Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/2ECCD5CEF81311EE83B53A77C4F9AE02.roa
File: 2ECCD5CEF81311EE83B53A77C4F9AE02.roa (raw, json)
Hash identifier: 7RJGHBMBlpN8Aot+jnj33iZC3UfS4Z6AHzyWcrCvkrE=
Subject key identifier: E1:52:2F:79:A1:9C:AF:93:FE:07:26:9C:B6:85:47:4B:F7:AE:D5:FE
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3569
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/2ECCD5CEF81311EE83B53A77C4F9AE02.roa
Signing time: Thu 11 Apr 2024 14:52:57 +0000
ROA not before: Thu 11 Apr 2024 14:52:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38616
IP address blocks: 111.88.76.0/24 maxlen: 24
111.88.77.0/24 maxlen: 24
111.88.79.0/24 maxlen: 24
111.88.138.0/24 maxlen: 24
111.88.139.0/24 maxlen: 24
111.88.144.0/20 maxlen: 21
111.88.144.0/22 maxlen: 23
111.88.144.0/23 maxlen: 24
111.88.146.0/24 maxlen: 24
111.88.148.0/23 maxlen: 23
111.88.150.0/23 maxlen: 24
111.88.152.0/21 maxlen: 23
111.88.152.0/23 maxlen: 24
111.88.156.0/22 maxlen: 24
111.88.164.0/22 maxlen: 23
111.88.166.0/23 maxlen: 24
111.88.168.0/22 maxlen: 24
111.88.184.0/22 maxlen: 23
111.88.233.0/24 maxlen: 24
111.88.234.0/24 maxlen: 24
111.88.240.0/24 maxlen: 24
111.88.251.0/24 maxlen: 24
111.88.252.0/24 maxlen: 24
111.88.253.0/24 maxlen: 24
111.88.254.0/24 maxlen: 24
115.186.0.0/24 maxlen: 24
115.186.19.0/24 maxlen: 24
115.186.48.0/21 maxlen: 24
115.186.64.0/19 maxlen: 21
115.186.64.0/21 maxlen: 24
115.186.76.0/22 maxlen: 24
115.186.80.0/20 maxlen: 24
115.186.97.0/24 maxlen: 24
115.186.99.0/24 maxlen: 24
115.186.100.0/22 maxlen: 22
115.186.100.0/24 maxlen: 24
115.186.104.0/24 maxlen: 24
115.186.105.0/24 maxlen: 24
115.186.114.0/24 maxlen: 24
115.186.116.0/22 maxlen: 22
115.186.116.0/24 maxlen: 24
115.186.122.0/23 maxlen: 23
115.186.126.0/23 maxlen: 23
115.186.127.0/24 maxlen: 24
117.102.11.0/24 maxlen: 24
117.102.12.0/22 maxlen: 22
117.102.12.0/23 maxlen: 24
117.102.15.0/24 maxlen: 24
117.102.29.0/24 maxlen: 24
117.102.30.0/24 maxlen: 24
117.102.31.0/24 maxlen: 24
203.81.216.0/24 maxlen: 24
203.81.219.0/24 maxlen: 24
203.81.220.0/22 maxlen: 22
203.81.220.0/24 maxlen: 24
203.81.221.0/24 maxlen: 24
203.81.222.0/24 maxlen: 24
203.81.223.0/24 maxlen: 24
203.81.224.0/22 maxlen: 22
203.81.224.0/24 maxlen: 24
203.81.225.0/24 maxlen: 24
203.81.226.0/24 maxlen: 24
203.81.227.0/24 maxlen: 24
203.81.228.0/23 maxlen: 24
203.81.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 18:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13673 (0x3569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Apr 11 14:52:57 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6617f949-9061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:82:a7:09:9f:85:ef:79:7e:d8:15:64:fa:6d:
