Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/332E709CD77911EEBE6D5861C4F9AE02.roa
File: 332E709CD77911EEBE6D5861C4F9AE02.roa (raw, json)
Hash identifier: kZmEkk58xuWr5shPoRChhv0kmxX7E2cHI6SEqPY4WNw=
Subject key identifier: BE:A2:4F:8B:7D:F6:06:88:21:3F:69:3D:82:8E:B6:06:78:0F:90:67
Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
Certificate serial: 08FE
Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/332E709CD77911EEBE6D5861C4F9AE02.roa
Signing time: Fri 01 Mar 2024 04:00:40 +0000
ROA not before: Fri 01 Mar 2024 04:00:40 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 152194
IP address blocks: 134.122.136.0/22 maxlen: 24
134.122.144.0/21 maxlen: 24
134.122.152.0/22 maxlen: 24
134.122.156.0/22 maxlen: 24
134.122.160.0/24 maxlen: 24
134.122.161.0/24 maxlen: 24
134.122.163.0/24 maxlen: 24
134.122.164.0/22 maxlen: 24
134.122.192.0/21 maxlen: 24
134.122.208.0/21 maxlen: 24
134.122.216.0/21 maxlen: 24
134.122.224.0/21 maxlen: 24
134.122.248.0/21 maxlen: 24
137.220.128.0/22 maxlen: 24
137.220.133.0/24 maxlen: 24
137.220.136.0/23 maxlen: 24
137.220.144.0/20 maxlen: 24
137.220.160.0/19 maxlen: 24
137.220.192.0/18 maxlen: 24
143.92.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Mar 2024 13:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2302 (0x8fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32
Validity
Not Before: Mar 1 04:00:40 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65e152e8-7cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:eb:fc:a2:d8:8d:20:7d:f2:0b:2b:72:60:0c:
30:51:b0:f6:0b:81:2e:07:7a:1c:55:aa:c5:c0:78:
5b:b5:81:88:67:90:d4:3f:19:5b:a4:cf:18:7c:78:
b7:ec:37:c2:27:19:72:66:65:b8:db:e0:02:dd:da:
94:31:0b:35:87:9e:b7:6a:40:3b:7f:32:b0:f9:9d:
15:a0:4b:46:7f:1b:a9:4b:37:bc:17:97:ff:f2:1d:
e2:90:35:92:25:b6:96:0e:0d:34:48:84:0c:09:41:
33:4e:e6:49:3c:b0:03:72:97:ce:54:06:f3:4f:3f:
94:58:5c:c1:fc:29:ae:aa:f6:f3:d3:a7:05:4a:09:
d9:35:7f:55:6a:56:69:c9:e6:20:3f:c2:0d:50:6a:
2f:90:84:1a:bf:c1:f1:b5:08:55:99:22:95:21:79:
29:0d:da:07:d8:6d:dc:cb:34:f9:14:e7:e2:3b:c9:
7a:49:45:42:00:cf:4a:95:43:af:52:0e:77:7b:c9:
f3:06:f3:3f:df:3f:8c:93:9b:e8:cd:49:a2:c7:09:
50:ac:39:c3:22:35:23:6b:a4:74:06:0c:3b:1b:66:
a0:46:d1:54:7a:ad:bb:5f:dc:0d:8f:03:4f:95:cc:
27:40:7d:65:a3:18:e7:cc:43:72:0e:3a:02:45:72:
a0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A2:4F:8B:7D:F6:06:88:21:3F:69:3D:82:8E:B6:06:78:0F:90:67
X509v3 Authority Key Identifier:
keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/332E709CD77911EEBE6D5861C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
134.122.136.0/22
134.122.144.0-134.122.161.255
134.122.163.0-134.122.167.255
134.122.192.0/21
134.122.208.0-134.122.231.255
134.122.248.0/21
137.220.128.0/22
137.220.133.0/24
137.220.136.0/23
137.220.144.0-137.220.255.255
143.92.44.0/22
Signature Algorithm: sha256WithRSAEncryption
07:f0:4c:5d:da:17:8b:7c:ed:cd:37:16:57:39:08:f5:ae:0e:
f9:06:6e:c3:15:10:7b:93:10:8b:d6:4c:68:43:3c:96:52:e4:
4f:89:d3:77:80:c1:55:ea:c0:09:48:aa:8d:f0:bd:f1:b9:7a:
c6:4a:29:92:b6:77:5e:85:56:4d:93:64:81:fe:0d:01:2e:a1:
bc:0b:3c:b5:2d:c1:2e:e4:77:05:6d:29:50:ad:b9:a5:44:4c:
d6:9b:cb:6a:3f:d5:a9:6a:8a:f2:3f:73:8f:72:df:03:1f:39:
0a:74:b3:61:70:17:b4:cc:05:fc:a2:c5:66:35:66:c2:94:7d:
ba:b4:c7:c2:c3:62:65:89:6b:96:c5:28:80:f5:23:12:78:f1:
1d:90:da:40:08:86:2c:03:25:92:e3:29:f0:c8:9e:90:e1:b5:
61:aa:87:8e:36:a7:db:4e:c7:b0:c4:0a:40:d5:df:4a:96:4d:
28:53:86:f6:e6:19:ca:16:10:3a:46:14:52:0e:d1:4a:3c:7d:
78:4b:b6:27:c5:de:81:61:bf:0f:f5:9a:44:5d:5e:ac:e1:03:
cb:dc:06:e2:3b:69:97:d6:8e:ad:27:6d:1b:69:a5:69:ce:bf:
f3:9d:42:13:6a:d6:4a:dd:72:e7:7c:0b:cd:85:2b:06:32:c1:
14:a1:00:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:15 2024 by rpki-client on console-fra.rpki-client.org