Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/35396714FF9A11EDB8B80D60C4F9AE02.roa
File: 35396714FF9A11EDB8B80D60C4F9AE02.roa (raw, json)
Hash identifier: OhNFUf8HXmGaTvsg8uEsfo/eCW9hrV7LFD3huv3Ynsc=
Subject key identifier: 88:2B:AD:98:98:1D:43:2E:24:84:B2:4F:62:06:46:EE:96:BA:FA:7A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7309
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/35396714FF9A11EDB8B80D60C4F9AE02.roa
Signing time: Wed 31 May 2023 10:02:10 +0000
ROA not before: Wed 31 May 2023 10:02:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24186
IP address blocks: 27.111.72.0/22 maxlen: 24
27.112.120.0/22 maxlen: 24
27.116.40.0/22 maxlen: 24
27.122.60.0/22 maxlen: 24
36.255.12.0/22 maxlen: 24
36.255.16.0/22 maxlen: 24
45.115.88.0/22 maxlen: 24
45.121.0.0/22 maxlen: 24
103.15.252.0/22 maxlen: 24
103.28.244.0/22 maxlen: 24
103.30.64.0/22 maxlen: 24
103.30.116.0/22 maxlen: 24
103.30.176.0/22 maxlen: 24
103.55.72.0/22 maxlen: 24
103.61.72.0/22 maxlen: 24
103.66.72.0/22 maxlen: 24
103.66.76.0/22 maxlen: 24
103.74.108.0/22 maxlen: 24
103.76.208.0/22 maxlen: 22
103.76.208.0/24 maxlen: 24
103.76.209.0/24 maxlen: 24
103.76.210.0/24 maxlen: 24
103.76.211.0/24 maxlen: 24
103.82.80.0/22 maxlen: 24
103.82.144.0/23 maxlen: 24
103.82.146.0/23 maxlen: 24
103.163.177.0/24 maxlen: 24
103.197.112.0/22 maxlen: 24
103.199.180.0/22 maxlen: 24
103.199.188.0/22 maxlen: 24
103.199.200.0/22 maxlen: 24
103.199.204.0/22 maxlen: 24
103.199.208.0/22 maxlen: 24
103.199.212.0/22 maxlen: 24
103.200.84.0/22 maxlen: 24
103.201.134.0/23 maxlen: 24
103.203.72.0/22 maxlen: 24
103.208.228.0/22 maxlen: 24
103.208.232.0/22 maxlen: 24
103.210.88.0/22 maxlen: 24
103.210.92.0/22 maxlen: 24
103.210.100.0/22 maxlen: 24
103.229.0.0/24 maxlen: 24
103.246.40.0/22 maxlen: 24
103.246.192.0/22 maxlen: 24
103.247.4.0/22 maxlen: 24
103.247.52.0/22 maxlen: 24
112.133.192.0/18 maxlen: 24
120.138.12.0/22 maxlen: 24
122.252.224.0/19 maxlen: 24
137.59.92.0/22 maxlen: 24
139.5.0.0/22 maxlen: 24
139.5.4.0/22 maxlen: 24
139.5.8.0/22 maxlen: 24
180.94.32.0/22 maxlen: 24
202.21.40.0/22 maxlen: 24
202.21.44.0/22 maxlen: 24
202.43.120.0/22 maxlen: 24
202.140.128.0/22 maxlen: 24
202.148.56.0/22 maxlen: 24
202.168.84.0/22 maxlen: 24
202.170.200.0/22 maxlen: 24
202.170.204.0/22 maxlen: 24
202.176.0.0/22 maxlen: 24
203.153.32.0/20 maxlen: 20
203.153.32.0/24 maxlen: 24
203.153.33.0/24 maxlen: 24
203.153.34.0/24 maxlen: 24
203.153.35.0/24 maxlen: 24
203.153.36.0/24 maxlen: 24
203.153.37.0/24 maxlen: 24
203.153.38.0/24 maxlen: 24
203.153.39.0/24 maxlen: 24
203.153.40.0/24 maxlen: 24
203.153.41.0/24 maxlen: 24
203.153.42.0/24 maxlen: 24
203.153.43.0/24 maxlen: 24
203.153.44.0/24 maxlen: 24
203.153.45.0/24 maxlen: 24
203.153.46.0/24 maxlen: 24
203.153.47.0/24 maxlen: 24
218.185.252.0/22 maxlen: 24
220.158.156.0/22 maxlen: 24
2401:b200::/32 maxlen: 48
