Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/7B32ACB443EE11EF8F1FA771C4F9AE02.roa
File: 7B32ACB443EE11EF8F1FA771C4F9AE02.roa (raw, json)
Hash identifier: 8Vcz3j7NSTjMe2X/LEvVPZIKNz01106rZem61oG431E=
Subject key identifier: 71:C6:B8:77:4D:1B:32:41:1E:49:84:78:DC:6C:AC:88:7F:65:88:B2
Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
Certificate serial: 3459
Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/7B32ACB443EE11EF8F1FA771C4F9AE02.roa
Signing time: Wed 17 Jul 2024 03:41:42 +0000
ROA not before: Wed 17 Jul 2024 03:41:42 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 3758
IP address blocks: 128.106.0.0/18 maxlen: 24
128.106.64.0/18 maxlen: 24
128.106.128.0/17 maxlen: 17
165.21.0.0/16 maxlen: 16
165.21.12.0/24 maxlen: 24
165.21.18.0/24 maxlen: 24
165.21.19.0/24 maxlen: 24
165.21.31.0/24 maxlen: 24
165.21.36.0/23 maxlen: 23
165.21.39.0/24 maxlen: 24
165.21.49.0/24 maxlen: 24
165.21.50.0/24 maxlen: 24
165.21.52.0/24 maxlen: 24
165.21.70.0/24 maxlen: 24
165.21.71.0/24 maxlen: 24
165.21.72.0/24 maxlen: 24
165.21.74.0/24 maxlen: 24
165.21.84.0/24 maxlen: 24
165.21.88.0/24 maxlen: 24
165.21.91.0/24 maxlen: 24
165.21.93.0/24 maxlen: 24
165.21.94.0/24 maxlen: 24
165.21.95.0/24 maxlen: 24
165.21.100.0/24 maxlen: 24
165.21.104.0/24 maxlen: 24
165.21.108.0/24 maxlen: 24
165.21.109.0/24 maxlen: 24
165.21.122.0/24 maxlen: 24
165.21.123.0/24 maxlen: 24
165.21.138.0/24 maxlen: 24
165.21.139.0/24 maxlen: 24
165.21.238.0/24 maxlen: 24
165.21.244.0/24 maxlen: 24
165.21.246.0/24 maxlen: 24
165.21.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jul 2024 01:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13401 (0x3459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
Validity
Not Before: Jul 17 03:41:42 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=66973d76-f8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e5:f5:f6:93:5d:48:22:e1:75:2f:1d:fe:c6:
44:0b:ac:a2:ea:64:28:d1:79:5b:a8:f0:6f:14:6e:
43:5e:28:2b:a6:e3:30:13:53:b1:eb:e1:be:bb:c1:
e7:f2:ba:8e:af:84:3b:38:e5:d1:33:0e:1d:00:fb:
98:c1:56:34:c9:7e:5f:60:01:cc:23:c9:39:2c:09:
09:50:cc:d5:a3:7d:c0:07:77:30:92:6e:52:0f:7c:
9c:14:61:49:28:7c:c7:5c:60:ac:ad:8f:83:03:34:
f9:c0:45:87:d1:68:66:94:7d:3b:8b:aa:0c:16:5b:
0f:23:7c:3f:e2:03:d0:3c:f9:c9:9b:52:7d:f3:84:
47:19:e9:cb:14:74:8c:d1:67:44:24:29:1e:75:da:
ab:a6:00:43:58:e8:c8:f9:d8:97:20:27:91:ca:9b:
7e:56:e4:7e:88:80:0b:5d:85:60:11:0d:74:61:88:
80:9d:36:91:cc:19:05:8e:a3:5a:93:1e:79:81:3a:
a3:49:40:02:03:11:74:7e:6b:6e:af:35:86:17:63:
82:3c:b5:9d:22:87:fd:b0:c3:6e:66:61:03:07:70:
b0:69:51:6f:6a:69:ad:2b:d1:24:ec:f2:06:cd:c7:
41:ae:7d:24:a0:04:1d:4f:f4:83:e6:85:e6:1b:96:
90:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C6:B8:77:4D:1B:32:41:1E:49:84:78:DC:6C:AC:88:7F:65:88:B2
X509v3 Authority Key Identifier:
keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/7B32ACB443EE11EF8F1FA771C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
128.106.0.0/16
165.21.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:92:ee:f5:7b:89:32:1d:dc:ae:e1:24:6e:24:ad:17:fe:57:
7f:91:64:35:37:6a:f5:13:10:cc:55:4e:11:8a:2b:42:ab:95:
3a:87:a3:8c:eb:6a:8c:03:c6:0e:1d:db:6b:be:29:c1:fc:50:
ba:ee:a1:cd:5e:ef:4c:1a:5e:5f:1d:32:59:d6:f0:d0:2a:2d:
15:fb:c7:4a:aa:e6:19:1f:d6:9b:e7:dd:ae:b8:de:d9:1e:04:
89:a0:8a:ac:17:47:0c:91:b6:52:a4:ba:a8:ac:b1:86:b6:66:
66:d0:f5:47:9f:ee:e0:a4:76:bb:88:64:f7:04:d1:65:4a:82:
3c:4e:a4:a8:4f:80:77:97:49:0c:c1:ff:af:98:e4:60:f9:4a:
e7:ac:5e:3f:d7:52:46:b4:0c:aa:c5:79:a8:49:43:e6:a9:2a:
ba:1d:47:70:98:72:b9:79:c4:28:df:79:6b:12:af:48:17:22:
d3:a6:4e:51:55:81:7b:62:e9:5f:20:26:c9:d8:dc:74:fb:7e:
e9:91:54:85:dc:c6:76:93:2b:e8:6a:08:1f:01:c3:eb:a6:49:
9a:25:b7:c3:db:30:0b:24:e5:7e:e3:d0:13:9d:ea:59:76:7f:
53:4b:30:08:71:45:2c:7f:50:0b:5e:78:fa:dc:7c:06:2a:c9:
fa:70:4d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 04:01:36 2024 by rpki-client on console-ams.rpki-client.org