Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/75C9BDE6895C11EE9B3A0812C4F9AE02.roa
File: 75C9BDE6895C11EE9B3A0812C4F9AE02.roa (raw, json)
Hash identifier: ouUWlygVdgYQZUEl3p6KSYAWj+nTiU61cWdTWnZDPq8=
Subject key identifier: 7F:8E:AD:5A:F1:3A:4E:3E:17:7E:0A:46:43:1B:A4:36:95:B2:C8:93
Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Certificate serial: 06E0
Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/75C9BDE6895C11EE9B3A0812C4F9AE02.roa
Signing time: Wed 22 Nov 2023 17:33:36 +0000
ROA not before: Wed 22 Nov 2023 17:33:36 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 17747
IP address blocks: 45.117.200.0/24 maxlen: 24
45.117.201.0/24 maxlen: 24
45.117.202.0/24 maxlen: 24
45.117.203.0/24 maxlen: 24
45.117.204.0/24 maxlen: 24
45.117.205.0/24 maxlen: 24
45.117.206.0/24 maxlen: 24
45.117.207.0/24 maxlen: 24
45.126.160.0/24 maxlen: 24
45.126.161.0/24 maxlen: 24
45.126.162.0/24 maxlen: 24
45.126.163.0/24 maxlen: 24
103.24.188.0/24 maxlen: 24
103.24.189.0/24 maxlen: 24
103.24.190.0/24 maxlen: 24
103.24.191.0/24 maxlen: 24
103.57.236.0/24 maxlen: 24
103.57.237.0/24 maxlen: 24
103.57.238.0/24 maxlen: 24
103.57.239.0/24 maxlen: 24
103.57.240.0/24 maxlen: 24
103.57.241.0/24 maxlen: 24
103.57.242.0/24 maxlen: 24
103.57.243.0/24 maxlen: 24
103.57.244.0/24 maxlen: 24
103.57.245.0/24 maxlen: 24
103.57.246.0/24 maxlen: 24
103.57.247.0/24 maxlen: 24
103.70.208.0/24 maxlen: 24
103.70.209.0/24 maxlen: 24
103.70.210.0/24 maxlen: 24
103.70.211.0/24 maxlen: 24
103.225.176.0/24 maxlen: 24
103.225.177.0/24 maxlen: 24
103.225.178.0/24 maxlen: 24
103.225.179.0/24 maxlen: 24
103.244.4.0/24 maxlen: 24
103.244.5.0/24 maxlen: 24
103.244.6.0/24 maxlen: 24
103.244.7.0/24 maxlen: 24
150.107.10.0/24 maxlen: 24
150.107.11.0/24 maxlen: 24
150.129.124.0/24 maxlen: 24
150.129.125.0/24 maxlen: 24
150.129.126.0/24 maxlen: 24
150.129.127.0/24 maxlen: 24
202.142.64.0/24 maxlen: 24
202.142.65.0/24 maxlen: 24
202.142.66.0/24 maxlen: 24
202.142.67.0/24 maxlen: 24
202.142.68.0/24 maxlen: 24
202.142.69.0/24 maxlen: 24
202.142.70.0/24 maxlen: 24
202.142.71.0/24 maxlen: 24
202.142.72.0/24 maxlen: 24
202.142.73.0/24 maxlen: 24
202.142.74.0/24 maxlen: 24
202.142.75.0/24 maxlen: 24
202.142.76.0/24 maxlen: 24
202.142.77.0/24 maxlen: 24
202.142.78.0/24 maxlen: 24
202.142.79.0/24 maxlen: 24
202.142.81.0/24 maxlen: 24
202.142.83.0/24 maxlen: 24
202.142.85.0/24 maxlen: 24
202.142.86.0/24 maxlen: 24
202.142.87.0/24 maxlen: 24
202.142.89.0/24 maxlen: 24
202.142.90.0/24 maxlen: 24
202.142.91.0/24 maxlen: 24
202.142.92.0/24 maxlen: 24
202.142.93.0/24 maxlen: 24
202.142.95.0/24 maxlen: 24
202.142.96.0/24 maxlen: 24
202.142.97.0/24 maxlen: 24
202.142.98.0/24 maxlen: 24
202.142.99.0/24 maxlen: 24
202.142.100.0/24 maxlen: 24
202.142.101.0/24 maxlen: 24
202.142.102.0/24 maxlen: 24
202.142.103.0/24 maxlen: 24
202.142.104.0/24 maxlen: 24
202.142.105.0/24 maxlen: 24
202.142.106.0/24 maxlen: 24
202.142.107.0/24 maxlen: 24
202.142.110.0/24 maxlen: 24
202.142.112.0/24 maxlen: 24
202.142.113.0/24 maxlen: 24
202.142.114.0/24 maxlen: 24
202.142.115.0/24 maxlen: 24
202.142.118.0/24 maxlen: 24
202.142.119.0/24 maxlen: 24
202.142.120.0/24 maxlen: 24
202.142.123.0/24 maxlen: 24