38:53:73:68:d5:a4:59:b7:af:8e:21:d9:d1:22:56:
1f:71:c6:cb:77:dc:4b:23:2e:05:85:cd:c9:eb:27:
4e:cd:5b:04:dd:73:68:a9:14:c5:25:a2:1e:36:75:
d0:bb:09:84:68:a0:b1:f6:fe:50:0b:51:38:0d:02:
58:30:45:b8:fb:a2:04:1c:17:c1:2d:5c:23:30:c9:
f1:a3:f6:68:d6:ae:da:5e:67:ea:11:05:b4:53:4e:
82:f3:f5:46:70:07:e7:1a:51:e0:cd:6e:58:ba:02:
6b:21:8c:b9:fb:07:cb:bd:e1:87:b6:5c:d3:ef:b7:
fb:33:fe:e2:67:d6:3b:bf:9a:cb:ab:5b:17:29:8a:
f1:a3:e0:40:4a:fe:bb:fe:a8:e1:85:cb:c7:61:cf:
f5:04:ee:eb:cf:bc:e8:a3:d1:62:b9:a3:df:43:4f:
b1:0e:86:9f:fc:40:60:2e:04:24:c9:86:b4:90:3f:
fa:c8:28:45:66:58:a5:59:f7:63:32:4a:7d:5e:b9:
5c:8e:f3:fb:85:9f:ac:ef:6e:a0:54:c4:e5:64:1b:
5b:8c:c5:e5:6d:71:f1:f8:42:c2:76:89:65:03:02:
11:6c:b2:62:e1:df:cb:57:46:e4:8b:ee:0a:c1:86:
a0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:52:2F:79:A1:9C:AF:93:FE:07:26:9C:B6:85:47:4B:F7:AE:D5:FE
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/2ECCD5CEF81311EE83B53A77C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.76.0/23
111.88.79.0/24
111.88.138.0/23
111.88.144.0/20
111.88.164.0-111.88.171.255
111.88.184.0/22
111.88.233.0-111.88.234.255
111.88.240.0/24
111.88.251.0-111.88.254.255
115.186.0.0/24
115.186.19.0/24
115.186.48.0/21
115.186.64.0/19
115.186.97.0/24
115.186.99.0-115.186.105.255
115.186.114.0/24
115.186.116.0/22
115.186.122.0/23
115.186.126.0/23
117.102.11.0-117.102.15.255
117.102.29.0-117.102.31.255
203.81.216.0/24
203.81.219.0-203.81.229.255
203.81.231.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:e1:68:00:f6:f3:82:24:02:b0:f2:76:c2:98:6c:60:29:5a:
07:f3:f3:ea:82:6c:85:96:22:1f:86:3e:ca:49:00:9a:96:45:
41:43:3b:2c:3f:c9:28:7d:8b:c4:1b:52:b8:0a:c3:41:cc:38:
cb:60:44:d9:09:14:47:a7:df:c1:12:ab:24:e2:7c:cc:08:d5:
01:3d:07:8c:d5:bb:c6:86:39:35:48:7f:b9:c8:b6:a5:27:df:
0a:27:71:95:83:29:5e:93:d4:16:c0:e6:92:e5:c8:33:d4:8c:
07:58:be:a9:4b:da:67:a1:c2:1e:a2:a0:13:3a:fe:d7:d5:b7:
00:6f:40:7f:e8:c9:a4:51:13:da:0a:b2:3a:89:2f:f8:65:5e:
1d:62:2a:d2:bb:2a:b9:fa:d3:9f:85:87:d6:76:5b:c8:65:e4:
3e:bd:a7:b3:f4:75:91:50:52:1d:a6:f3:44:5c:68:b1:c0:f8:
8c:22:7e:9e:18:7c:6e:81:bd:5e:01:2b:a2:09:62:f2:75:0d:
41:e1:63:74:a7:9e:69:2d:72:34:b6:e0:47:b5:87:68:33:7a:
e9:c6:ae:78:4e:8d:86:15:9f:ab:97:40:60:ba:af:23:92:23:
bf:aa:a7:b0:67:38:8a:ca:8c:a0:d4:5b:71:0a:0c:cd:8c:00:
ce:72:af:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 21:47:39 2024 by rpki-client on console-fra.rpki-client.org