Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/5C9776CA040A11EDBA11313DC4F9AE02.roa
File: 5C9776CA040A11EDBA11313DC4F9AE02.roa (raw, json)
Hash identifier: NizdLcb89SlfyQnCv7dgfoBbD/ATN7oBNJYf1I9A99E=
Subject key identifier: A5:C6:8D:AD:75:25:DE:20:71:69:C6:45:20:CB:02:36:F7:28:2F:40
Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial: 0591
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/5C9776CA040A11EDBA11313DC4F9AE02.roa
Signing time: Tue 26 Jul 2022 09:10:12 +0000
ROA not before: Tue 26 Jul 2022 09:10:12 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 132203
IP address blocks: 43.128.222.0/23 maxlen: 23
43.130.63.0/24 maxlen: 24
43.135.58.0/24 maxlen: 24
43.152.96.0/19 maxlen: 24
43.152.192.0/19 maxlen: 19
43.152.224.0/19 maxlen: 19
43.153.0.0/18 maxlen: 18
43.153.64.0/18 maxlen: 18
43.153.128.0/18 maxlen: 18
43.153.164.0/24 maxlen: 24
43.153.192.0/18 maxlen: 18
43.154.0.0/18 maxlen: 18
43.154.64.0/18 maxlen: 18
43.154.128.0/18 maxlen: 18
43.154.192.0/18 maxlen: 18
43.155.0.0/17 maxlen: 18
43.155.127.0/24 maxlen: 24
43.155.128.0/17 maxlen: 18
43.156.0.0/18 maxlen: 18
43.156.64.0/18 maxlen: 18
43.156.128.0/18 maxlen: 18
43.156.192.0/18 maxlen: 18
43.156.252.0/24 maxlen: 24
43.157.0.0/17 maxlen: 24
43.157.128.0/18 maxlen: 24
43.157.192.0/18 maxlen: 24
43.158.0.0/16 maxlen: 16
43.158.0.0/17 maxlen: 24
43.158.128.0/18 maxlen: 24
43.158.192.0/18 maxlen: 24
43.159.0.0/16 maxlen: 16
43.159.0.0/20 maxlen: 24
43.159.16.0/20 maxlen: 24
43.159.32.0/19 maxlen: 24
43.159.76.0/24 maxlen: 24
43.159.128.0/18 maxlen: 24
43.159.192.0/18 maxlen: 24
43.160.0.0/16 maxlen: 24
43.161.0.0/17 maxlen: 24
43.161.128.0/17 maxlen: 24
43.162.0.0/17 maxlen: 24
43.162.128.0/17 maxlen: 24
43.163.0.0/16 maxlen: 16
43.164.0.0/16 maxlen: 24
43.165.0.0/16 maxlen: 24
43.166.0.0/16 maxlen: 24
43.167.0.0/16 maxlen: 24
43.168.0.0/16 maxlen: 24
43.169.0.0/16 maxlen: 24
43.170.0.0/16 maxlen: 24
43.171.0.0/16 maxlen: 24
43.172.0.0/16 maxlen: 24
43.173.0.0/16 maxlen: 24
43.174.0.0/16 maxlen: 24
101.32.140.0/24 maxlen: 24
101.33.114.0/23 maxlen: 24
240d:c000::/24 maxlen: 32
240d:c000:1000::/36 maxlen: 36
240d:c000:2000::/36 maxlen: 36
240d:c000:3000::/36 maxlen: 36
240d:c010::/56 maxlen: 56
240d:c010:0:100::/56 maxlen: 56
240d:c010:10::/48 maxlen: 48
240d:c010:11::/48 maxlen: 48
240d:c010:12::/48 maxlen: 48
240d:c010:13::/48 maxlen: 48
240d:c010:14::/48 maxlen: 48
240d:c010:15::/48 maxlen: 48
240d:c010:16::/48 maxlen: 48
240d:c010:17::/48 maxlen: 48
240d:c010:1d::/48 maxlen: 48
240d:c010:1f::/48 maxlen: 48
240d:c010:20::/44 maxlen: 44
240d:c010:20::/56 maxlen: 56
240d:c010:20:100::/56 maxlen: 56
240d:c010:20:200::/56 maxlen: 56
240d:c010:30::/48 maxlen: 48
240d:c010:30::/56 maxlen: 56
240d:c010:30:100::/56 maxlen: 56
240d:c010:31::/48 maxlen: 48
240d:c010:50::/48 maxlen: 48
240d:c010:57::/48 maxlen: 48
240d:c010:58::/47 maxlen: 48
240d:c010:5b::/48 maxlen: 48
240d:c010:5c::/46 maxlen: 48
240d:c010:60::/48 maxlen: 48
240d:c010:66::/47 maxlen: 48
240d:c010:68::/48 maxlen: 48
240d:c010:6a::/48 maxlen: 48
240d:c010:6c::/47 maxlen: 48
240d:c010:6e::/48 maxlen: 48
240d:c040::/44 maxlen: 44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1425 (0x591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Validity
Not Before: Jul 26 09:10:12 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62dfaf74-2572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:01:49:2e:97:82:72:09:da:3f:86:cf:17:f6:
34:14:b7:22:e4:52:ee:98:30:96:7a:f1:df:81:19:
