Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/F669E30EB64511EC89F8CB43C4F9AE02.roa
File: F669E30EB64511EC89F8CB43C4F9AE02.roa (raw, json)
Hash identifier: 2q1cSB4D33GCtyr2cAgqI2tItF4K8DyZL8+d4e8nGNI=
Subject key identifier: 39:CC:ED:9B:40:D4:70:16:E8:7A:50:26:0C:E1:97:F4:67:65:DC:59
Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
Certificate serial: 3472
Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/F669E30EB64511EC89F8CB43C4F9AE02.roa
Signing time: Tue 20 Aug 2024 14:30:18 +0000
ROA not before: Tue 20 Aug 2024 14:30:18 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 19905
IP address blocks: 128.106.20.0/24 maxlen: 24
128.106.41.0/24 maxlen: 24
165.21.21.0/24 maxlen: 24
165.21.74.0/24 maxlen: 24
165.21.93.0/24 maxlen: 24
165.21.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Aug 2024 01:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13426 (0x3472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
Validity
Not Before: Aug 20 14:30:18 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66c4a87a-6611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:a7:79:4c:19:5e:55:0d:07:8a:ab:4a:d9:
db:32:be:5f:bc:3e:2d:5d:d0:09:c9:65:a4:ed:c3:
c6:6c:20:6a:d6:04:80:93:13:d6:b7:ba:5a:31:d6:
5a:ab:56:be:fd:95:89:2e:b7:43:6f:52:70:5f:47:
3c:2d:71:34:e3:51:0e:e7:93:e1:3b:50:b0:6a:8f:
5e:5d:62:c8:b2:c9:ea:66:02:b7:c3:ee:03:0f:d2:
d9:ed:25:13:e7:86:ba:fe:b2:70:a3:b8:3f:d7:71:
ba:0c:ed:f9:0c:46:d2:8c:44:69:6e:be:e9:3b:cd:
48:1d:53:37:53:38:91:05:8b:3d:04:05:7c:a2:32:
53:af:52:0b:9e:4b:da:57:87:2b:e2:b7:4e:ab:ad:
e2:14:28:ae:87:dd:90:2d:60:1d:f4:c3:87:08:03:
7d:3a:23:23:51:a1:99:f3:36:0f:cd:a8:63:2b:7d:
63:33:e3:d3:eb:c7:f2:5e:2c:e2:5a:a1:d5:3a:d4:
b0:7e:ee:a5:36:47:a4:28:5b:07:b0:af:b1:33:f7:
8e:ef:c2:f5:7a:5b:fc:13:3b:8c:3f:5b:13:8d:07:
56:de:da:0e:1d:31:c8:54:fc:e9:c2:76:72:8e:20:
f5:11:95:e1:6d:79:52:1d:42:46:d3:9c:64:25:fe:
02:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CC:ED:9B:40:D4:70:16:E8:7A:50:26:0C:E1:97:F4:67:65:DC:59
X509v3 Authority Key Identifier:
keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/F669E30EB64511EC89F8CB43C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
128.106.20.0/24
128.106.41.0/24
165.21.21.0/24
165.21.74.0/24
165.21.93.0/24
165.21.101.0/24
Signature Algorithm: sha256WithRSAEncryption
36:0f:d1:ef:5f:b7:b4:3a:de:63:c3:d8:42:eb:f8:c8:c4:b0:
69:3d:35:73:0b:b7:cb:c1:b9:fa:20:52:1d:15:56:76:b1:93:
2e:73:b4:e9:db:c1:99:cb:8b:49:73:10:e0:cf:2a:8c:81:64:
20:96:53:fa:c0:5b:10:f7:6c:5d:77:ae:d9:54:df:95:ab:da:
9c:b0:44:8c:dd:1f:22:e7:86:b5:cc:5b:29:25:d6:60:ed:7b:
6e:ce:02:e8:8d:e0:f7:04:f0:60:4c:e1:f9:55:a7:40:a2:1a:
ce:c5:b2:94:6b:56:33:b9:62:9b:eb:7c:2f:9f:c3:1d:4a:fb:
a1:51:e0:9e:03:92:8f:6a:f9:42:d1:fe:52:81:fc:7b:ce:3e:
4b:20:76:29:83:b1:7f:11:30:f7:9e:1b:e1:b6:62:5b:2d:22:
a7:4b:d7:b4:3f:ae:19:a6:c4:66:71:12:e1:b4:2d:0e:69:e6:
99:dc:4e:4d:eb:ae:71:30:d1:bc:a5:9e:31:c0:76:10:8c:43:
38:ea:21:b6:99:d3:fd:bb:c6:84:4a:e8:93:8f:37:79:ee:88:
ad:12:fa:94:20:c5:9e:36:cc:51:56:d2:11:2d:d9:b8:c6:d5:
e3:c9:22:96:3f:14:b5:3f:a5:c7:04:ea:8a:76:cf:bc:97:19:
f8:8b:84:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 05:56:27 2024 by rpki-client on console-fra.rpki-client.org