Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/6009614852AF11EEBB6AA031C4F9AE02.roa
File: 6009614852AF11EEBB6AA031C4F9AE02.roa (raw, json)
Hash identifier: W7b3ukKjn/zDNh/Cea0r24i5GrggkKUh0OPNQIzbTp4=
Subject key identifier: B2:B3:E9:BD:20:4A:3E:5D:6D:3A:BF:64:64:83:6E:7E:41:24:44:81
Certificate issuer: /CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
Certificate serial: 15A3
Authority key identifier: E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/6009614852AF11EEBB6AA031C4F9AE02.roa
Signing time: Fri 19 Jul 2024 03:14:39 +0000
ROA not before: Fri 19 Jul 2024 03:14:39 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 15830
IP address blocks: 27.111.160.0/19 maxlen: 19
27.111.169.0/24 maxlen: 24
27.111.170.0/24 maxlen: 24
27.111.171.0/24 maxlen: 24
27.111.192.0/20 maxlen: 20
27.111.195.0/24 maxlen: 24
45.126.14.0/23 maxlen: 23
103.14.116.0/22 maxlen: 22
113.59.240.0/20 maxlen: 20
113.59.240.0/23 maxlen: 24
113.59.243.0/24 maxlen: 24
113.59.248.0/21 maxlen: 21
113.59.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Aug 2024 07:28:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5539 (0x15a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
Validity
Not Before: Jul 19 03:14:39 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6699da1f-84a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:9d:cc:fa:3e:ea:c8:42:ef:01:2f:43:16:
97:05:8c:e6:97:ac:2e:9f:1b:f8:31:52:81:ba:0f:
80:6e:70:a4:82:91:c4:7c:86:9c:5a:b9:24:72:1b:
39:89:6d:c8:1c:03:56:2b:4e:a1:51:00:b8:be:c9:
98:14:ad:13:74:1c:16:75:9b:7f:fe:08:e7:5c:89:
5a:4e:9a:f4:de:47:e9:5e:31:0d:65:a7:63:62:09:
1d:f4:11:43:b5:89:df:f7:69:c1:c4:16:72:33:79:
ce:42:9b:f9:32:a4:86:8c:7a:66:3c:b2:2c:71:f1:
b3:a7:8b:51:43:44:b4:9b:ee:f4:73:0a:b8:c4:5e:
dd:9e:2f:1e:d4:0a:1b:0e:eb:f5:b8:7a:f9:41:13:
8d:89:5a:4d:ce:21:0e:40:57:b8:02:96:d0:05:6f:
39:0f:55:73:1f:aa:48:6a:2b:37:e7:bc:3e:73:e5:
09:51:86:5b:f1:9a:ac:ea:70:c8:05:0f:d9:ad:6c:
7e:c0:62:f8:19:93:0b:81:07:53:5e:f7:ad:d3:53:
91:3f:02:2d:37:8a:9a:d8:6c:35:28:04:f0:ea:3a:
f8:54:4a:2d:d4:86:4d:5a:96:3a:21:7c:33:c9:0a:
65:95:ee:c6:61:f3:47:73:0a:36:d7:e0:08:9f:4b:
b9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B3:E9:BD:20:4A:3E:5D:6D:3A:BF:64:64:83:6E:7E:41:24:44:81
X509v3 Authority Key Identifier:
keyid:E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/6009614852AF11EEBB6AA031C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.111.160.0-27.111.207.255
45.126.14.0/23
103.14.116.0/22
113.59.240.0/20
Signature Algorithm: sha256WithRSAEncryption
49:0b:87:69:02:ca:6d:1c:e9:f0:b3:47:10:1e:4e:c1:a7:e1:
bc:58:b3:df:f4:70:53:80:fd:ef:68:77:bf:d8:37:06:19:9b:
2f:bb:bb:01:0c:64:66:31:0f:1f:1a:14:8c:c0:1f:21:17:f9:
4d:62:10:6d:2d:15:a9:a0:32:3f:1b:83:63:38:03:28:0a:d0:
bc:ac:d1:80:6c:12:c1:3d:cf:eb:b1:70:0a:21:85:ad:3c:41:
bd:b3:44:13:2b:9f:1b:cf:22:d5:ba:f8:62:5c:db:7a:35:87:
26:7d:b8:e7:b4:6d:26:3e:8f:fd:83:cd:60:6a:14:ba:70:b4:
26:13:80:0f:fd:a7:0f:c7:8e:1b:62:44:f2:ea:63:62:c3:b3:
4b:3c:ee:84:88:29:00:bf:c4:b5:89:b6:06:86:07:7e:3f:04:
2a:5a:25:a5:1b:38:51:72:bf:f1:05:4e:61:02:1f:b4:52:f8:
8c:6d:d5:8b:2c:6d:fb:1f:a4:dc:3b:d0:cb:41:24:77:3a:84:
9f:04:33:d8:68:47:c2:e5:87:22:af:1e:12:3e:7b:14:cc:f9:
66:64:75:88:4c:88:ac:c8:e7:a0:20:ca:46:d5:22:48:c3:4f:
06:91:f6:fe:3d:79:00:f3:05:db:f7:f8:a5:13:42:2a:8f:cb:
9a:aa:ab:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 09:33:11 2024 by rpki-client on console-fra.rpki-client.org