Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/ACDD163628CB11EDA177954AC4F9AE02.roa
File: ACDD163628CB11EDA177954AC4F9AE02.roa (raw, json)
Hash identifier: B+9Un5hCXCmiaSF4VqK9/kJLwylaEvKHEr7PPZls4EM=
Subject key identifier: EE:D4:DD:53:CE:43:05:92:BB:84:14:39:82:80:31:14:59:2F:64:3F
Certificate issuer: /CN=A917452D/serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Certificate serial: 015B
Authority key identifier: E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/ACDD163628CB11EDA177954AC4F9AE02.roa
Signing time: Fri 23 Feb 2024 05:15:40 +0000
ROA not before: Fri 23 Feb 2024 05:15:40 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 9506
IP address blocks: 202.166.0.0/17 maxlen: 17
202.166.0.0/19 maxlen: 19
202.166.1.0/24 maxlen: 24
202.166.32.0/19 maxlen: 19
202.166.64.0/18 maxlen: 18
202.166.123.0/24 maxlen: 24
202.166.128.0/19 maxlen: 19
2400:d800::/30 maxlen: 30
2400:d800::/31 maxlen: 31
2400:d800::/32 maxlen: 32
2400:d801::/32 maxlen: 32
2400:d801:3f00::/40 maxlen: 40
2400:d801:9000::/36 maxlen: 44
2400:d801:a000::/36 maxlen: 44
2400:d802::/31 maxlen: 31
2400:d802::/32 maxlen: 32
2400:d803::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 23 Feb 2024 05:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917452D/serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Validity
Not Before: Feb 23 05:15:40 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65d829fc-6d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:5c:80:42:34:0a:ca:07:d7:e2:35:4d:2d:
bf:2c:a7:de:b5:4b:8c:ea:db:7d:37:17:d0:98:b0:
48:84:60:18:2d:9c:cd:00:7a:9f:d7:26:7b:85:bf:
b6:67:d1:a4:f3:c3:f4:7d:e0:1b:df:24:b2:40:8e:
72:1a:fa:91:ce:cd:0c:95:78:02:1e:23:18:27:37:
51:d7:56:d6:c2:d7:e4:49:b5:82:1d:4b:6e:aa:db:
85:3a:b3:d4:c4:0c:18:78:c0:e6:be:35:d2:32:49:
06:7c:aa:c0:41:d3:30:bd:57:73:f5:c2:93:37:98:
e7:40:2a:f0:de:92:85:14:a7:f2:65:4d:cb:e6:8f:
18:57:b8:ee:24:90:d6:24:f9:29:6c:5f:e7:46:4c:
87:4b:b1:6a:81:0e:cd:4c:a2:54:d7:3a:9a:39:0a:
ab:5e:c7:01:d6:bb:d8:b7:55:1b:43:34:ab:92:e2:
92:fc:f5:9a:f1:1b:4c:a2:f9:0a:9e:e9:7f:82:8c:
5d:7c:cc:01:42:03:6a:74:b0:e8:95:d1:68:08:ac:
91:d3:8f:25:11:47:a0:16:1b:de:de:18:a9:d5:9a:
30:1f:f8:20:cc:88:cc:f6:16:fe:53:8d:e8:ba:07:
d9:e2:17:bc:02:da:e8:d7:00:89:de:9b:dc:a4:6c:
6b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D4:DD:53:CE:43:05:92:BB:84:14:39:82:80:31:14:59:2F:64:3F
X509v3 Authority Key Identifier:
keyid:E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/ACDD163628CB11EDA177954AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.166.0.0-202.166.159.255
IPv6:
2400:d800::/30
Signature Algorithm: sha256WithRSAEncryption
b1:dd:58:1d:a8:d1:e0:80:b8:5d:3b:34:34:1f:e9:ad:2c:1b:
6f:a0:14:1c:b3:28:59:01:40:c2:6b:74:6b:82:1b:7b:3d:2a:
05:d8:0a:2a:b4:d0:bf:c5:d8:38:87:c7:46:1f:9e:11:e2:95:
a7:1e:e4:1c:5c:7a:1f:fd:f6:6a:3c:3f:b0:97:f2:1e:9a:02:
49:d9:fb:de:86:10:e7:b2:3f:2f:f9:6b:5c:97:a1:a4:2e:05:
4a:07:cb:72:fb:0a:5e:ad:d7:eb:5c:29:ac:0d:05:f7:f5:e5:
21:20:4f:37:b6:72:50:a7:0a:9f:db:3c:4f:80:29:05:74:88:
44:45:b9:26:cf:38:bf:dc:6a:d0:1e:ff:b8:48:74:a2:82:71:
ae:25:b1:c4:c8:0c:26:8d:02:a3:75:4f:f5:b8:d0:7e:db:9d:
c8:22:83:d8:14:09:75:15:cf:48:ad:69:56:f3:b4:60:9f:f4:
cf:b2:7e:9e:32:b2:5b:3a:11:de:42:2d:c8:6e:5b:70:38:2f:
ab:96:9a:ad:e8:da:d9:37:4a:35:b5:7d:a0:b3:bd:31:4f:23:
d7:b1:3d:9c:f7:37:f5:9b:ac:96:d2:59:d6:73:b8:cb:98:07:
6a:b7:31:fb:6a:60:b0:a1:f5:9d:d8:e2:61:90:d8:1f:93:7c:
5a:d3:48:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 10:44:37 2024 by rpki-client on console-ams.rpki-client.org