Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/50E0E9BAEB5D11EE9C16F32FC4F9AE02.roa
File: 50E0E9BAEB5D11EE9C16F32FC4F9AE02.roa (raw, json)
Hash identifier: RCMlGigfY0RAl6ti9xirnGG/CWmRPprMFdDXK4kaALg=
Subject key identifier: 3F:D9:86:A8:29:D6:F6:59:BD:34:3D:27:1D:DA:B8:8F:6B:EC:D3:11
Certificate issuer: /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Certificate serial: 1AFC
Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/50E0E9BAEB5D11EE9C16F32FC4F9AE02.roa
Signing time: Tue 26 Mar 2024 10:40:52 +0000
ROA not before: Tue 26 Mar 2024 10:40:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132220
IP address blocks: 45.125.152.0/22 maxlen: 22
45.125.152.0/24 maxlen: 24
45.125.153.0/24 maxlen: 24
45.125.154.0/24 maxlen: 24
45.125.155.0/24 maxlen: 24
45.250.232.0/22 maxlen: 22
45.250.232.0/24 maxlen: 24
45.250.233.0/24 maxlen: 24
45.250.234.0/24 maxlen: 24
45.250.235.0/24 maxlen: 24
103.7.148.0/22 maxlen: 22
103.7.148.0/24 maxlen: 24
103.7.149.0/24 maxlen: 24
103.7.150.0/24 maxlen: 24
103.7.151.0/24 maxlen: 24
103.216.52.0/22 maxlen: 22
103.216.52.0/24 maxlen: 24
103.216.53.0/24 maxlen: 24
103.216.54.0/24 maxlen: 24
103.216.55.0/24 maxlen: 24
157.119.176.0/22 maxlen: 22
157.119.176.0/24 maxlen: 24
157.119.177.0/24 maxlen: 24
157.119.178.0/24 maxlen: 24
157.119.179.0/24 maxlen: 24
183.87.160.0/19 maxlen: 19
183.87.160.0/20 maxlen: 20
183.87.160.0/24 maxlen: 24
183.87.161.0/24 maxlen: 24
183.87.162.0/24 maxlen: 24
183.87.163.0/24 maxlen: 24
183.87.164.0/24 maxlen: 24
183.87.165.0/24 maxlen: 24
183.87.166.0/24 maxlen: 24
183.87.167.0/24 maxlen: 24
183.87.168.0/24 maxlen: 24
183.87.169.0/24 maxlen: 24
183.87.170.0/24 maxlen: 24
183.87.171.0/24 maxlen: 24
183.87.172.0/24 maxlen: 24
183.87.173.0/24 maxlen: 24
183.87.174.0/24 maxlen: 24
183.87.175.0/24 maxlen: 24
183.87.176.0/24 maxlen: 24
183.87.177.0/24 maxlen: 24
183.87.178.0/24 maxlen: 24
183.87.179.0/24 maxlen: 24
183.87.180.0/24 maxlen: 24
183.87.181.0/24 maxlen: 24
183.87.182.0/24 maxlen: 24
183.87.183.0/24 maxlen: 24
183.87.184.0/24 maxlen: 24
183.87.185.0/24 maxlen: 24
183.87.186.0/24 maxlen: 24
183.87.187.0/24 maxlen: 24
183.87.188.0/24 maxlen: 24
183.87.189.0/24 maxlen: 24
183.87.190.0/24 maxlen: 24
183.87.191.0/24 maxlen: 24
183.87.193.0/24 maxlen: 24
183.87.194.0/23 maxlen: 24
183.87.196.0/22 maxlen: 22
183.87.196.0/24 maxlen: 24
183.87.197.0/24 maxlen: 24
183.87.198.0/24 maxlen: 24
183.87.199.0/24 maxlen: 24
183.87.200.0/21 maxlen: 21
183.87.200.0/24 maxlen: 24
183.87.201.0/24 maxlen: 24
183.87.202.0/24 maxlen: 24
183.87.203.0/24 maxlen: 24
183.87.204.0/24 maxlen: 24
183.87.205.0/24 maxlen: 24
183.87.206.0/24 maxlen: 24
183.87.207.0/24 maxlen: 24
183.87.208.0/22 maxlen: 22
183.87.208.0/24 maxlen: 24
183.87.209.0/24 maxlen: 24
183.87.210.0/24 maxlen: 24
183.87.211.0/24 maxlen: 24
2403:7100::/32 maxlen: 32
