Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0619E7E0D8AC11EB86F2ED30C4F9AE02.roa
File: 0619E7E0D8AC11EB86F2ED30C4F9AE02.roa (raw, json)
Hash identifier: IELiaC2p5bL1nQUmNjRrWkuyUxy+IAytSCIuDCTLBMQ=
Subject key identifier: 1F:76:72:4C:25:82:2E:08:82:27:92:35:08:D3:A6:4C:E6:C7:43:C7
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 71F2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0619E7E0D8AC11EB86F2ED30C4F9AE02.roa
Signing time: Fri 12 May 2023 05:12:11 +0000
ROA not before: Fri 12 May 2023 05:12:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132215
IP address blocks: 1.6.136.0/24 maxlen: 24
1.6.226.0/24 maxlen: 24
1.6.227.0/24 maxlen: 24
1.6.228.0/24 maxlen: 24
1.7.142.0/24 maxlen: 24
1.7.151.0/24 maxlen: 24
1.7.161.0/24 maxlen: 24
1.7.162.0/24 maxlen: 24
1.7.180.0/24 maxlen: 24
1.7.200.0/24 maxlen: 24
1.7.201.0/24 maxlen: 24
1.7.202.0/24 maxlen: 24
43.227.132.0/22 maxlen: 24
45.127.208.0/22 maxlen: 24
45.127.228.0/22 maxlen: 24
45.127.236.0/22 maxlen: 24
45.249.232.0/22 maxlen: 24
58.84.20.0/22 maxlen: 24
58.84.24.0/22 maxlen: 24
59.152.80.0/22 maxlen: 24
61.14.204.0/22 maxlen: 24
103.7.128.0/22 maxlen: 24
103.15.228.0/22 maxlen: 24
103.59.140.0/22 maxlen: 24
103.70.60.0/22 maxlen: 24
103.119.241.0/24 maxlen: 24
103.119.242.0/24 maxlen: 24
103.119.243.0/24 maxlen: 24
103.120.28.0/22 maxlen: 24
103.196.188.0/22 maxlen: 24
103.196.216.0/22 maxlen: 24
103.196.224.0/22 maxlen: 24
103.197.36.0/22 maxlen: 24
103.197.40.0/22 maxlen: 24
103.197.80.0/22 maxlen: 24
103.197.100.0/22 maxlen: 24
103.197.124.0/22 maxlen: 24
103.197.128.0/22 maxlen: 24
103.197.136.0/22 maxlen: 24
103.197.140.0/22 maxlen: 24
103.200.76.0/22 maxlen: 24
103.200.80.0/22 maxlen: 24
103.200.88.0/22 maxlen: 24
103.203.80.0/22 maxlen: 24
103.218.228.0/22 maxlen: 24
111.235.68.0/22 maxlen: 24
114.134.16.0/22 maxlen: 24
202.177.153.0/24 maxlen: 24
202.177.157.0/24 maxlen: 24
218.185.248.0/22 maxlen: 24
220.158.128.0/22 maxlen: 24
220.158.144.0/22 maxlen: 24
220.158.168.0/22 maxlen: 24
220.158.172.0/22 maxlen: 24
220.158.180.0/22 maxlen: 24
220.158.184.0/22 maxlen: 24
223.31.159.0/24 maxlen: 24
2407:f700::/32 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29170 (0x71f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 12 05:12:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645dcaab-1f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d0:61:cc:94:bc:23:ad:b6:2a:10:dd:25:d1:
1a:09:35:0a:24:71:b9:80:e1:27:5e:7a:20:d2:b3:
b1:43:bf:b5:ba:3d:67:41:97:fd:df:e6:41:be:b2:
8c:90:ac:4d:0f:2c:e1:80:e5:b7:8f:b5:2b:eb:9e:
