Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/24039C4AF94011EDA64F8962C4F9AE02.roa
File: 24039C4AF94011EDA64F8962C4F9AE02.roa (raw, json)
Hash identifier: sCBccOdRFV33U6wI+s+j0xDfPMhEuQpQfaLE5HEb9jU=
Subject key identifier: 13:3D:9F:C1:3E:68:75:0C:46:F4:40:B2:F2:92:4E:BC:DF:CF:44:9A
Certificate issuer: /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3
Certificate serial: 16F1
Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/24039C4AF94011EDA64F8962C4F9AE02.roa
Signing time: Mon 18 Sep 2023 04:01:44 +0000
ROA not before: Mon 18 Sep 2023 04:01:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9287
IP address blocks: 45.125.128.0/22 maxlen: 22
45.125.128.0/24 maxlen: 24
45.125.129.0/24 maxlen: 24
45.125.130.0/24 maxlen: 24
45.125.131.0/24 maxlen: 24
45.252.52.0/22 maxlen: 22
45.252.52.0/24 maxlen: 24
45.252.53.0/24 maxlen: 24
45.252.54.0/24 maxlen: 24
45.252.55.0/24 maxlen: 24
103.55.1.0/24 maxlen: 24
103.55.2.0/24 maxlen: 24
103.76.196.0/22 maxlen: 22
103.76.196.0/24 maxlen: 24
103.76.197.0/24 maxlen: 24
103.76.198.0/24 maxlen: 24
103.76.199.0/24 maxlen: 24
103.115.132.0/22 maxlen: 22
103.115.132.0/24 maxlen: 24
103.115.133.0/24 maxlen: 24
103.115.134.0/24 maxlen: 24
103.115.135.0/24 maxlen: 24
2404:3280::/32 maxlen: 32
2404:3280:1::/48 maxlen: 48
2404:3280:a::/48 maxlen: 48
2404:3280:c::/48 maxlen: 48
2404:3280:f::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5873 (0x16f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3
Validity
Not Before: Sep 18 04:01:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6507cba8-f6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f1:0b:3f:e5:08:87:d9:97:f7:5a:5b:d0:68:
46:18:a4:b9:8e:f9:e0:a0:9f:c1:4f:58:89:88:24:
a9:04:6d:c9:6d:ff:e5:68:2a:9e:80:02:0f:2b:65:
a9:8c:ff:4a:e5:3d:47:36:e7:f6:88:fc:64:28:a1:
84:c6:87:3b:97:3b:69:b9:87:88:a2:cd:d0:df:f6:
1b:8e:6b:df:6a:87:bb:eb:95:60:1b:1c:9e:bb:0e:
a0:34:75:38:9d:d6:32:26:65:31:14:aa:11:32:98:
96:30:19:1e:91:c6:91:d3:74:4a:91:e0:2d:1c:9a:
40:1e:07:b4:c6:91:02:1d:86:c3:1e:0d:40:14:f0:
4b:9b:cf:ae:fa:7a:78:06:6a:e3:c9:17:94:fc:a6:
44:d2:4f:39:28:4a:d8:71:91:09:f3:b5:13:51:a8:
0b:94:4a:c2:15:fa:3c:c4:96:00:60:d9:ca:30:09:
8a:b3:fb:cf:28:22:45:7b:6f:7b:af:3a:7f:98:a0:
d5:f5:5f:59:a3:81:6f:fd:33:c3:0e:53:b7:35:99:
d9:67:b0:22:e8:41:79:01:0e:61:aa:11:55:5e:1f:
98:b6:10:47:f6:b1:4f:c8:01:40:60:a8:b2:bb:0f:
02:7e:cb:1b:96:67:5d:45:f0:8f:27:e1:94:23:66:
0f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3D:9F:C1:3E:68:75:0C:46:F4:40:B2:F2:92:4E:BC:DF:CF:44:9A
X509v3 Authority Key Identifier:
keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/24039C4AF94011EDA64F8962C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.128.0/22
45.252.52.0/22
103.55.1.0-103.55.2.255
103.76.196.0/22
103.115.132.0/22
IPv6:
2404:3280::/32
Signature Algorithm: sha256WithRSAEncryption
91:71:86:e2:8e:c8:83:62:78:88:d3:56:1e:24:44:ff:2e:c1:
03:2e:dd:36:ae:f1:a3:13:2c:4c:af:eb:f2:2b:6c:46:b2:be:
df:fe:9d:7c:dc:a5:82:76:32:17:8d:f4:8e:55:4a:7e:7f:e8:
ab:e4:e3:f1:b7:82:75:5b:55:f6:34:9c:a3:be:62:e0:45:2a:
0e:2b:c4:c5:86:ec:b9:b7:5e:a5:e0:d5:0b:c6:ae:5e:73:88:
0f:ad:81:0c:ad:b6:7a:f4:65:c4:68:e1:0e:3b:ab:3f:3c:41:
5f:ea:5a:38:9c:30:6f:e2:15:55:ca:c2:e3:04:03:15:99:f8:
90:ac:5b:0e:2f:90:4a:6a:fe:39:d1:65:2a:1b:3e:9c:d3:e3:
6d:67:b8:2b:49:f8:03:66:f3:64:e6:ec:6d:b5:89:55:1f:f2:
88:80:c8:0f:d2:75:c1:78:19:33:f2:2a:c9:e0:b1:0d:2a:80:
ea:23:b9:a7:44:1a:d3:c3:16:db:75:6e:90:79:55:59:27:81:
21:13:2e:ed:ab:75:fb:38:c4:5e:cb:9d:59:10:77:9a:66:64:
6d:82:ec:2f:28:7f:71:a5:d7:db:09:6f:26:dc:38:d8:99:da:
df:cb:fb:65:75:ed:3a:c6:70:dd:c5:2f:f7:a7:5e:da:f5:ea:
9d:5b:cf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 06:32:38 2023 by rpki-client on console-fra.rpki-client.org