2406:f00:7::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29449 (0x7309)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 10:02:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64771b22-07d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bd:15:b6:e7:32:f4:c2:2c:aa:65:52:59:72:
00:b0:e9:16:e2:f7:47:a0:52:c4:2f:79:8c:fb:89:
90:24:ea:0f:a7:a2:b3:1a:d4:cb:02:33:38:bd:0c:
06:2e:c0:1c:af:b1:2a:97:93:17:38:0c:1e:62:9a:
c7:58:b8:ac:91:48:f3:94:22:5a:a4:a1:ac:1a:04:
e3:25:30:fb:07:9b:62:11:fc:53:59:6c:b8:80:49:
b8:7b:8b:7c:d5:b2:74:f1:5c:5b:c0:2a:b7:85:62:
c8:ad:8b:13:8b:1d:45:ed:a9:65:eb:d5:21:90:97:
d6:fe:e4:83:ba:37:02:56:99:fb:de:d4:f6:2f:16:
61:6c:48:66:c2:41:71:85:0f:19:31:46:99:f1:c2:
9a:9a:bc:3f:ed:82:38:da:42:ff:38:f7:3c:30:ba:
a9:f9:56:39:8c:83:71:98:34:b8:47:41:dd:75:f2:
4e:99:e5:ea:ba:7c:6c:a3:9b:32:84:25:e8:2b:45:
6f:44:b3:48:ae:43:7d:04:9b:65:ca:84:57:aa:6f:
cf:af:52:27:7e:00:72:e2:dd:3e:9c:9a:c3:04:7c:
91:a1:a2:ea:51:f4:a3:a2:35:d5:04:48:94:26:f7:
22:52:e9:e3:4a:8c:da:12:cb:52:b5:80:8b:a8:da:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2B:AD:98:98:1D:43:2E:24:84:B2:4F:62:06:46:EE:96:BA:FA:7A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/35396714FF9A11EDB8B80D60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.111.72.0/22
27.112.120.0/22
27.116.40.0/22
27.122.60.0/22
36.255.12.0-36.255.19.255
45.115.88.0/22
45.121.0.0/22
103.15.252.0/22
103.28.244.0/22
103.30.64.0/22
103.30.116.0/22
103.30.176.0/22
103.55.72.0/22
103.61.72.0/22
103.66.72.0/21
103.74.108.0/22
103.76.208.0/22
103.82.80.0/22
103.82.144.0/22
103.163.177.0/24
103.197.112.0/22
103.199.180.0/22
103.199.188.0/22
103.199.200.0-103.199.215.255
103.200.84.0/22
103.201.134.0/23
103.203.72.0/22
103.208.228.0-103.208.235.255
103.210.88.0/21
103.210.100.0/22
103.229.0.0/24
103.246.40.0/22
103.246.192.0/22
103.247.4.0/22
103.247.52.0/22
112.133.192.0/18
120.138.12.0/22
122.252.224.0/19
137.59.92.0/22
139.5.0.0-139.5.11.255
180.94.32.0/22
202.21.40.0/21
202.43.120.0/22
202.140.128.0/22
202.148.56.0/22
202.168.84.0/22
202.170.200.0/21
202.176.0.0/22
203.153.32.0/20
218.185.252.0/22
220.158.156.0/22
IPv6:
2401:b200::/32
2406:f00:7::/48
Signature Algorithm: sha256WithRSAEncryption
a1:04:c0:b1:65:97:8a:78:b4:4d:79:84:90:99:f6:27:3a:c2:
95:e6:c3:01:74:3d:9e:7e:4a:7b:de:e8:53:c8:12:62:e7:40:
f7:d6:2d:d4:15:cd:00:0a:e3:29:30:3c:33:b9:1b:9f:48:9f:
90:ce:c3:55:48:ac:8c:2b:32:39:6d:f0:0a:7d:35:c2:95:1a:
4d:db:e1:31:45:bf:cb:9b:79:1c:3b:8e:7b:29:c3:a3:01:3c:
85:0f:be:a1:19:1c:ca:4f:29:5b:79:3b:bc:06:26:a5:19:0e:
45:6a:a0:84:e4:53:d8:c9:33:3c:bf:54:15:64:0c:52:8a:e0:
7d:59:e2:76:4c:45:ff:7f:7f:69:1d:32:48:07:4f:28:11:c4:
dc:b3:62:7d:d7:83:12:4f:f7:27:8d:01:9f:bf:26:b8:63:30:
f4:6b:20:15:6c:4a:a0:08:13:cf:eb:db:08:b8:8a:92:dc:93:
09:f2:4a:9c:02:53:68:f6:7f:c4:2c:ae:db:4e:97:a8:42:e4:
ff:20:0d:02:0b:f6:c3:8e:db:d5:14:8f:b4:3d:71:56:af:aa:
a5:c0:f1:e1:b7:0b:31:af:36:64:0a:bd:6c:78:6b:fe:76:fb:
d9:74:9d:75:42:98:13:68:e8:c4:d7:b1:c3:df:f3:73:59:e9:
28:b5:9a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:52 2023 by rpki-client on console-fra.rpki-client.org