ef:a9:16:a1:5c:b4:67:46:73:b2:58:5e:80:7e:10:
ad:ab:e6:a1:24:f1:73:72:f1:2a:ec:09:78:c7:13:
a6:57:d8:b1:dc:2f:3a:57:d2:cd:4b:66:3c:90:88:
bb:2c:f4:20:1f:bf:f6:8b:25:9d:0a:7e:1f:78:fc:
19:40:99:90:90:5c:a9:24:bd:cb:7f:24:79:ba:38:
85:41:e7:eb:cb:d2:b0:0b:1f:e3:e1:ed:95:3c:9b:
52:85:05:65:6f:2e:ae:62:76:33:31:fe:0b:aa:e9:
50:b4:8b:cf:5d:09:12:a1:51:06:cd:a7:42:c9:67:
25:2b:53:6a:af:9b:38:5d:15:f3:d3:99:cc:ef:35:
56:c5:4c:1e:d6:a0:17:45:69:5a:e1:3c:47:0b:ac:
8f:80:c8:11:ef:a5:0a:3c:9d:21:ea:37:35:5e:72:
cd:e7:f3:b3:31:cf:4f:76:b5:0f:3c:14:5b:95:1c:
92:6a:94:db:1c:53:f5:29:41:0b:f1:06:f6:80:64:
2d:aa:cc:42:17:91:ee:0c:20:3f:ea:83:c0:d8:79:
d7:96:bd:03:10:a1:ad:cc:bd:74:93:6f:dd:e4:98:
72:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C6:8D:AD:75:25:DE:20:71:69:C6:45:20:CB:02:36:F7:28:2F:40
X509v3 Authority Key Identifier:
keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/5C9776CA040A11EDBA11313DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.128.222.0/23
43.130.63.0/24
43.135.58.0/24
43.152.96.0/19
43.152.192.0-43.174.255.255
101.32.140.0/24
101.33.114.0/23
IPv6:
240d:c000::/24
Signature Algorithm: sha256WithRSAEncryption
b5:52:8d:6d:ca:02:7d:e6:c0:d2:65:a7:2b:6c:4c:b9:68:b1:
84:63:6b:54:71:1a:b9:18:cc:bf:da:24:47:da:6a:cc:1a:a1:
4b:ff:bf:6b:96:64:b5:30:32:0a:ad:86:cc:74:70:e7:66:33:
d0:7c:e5:ac:36:40:b0:7d:96:aa:be:72:17:4e:c0:f4:25:3d:
f8:11:b6:1a:ab:d8:45:9f:69:8d:cd:7c:a2:b0:73:ad:4b:98:
35:04:3f:96:bd:70:de:78:20:d8:6b:99:9e:c3:c5:64:50:52:
dd:ce:ce:90:c2:ae:ac:0a:9a:e0:bd:c0:19:de:8e:11:88:4b:
dd:c7:49:4e:f5:a1:da:61:b1:5e:f1:6e:f1:62:5e:74:ee:62:
23:04:9d:4f:cf:75:c0:10:ce:6f:8b:a0:0e:a5:f0:79:9d:3e:
22:28:7c:cd:fc:b8:54:67:e9:22:c9:78:c2:7c:a3:d0:31:90:
ba:28:e5:ff:1c:36:34:44:34:95:45:0d:74:31:48:85:27:3e:
d9:33:1c:db:16:9b:91:12:18:5c:e3:bb:21:e0:04:b0:42:73:
d3:72:a8:7b:72:90:64:5a:f4:b6:4c:5f:29:f3:34:ef:a4:ae:
86:b1:f3:46:44:c7:39:b1:d4:f3:a6:54:b0:ec:4b:a0:95:9a:
ae:ba:6b:21
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgICBZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5
NTA2QTU5QkQwHhcNMjIwNzI2MDkxMDEyWhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmRmYWY3NC0yNTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2QFJLpeCcgnaP4bPF/Y0FLci5FLumDCWevHfgRnvqRahXLRnRnOyWF6AfhCt
q+ahJPFzcvEq7Al4xxOmV9ix3C86V9LNS2Y8kIi7LPQgH7/2iyWdCn4fePwZQJmQ
kFypJL3LfyR5ujiFQefry9KwCx/j4e2VPJtShQVlby6uYnYzMf4LqulQtIvPXQkS
oVEGzadCyWclK1Nqr5s4XRXz05nM7zVWxUwe1qAXRWla4TxHC6yPgMgR76UKPJ0h
6jc1XnLN5/OzMc9PdrUPPBRblRySapTbHFP1KUEL8Qb2gGQtqsxCF5HuDCA/6oPA
2HnXlr0DEKGtzL10k2/d5JhyBQIDAQABo4ICzjCCAsowHQYDVR0OBBYEFKXGja11
Jd4gcWnGRSDLAjb3KC9AMB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0
MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX
YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTdENjcvNjlFNkMxNkE0NDJBMTFFQjk1OTlBRDM4QzRGOUFFMDIvNUM5Nzc2Q0Ew
NDBBMTFFREJBMTEzMTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWAYIKwYBBQUHAQcBAf8E
STBHMDcEAgABMDEDBAErgN4DBAArgj8DBAArhzoDBAUrmGAwCwMEBiuYwAMDACuu
AwQAZSCMAwQBZSFyMAwEAgACMAYDBAAkDcAwDQYJKoZIhvcNAQELBQADggEBALVS
jW3KAn3mwNJlpytsTLlosYRja1RxGrkYzL/aJEfaaswaoUv/v2uWZLUwMgqthsx0
cOdmM9B85aw2QLB9lqq+chdOwPQlPfgRthqr2EWfaY3NfKKwc61LmDUEP5a9cN54
INhrmZ7DxWRQUt3OzpDCrqwKmuC9wBnejhGIS93HSU71odphsV7xbvFiXnTuYiME
nU/PdcAQzm+LoA6l8HmdPiIofM38uFRn6SLJeMJ8o9AxkLoo5f8cNjRENJVFDXQx
SIUnPtkzHNsWm5ESGFzjuyHgBLBCc9NyqHtykGRa9LZMXynzNO+kroax80ZExzmx
1POmVLDsS6CVmq66ayE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:42 2023 by rpki-client on console-fra.rpki-client.org