: 24
125.64.2.0/24 maxlen: 24
125.64.3.0/24 maxlen: 24
125.64.4.0/24 maxlen: 24
125.64.5.0/24 maxlen: 24
125.64.6.0/24 maxlen: 24
125.64.8.0/24 maxlen: 24
125.64.9.0/24 maxlen: 24
125.64.10.0/24 maxlen: 24
125.64.11.0/24 maxlen: 24
125.64.12.0/24 maxlen: 24
125.64.13.0/24 maxlen: 24
125.64.14.0/24 maxlen: 24
125.64.15.0/24 maxlen: 24
125.64.16.0/24 maxlen: 24
125.64.17.0/24 maxlen: 24
125.64.18.0/24 maxlen: 24
125.64.19.0/24 maxlen: 24
125.64.20.0/24 maxlen: 24
125.64.21.0/24 maxlen: 24
125.64.23.0/24 maxlen: 24
125.64.24.0/24 maxlen: 24
125.64.25.0/24 maxlen: 24
125.64.26.0/24 maxlen: 24
125.64.27.0/24 maxlen: 24
125.64.28.0/24 maxlen: 24
125.64.29.0/24 maxlen: 24
125.64.30.0/23 maxlen: 23
125.64.32.0/21 maxlen: 21
125.64.40.0/24 maxlen: 24
125.64.41.0/24 maxlen: 24
125.64.43.0/24 maxlen: 24
125.64.92.0/24 maxlen: 24
125.64.93.0/24 maxlen: 24
125.64.94.0/24 maxlen: 24
125.64.95.0/24 maxlen: 24
125.64.96.0/24 maxlen: 24
125.64.97.0/24 maxlen: 24
125.64.98.0/24 maxlen: 24
125.64.99.0/24 maxlen: 24
125.64.100.0/24 maxlen: 24
125.64.101.0/24 maxlen: 24
125.64.102.0/24 maxlen: 24
125.64.103.0/24 maxlen: 24
125.64.104.0/21 maxlen: 21
125.64.128.0/20 maxlen: 20
125.64.144.0/22 maxlen: 22
125.65.46.0/24 maxlen: 24
125.65.114.0/24 maxlen: 24
125.65.134.0/24 maxlen: 24
125.65.135.0/24 maxlen: 24
125.65.153.0/24 maxlen: 24
125.65.154.0/24 maxlen: 24
125.65.216.0/22 maxlen: 22
125.65.245.0/24 maxlen: 24
125.65.247.0/24 maxlen: 24
125.67.234.0/24 maxlen: 24
125.67.235.0/24 maxlen: 24
202.98.123.0/24 maxlen: 24
218.6.168.0/24 maxlen: 24
218.6.169.0/24 maxlen: 24
218.6.170.0/24 maxlen: 24
218.6.171.0/24 maxlen: 24
218.6.172.0/24 maxlen: 24
218.6.173.0/24 maxlen: 24
218.6.174.0/24 maxlen: 24
218.6.175.0/24 maxlen: 24
218.6.196.0/24 maxlen: 24
218.6.197.0/24 maxlen: 24
218.6.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6953 (0x1b29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: Aug 26 05:13:45 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63085689-305b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:df:76:37:c0:5c:ed:3d:9d:a5:69:87:5d:
9c:ad:2b:6a:24:86:19:a4:2d:2d:a3:0a:9c:d2:c6:
ec:b8:2d:a6:b4:96:19:18:bb:c5:25:e8:d1:83:33:
11:11:d7:f8:cd:74:12:35:70:e8:c1:54:3c:75:50:
19:cf:7a:04:84:cb:38:a6:14:14:2e:23:19:23:19:
47:15:2a:98:0d:61:e9:cc:f7:ab:09:42:5e:95:e3:
02:ce:fb:fd:54:ad:f8:a4:a9:7b:5d:8c:79:5f:7a:
92:12:2b:75:70:7a:b2:9b:a7:82:d5:61:1d:c2:05:
25:a9:01:c2:cc:42:2a:48:6b:ff:92:f2:ff:41:f6:
b6:02:b1:24:bf:7a:cb:6d:33:22:88:cf:f2:96:1b:
4a:ed:f9:c9:e6:a1:5b:56:7a:e7:94:5c:bf:21:c8:
3e:70:4f:ca:b4:99:12:f1:89:d9:e9:60:a3:ec:15:
0a:1a:b6:e4:71:86:b4:95:17:e8:8f:d6:01:3b:51:
0f:d4:86:9e:55:5f:28:d1:33:8f:1f:5c:0d:66:c3:
5e:71:61:20:7f:fa:60:96:51:1e:2b:21:6b:3a:22:
59:9f:c6:61:e6:8b:38:64:aa:5b:55:1d:50:24:7c:
72:7b:0b:16:ce:45:49:76:69:a7:98:42:32:3e:91:
75:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:49:26:4F:71:0F:23:CF:85:80:62:66:D1:1F:3D:98:8D:AD:78:56
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/F6A66C9A04D011E994985639C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.64.0.0-125.64.6.255
125.64.8.0-125.64.21.255
125.64.23.0-125.64.41.255
125.64.43.0/24
125.64.92.0-125.64.111.255
125.64.128.0-125.64.147.255
125.65.46.0/24
125.65.114.0/24
125.65.134.0/23
125.65.153.0-125.65.154.255
125.65.216.0/22
125.65.245.0/24
125.65.247.0/24
125.67.234.0/23
202.98.123.0/24
218.6.168.0/21
218.6.196.0-218.6.198.255
Signature Algorithm: sha256WithRSAEncryption
ae:a1:91:3d:17:9b:9e:60:50:26:7c:ec:a1:3f:6b:d4:d4:da:
b6:22:65:86:6e:1e:87:dd:87:9f:a5:41:cd:a0:7c:39:1a:25:
61:f7:a7:98:68:79:9f:85:7a:42:14:29:da:24:b8:b1:4d:8d:
d5:a1:eb:fd:da:a7:80:64:a3:4d:17:80:34:f8:61:27:3b:a0:
65:f3:34:97:15:db:a2:7a:f4:96:1b:3b:82:a1:9b:6a:10:74:
5a:01:e8:6e:25:3e:32:c5:e3:60:9c:33:9f:ec:dc:20:3d:e2:
db:ce:f5:98:66:07:50:f7:d3:96:09:20:16:da:48:25:21:bf:
76:be:d1:3e:6c:1f:a8:c0:bb:f4:5c:5b:44:fb:71:0f:03:f6:
b6:9d:c6:a8:bb:cc:42:90:45:fa:ba:5f:be:49:b1:89:4f:06:
aa:3a:44:84:c2:97:f2:06:bc:99:62:34:7a:db:4a:5a:3a:df:
53:6f:0f:2d:4d:05:c0:e4:9d:0b:81:a9:87:61:60:ce:62:cf:
7f:72:8e:4c:1b:d5:f8:64:68:4e:0b:46:16:38:25:71:df:5e:
5a:0e:35:e8:ea:2c:9f:38:5b:d4:e3:84:83:45:51:16:29:93:
3d:28:b5:b8:8d:8b:e0:9e:0a:c3:54:b0:ad:86:95:6a:f3:b6:
94:8c:08:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:39 2023 by rpki-client on console-ams.rpki-client.org