202.142.124.0/24 maxlen: 24
202.142.125.0/24 maxlen: 24
202.142.126.0/24 maxlen: 24
202.142.127.0/24 maxlen: 24
2406:3c80::/48 maxlen: 48
2406:3c80:1::/48 maxlen: 48
2406:3c80:2::/48 maxlen: 48
2406:3c80:3::/48 maxlen: 48
2406:3c80:4::/48 maxlen: 48
2406:3c80:5::/48 maxlen: 48
2406:3c80:6::/48 maxlen: 48
2406:3c80:7::/48 maxlen: 48
2406:3c80:8::/48 maxlen: 48
2406:3c80:400::/48 maxlen: 48
2406:3c80:401::/48 maxlen: 48
2406:3c80:402::/48 maxlen: 48
2406:3c80:403::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1760 (0x6e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Validity
Not Before: Nov 22 17:33:36 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=655e3b6f-5320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:17:52:04:bd:64:78:ed:8e:32:05:80:a1:6e:
4d:20:27:c8:7b:97:02:fc:03:92:f1:f6:9f:a4:b7:
fa:26:01:d1:5a:e0:96:cc:1f:fe:44:4a:f6:f3:aa:
4d:d8:f9:fc:b9:cd:51:22:95:1f:a9:39:62:85:56:
d6:1b:80:ce:41:ec:4a:f2:db:a2:b5:31:f9:7f:f8:
16:9a:dc:62:60:b0:8b:d0:aa:e0:fb:e4:85:12:3a:
2a:89:31:ee:bc:8f:80:bc:69:3c:3b:78:b5:45:90:
3c:70:fe:4a:66:9e:5a:92:8a:a4:0f:0e:83:fc:d0:
9d:47:a7:d6:9c:0f:11:c6:5d:94:82:0e:1f:8b:f8:
35:37:d6:da:05:9c:33:99:42:44:15:40:8b:89:d5:
6a:26:ec:d0:3f:a6:e2:86:62:3e:e2:07:6f:41:ee:
3c:f3:da:fa:6c:94:02:be:3b:c1:d8:61:eb:80:81:
0f:77:83:2c:60:e6:11:65:e2:be:08:33:c3:aa:59:
0e:90:4b:d0:03:73:63:03:b5:13:33:5f:a3:08:42:
ff:4a:14:b3:54:c9:85:92:92:ff:5e:8f:b6:5d:a3:
32:d1:74:e5:71:34:4c:60:56:82:d2:e3:52:20:d7:
2d:af:55:90:ff:15:f3:01:2b:c5:2c:72:c2:66:2f:
f6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8E:AD:5A:F1:3A:4E:3E:17:7E:0A:46:43:1B:A4:36:95:B2:C8:93
X509v3 Authority Key Identifier:
keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/75C9BDE6895C11EE9B3A0812C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.200.0/21
45.126.160.0/22
103.24.188.0/22
103.57.236.0-103.57.247.255
103.70.208.0/22
103.225.176.0/22
103.244.4.0/22
150.107.10.0/23
150.129.124.0/22
202.142.64.0/20
202.142.81.0/24
202.142.83.0/24
202.142.85.0-202.142.87.255
202.142.89.0-202.142.93.255
202.142.95.0-202.142.107.255
202.142.110.0/24
202.142.112.0/22
202.142.118.0-202.142.120.255
202.142.123.0-202.142.127.255
IPv6:
2406:3c80::-2406:3c80:8:ffff:ffff:ffff:ffff:ffff
2406:3c80:400::/46
Signature Algorithm: sha256WithRSAEncryption
29:35:86:51:f4:7f:db:f2:7d:87:35:ba:39:52:f2:95:16:dd:
e4:5d:3b:e0:eb:21:79:bb:9a:7a:93:85:b8:0a:07:62:a8:3a:
1b:5a:df:bc:3d:b6:29:82:4c:6f:4f:26:24:04:66:a6:6d:61:
2d:92:f9:ed:15:8f:4d:6a:fc:7a:bf:49:d8:81:80:f9:27:60:
03:06:66:f5:48:95:76:7c:49:3f:4a:5d:38:9b:d8:ae:99:98:
00:2d:17:70:ac:3a:45:f9:d3:25:81:a4:19:02:1b:82:cb:29:
e8:02:0d:6f:fb:ac:c8:68:d5:d3:aa:3b:ec:74:33:ee:bb:bb:
53:4b:73:7e:10:94:92:93:34:92:2e:d3:0a:93:a2:53:c3:e0:
15:b1:1e:f6:98:65:13:35:4f:e5:02:1f:7d:30:d3:5d:ac:a4:
ea:39:0f:39:7e:42:e4:72:88:fc:08:32:de:66:52:4d:4a:bb:
79:6e:5c:86:69:8c:d0:65:93:ac:d2:f1:ae:0f:cf:0d:02:1f:
50:8f:34:7a:01:f3:62:1b:bd:31:83:45:45:0a:e8:7d:b9:e0:
b5:69:9f:1e:d9:02:47:ad:25:bd:fb:6e:ed:94:6a:62:d0:7b:
71:ca:bc:f2:e8:10:6a:7f:f7:da:06:e0:89:0b:3e:c2:41:9d:
3c:cc:31:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 19:06:36 2023 by rpki-client on console-fra.rpki-client.org