be:54:15:2b:e5:0b:ee:bf:32:58:29:b2:29:7b:e2:
6e:dd:ee:92:2b:7c:46:8f:14:9e:8c:60:97:60:a3:
9b:ca:75:e8:01:c5:98:25:5a:df:09:a2:91:b1:20:
2a:80:96:b8:1f:22:bc:63:34:ee:bc:45:b2:8f:20:
3a:9c:62:5e:4c:a1:07:0e:e6:ef:f8:03:ac:c9:ca:
d8:22:b8:ce:16:61:e9:a8:28:73:20:bd:14:03:43:
ed:6a:e3:87:d7:3b:fe:c3:c6:f6:e7:b9:aa:8a:f2:
6d:ac:c2:0f:d2:74:3d:50:bd:4b:ac:8c:9d:95:61:
f3:c0:41:49:25:2a:4d:95:3b:d2:c2:7a:e4:0c:87:
76:ca:c7:9d:2c:1e:57:b3:43:74:68:2d:ae:f8:ba:
2e:a4:fa:82:70:c0:1b:b4:83:30:2e:93:f2:38:ed:
f1:1d:73:ce:aa:a9:98:db:3b:2e:d4:2e:7e:b8:1b:
8a:d2:6e:5f:66:36:6e:b7:50:c2:0a:88:96:40:a7:
39:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:76:72:4C:25:82:2E:08:82:27:92:35:08:D3:A6:4C:E6:C7:43:C7
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0619E7E0D8AC11EB86F2ED30C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.6.136.0/24
1.6.226.0-1.6.228.255
1.7.142.0/24
1.7.151.0/24
1.7.161.0-1.7.162.255
1.7.180.0/24
1.7.200.0-1.7.202.255
43.227.132.0/22
45.127.208.0/22
45.127.228.0/22
45.127.236.0/22
45.249.232.0/22
58.84.20.0-58.84.27.255
59.152.80.0/22
61.14.204.0/22
103.7.128.0/22
103.15.228.0/22
103.59.140.0/22
103.70.60.0/22
103.119.241.0-103.119.243.255
103.120.28.0/22
103.196.188.0/22
103.196.216.0/22
103.196.224.0/22
103.197.36.0-103.197.43.255
103.197.80.0/22
103.197.100.0/22
103.197.124.0-103.197.131.255
103.197.136.0/21
103.200.76.0-103.200.83.255
103.200.88.0/22
103.203.80.0/22
103.218.228.0/22
111.235.68.0/22
114.134.16.0/22
202.177.153.0/24
202.177.157.0/24
218.185.248.0/22
220.158.128.0/22
220.158.144.0/22
220.158.168.0/21
220.158.180.0-220.158.187.255
223.31.159.0/24
IPv6:
2407:f700::/32
Signature Algorithm: sha256WithRSAEncryption
60:65:03:fb:6e:6c:2a:45:ed:fc:67:08:f8:a8:e5:72:43:17:
8e:71:3b:15:33:09:12:eb:62:3c:72:10:3b:02:d7:cf:e0:5a:
80:56:0f:92:4b:2e:f9:64:c3:c9:f2:59:37:78:d8:af:52:f3:
c7:c8:07:06:41:03:35:dd:63:1c:1c:02:86:fd:fa:e5:f9:29:
1b:ff:75:5e:7a:2a:eb:34:71:5c:45:a7:8c:cc:d4:ed:3c:e8:
d2:49:30:b8:7c:4b:d4:a5:31:c1:93:f1:85:f5:da:8f:98:e2:
07:cc:fb:2f:8b:e1:61:40:c1:40:96:ab:e4:b1:06:05:94:cd:
8a:c2:04:82:a2:d0:9c:d9:7e:6c:d5:86:65:31:df:ee:44:37:
60:ea:67:16:2b:ad:bc:30:67:d7:a4:33:c6:ee:c9:4e:24:33:
a6:70:4a:67:4b:46:94:15:c1:76:a3:5e:d9:55:0f:57:6d:b0:
a8:16:ec:f9:70:86:cf:28:05:d3:a9:cd:98:c7:d4:9d:31:cd:
f1:cd:13:06:15:34:a4:81:80:e3:0f:6b:fc:23:37:11:22:76:
2b:13:3b:e8:2b:5a:da:48:69:74:bb:4e:86:82:32:68:29:2e:
a6:24:64:df:48:53:eb:99:ae:bd:ba:a3:b2:b0:42:c2:67:ef:
bd:97:d2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 07:50:39 2023 by rpki-client on console-fra.rpki-client.org