2403:7100::/48 maxlen: 48
2403:7100:1::/48 maxlen: 48
2403:7100:2::/48 maxlen: 48
2403:7100:3::/48 maxlen: 48
2403:7100:4::/48 maxlen: 48
2403:7100:5::/48 maxlen: 48
2403:7100:6::/48 maxlen: 48
2403:7100:7::/48 maxlen: 48
2403:7100:8::/48 maxlen: 48
2403:7100:9::/48 maxlen: 48
2403:7100:a::/48 maxlen: 48
2403:7100:b::/48 maxlen: 48
2403:7100:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Apr 2024 11:23:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6908 (0x1afc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Validity
Not Before: Mar 26 10:40:52 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6602a633-e189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:45:10:8d:b6:51:38:b6:87:53:cc:2e:80:75:
5c:a5:0d:04:ff:57:85:bd:3f:68:3d:e4:57:69:fa:
15:a8:eb:ae:90:49:53:79:74:e4:1d:af:92:7c:86:
5e:e4:db:7d:ab:31:26:dd:ac:1e:db:c2:07:9a:8d:
ff:d9:bf:d0:ce:e8:d6:e3:40:34:80:d8:39:5a:cb:
d0:d3:74:ef:3d:38:bf:6f:da:05:a9:a2:3f:f3:16:
c5:aa:78:39:ae:19:35:c5:d1:fe:c0:d8:f7:e7:c6:
4f:09:4a:cd:55:a4:29:a0:f7:7d:27:54:d1:be:e3:
dc:30:1a:46:d1:57:8a:04:f2:1b:fb:00:f5:cf:02:
83:a3:ae:fe:7c:69:d5:b3:db:af:d4:af:a4:b8:83:
ff:ac:78:50:e0:a7:b3:05:9d:ef:0a:08:8d:95:1b:
e5:d7:88:76:c1:c6:5b:2b:43:5d:87:44:8f:6e:bd:
38:ac:47:28:09:44:99:66:34:81:c0:f7:24:5f:68:
6c:63:70:c4:81:cb:4b:68:0c:2d:19:81:f5:a9:26:
90:cc:b9:11:39:11:25:9c:6e:82:9d:0f:91:ab:be:
d1:01:d9:ea:c0:98:16:b1:9d:5d:be:7a:83:fc:f8:
ef:8c:be:31:a3:b6:d1:47:4d:08:92:06:5f:fc:8b:
a5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D9:86:A8:29:D6:F6:59:BD:34:3D:27:1D:DA:B8:8F:6B:EC:D3:11
X509v3 Authority Key Identifier:
keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/50E0E9BAEB5D11EE9C16F32FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.152.0/22
45.250.232.0/22
103.7.148.0/22
103.216.52.0/22
157.119.176.0/22
183.87.160.0/19
183.87.193.0-183.87.211.255
IPv6:
2403:7100::/32
Signature Algorithm: sha256WithRSAEncryption
cc:f8:70:90:95:25:e6:1f:14:87:13:83:35:63:1b:a2:28:22:
dc:24:4c:bf:58:5a:1c:70:8a:78:06:33:25:bb:d2:02:1a:ba:
72:40:75:45:27:3e:eb:be:fd:27:4b:7a:85:05:be:8e:bf:f5:
98:20:04:a1:91:de:fb:4b:a9:05:0c:ab:00:dc:2e:62:4d:99:
92:cd:c5:b3:54:84:e7:13:0c:a9:66:e6:e8:fe:99:df:66:45:
24:04:60:e4:3c:c4:db:83:24:ab:69:81:f9:a2:78:f9:4a:11:
4a:68:99:2a:5b:01:46:a2:c2:e0:c3:aa:aa:18:06:ee:4f:eb:
95:98:b0:72:9d:c4:ee:6a:99:b2:f3:f9:13:27:23:c6:64:c1:
43:f4:ae:87:7a:31:3a:f0:bb:0b:e6:fd:7e:60:91:a3:79:8c:
57:c4:e2:4b:cb:7a:d3:7f:ad:85:30:a1:e9:67:00:59:4e:8a:
a4:2f:e4:6d:7e:01:26:38:d9:af:30:ec:77:94:65:46:66:18:
2b:97:ab:b0:b6:78:2a:e1:f9:b9:94:7d:2e:dd:9b:f2:78:7f:
75:29:f6:46:a4:44:53:80:51:83:81:f5:f1:fd:53:bd:b7:f3:
13:0f:83:da:68:72:c1:9e:1f:1e:83:6b:a4:8e:2e:86:78:7e:
25:19:da:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 13:54:47 2024 by rpki-client on console-fra.rpki-client.org