Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/13D46804A47B11E9867CBF58C4F9AE02.roa
File: 13D46804A47B11E9867CBF58C4F9AE02.roa (raw, json)
Hash identifier: dfzoXKpGZSWk6RNHscqU4qOUiyyKtbFuRpR7IJztr3s=
Subject key identifier: 97:AB:A4:F9:4C:01:71:29:AE:74:A8:20:D6:73:A7:69:C5:C1:9C:21
Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
Certificate serial: 339F
Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/13D46804A47B11E9867CBF58C4F9AE02.roa
Signing time: Mon 14 Aug 2023 14:30:19 +0000
ROA not before: Mon 14 Aug 2023 14:30:19 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 9506
IP address blocks: 128.106.64.0/18 maxlen: 18
128.106.128.0/17 maxlen: 17
165.21.24.0/21 maxlen: 21
165.21.24.0/22 maxlen: 22
165.21.28.0/23 maxlen: 23
165.21.64.0/22 maxlen: 22
165.21.68.0/23 maxlen: 23
165.21.75.0/24 maxlen: 24
165.21.76.0/23 maxlen: 23
165.21.78.0/24 maxlen: 24
165.21.112.0/21 maxlen: 21
165.21.124.0/22 maxlen: 22
165.21.128.0/22 maxlen: 22
165.21.132.0/24 maxlen: 24
165.21.134.0/24 maxlen: 24
165.21.135.0/24 maxlen: 24
165.21.154.0/24 maxlen: 24
165.21.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 03:41:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13215 (0x339f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
Validity
Not Before: Aug 14 14:30:19 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=64da3a7b-d0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:c3:2e:75:39:63:07:22:a4:b5:11:be:c2:
10:4f:3a:13:f6:39:7c:b2:8c:c2:2b:31:8e:86:3a:
f3:ff:d9:4d:06:55:6e:fa:4a:b7:75:9c:b9:99:5b:
b4:05:e3:d6:74:b6:be:01:e4:0d:4c:86:d7:88:77:
e3:1d:1f:35:40:bc:fe:c4:20:24:df:0c:e2:03:1c:
73:ee:86:36:a1:34:fd:74:f5:15:e5:50:d1:e1:84:
2e:4a:7b:e0:ae:de:b6:ff:dd:83:a3:fa:3b:fb:54:
a6:6e:85:d3:7b:29:66:42:b2:67:1c:f0:ce:45:88:
4b:96:4b:14:23:ec:e0:83:af:96:54:15:c5:98:42:
24:f7:49:3b:93:6c:e3:5c:a7:df:d0:58:7b:07:cb:
7f:b1:b2:e0:59:ff:32:8f:a2:d0:57:89:3e:8f:42:
d5:a0:16:c1:66:4b:27:25:ed:5b:d1:0c:a5:16:1b:
78:81:d2:c6:8f:64:f9:ea:64:80:f1:67:60:ac:e7:
c9:a9:09:58:2e:38:2d:4a:03:8b:39:d9:41:d1:2e:
e6:b2:25:1c:bb:a0:8b:ad:5c:95:da:b7:e7:cd:2a:
10:a3:b1:c6:80:d1:7e:d2:8b:a0:38:e0:6e:bb:a8:
e8:31:70:27:1b:04:0c:1d:cd:71:9f:41:aa:c4:9f:
b8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AB:A4:F9:4C:01:71:29:AE:74:A8:20:D6:73:A7:69:C5:C1:9C:21
X509v3 Authority Key Identifier:
keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/13D46804A47B11E9867CBF58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
128.106.64.0-128.106.255.255
165.21.24.0/21
165.21.64.0-165.21.69.255
165.21.75.0-165.21.78.255
165.21.112.0/21
165.21.124.0-165.21.132.255
165.21.134.0/23
165.21.154.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:bb:44:84:88:6b:dd:f4:e3:f4:35:cb:e7:36:d6:6c:f1:bc:
ae:ff:f2:b8:63:61:33:71:c5:e0:27:7a:ae:15:2a:25:60:a2:
26:6f:dd:4a:40:06:bb:49:e0:f1:10:40:32:81:01:1e:33:51:
ee:32:2b:20:84:9e:df:a5:94:3b:0a:7c:bd:b6:d2:5f:6e:41:
5c:4f:67:1d:5d:93:45:c8:b9:f6:8e:6e:89:ea:09:13:19:31:
25:82:cd:62:4b:6d:8d:07:29:44:c6:91:65:29:45:50:7a:cc:
1c:18:eb:90:ea:32:2f:7d:bf:50:ec:4c:6e:f0:5e:c0:0d:d2:
92:6f:fe:f9:6d:50:89:bb:f2:3f:d4:1f:5f:e7:69:16:a5:31:
11:20:d4:bd:83:aa:93:b5:77:42:46:c7:a3:d3:a3:ee:15:62:
8e:96:cb:28:88:52:3a:92:09:3b:4b:e6:bd:c3:59:d2:8c:13:
07:e8:fd:6f:b6:ea:d2:71:3d:e4:c6:2f:52:3c:bd:6c:f7:66:
c6:30:95:c7:56:cd:69:7e:c0:e1:40:10:99:94:06:fa:0c:8a:
02:9f:f9:b4:b3:be:97:e0:10:a3:ca:20:76:ac:04:6e:41:8f:
3b:8a:e9:6c:32:d5:29:26:5a:28:19:7c:b8:84:6e:47:31:55:
c2:62:da:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 06:41:59 2024 by rpki-client on console-ams.rpki-client.org